Which of the following should be done FIRST to minimize the risk of unstructured data?

• A.Identify repositories of unstructured data.
• B.Purchase tools to analyze unstructured data.
• C.Implement strong encryption for unstructured data.
• D.Implement user access controls to unstructured data.

Comment: *

Name: *

Email: *

Verification: *

During an exit meeting, an IS auditor highlights that backup cycles
are being missed due to operator error and that these exceptions
are not being managed. Which of the following is the BEST way to
help management understand the associated risk?

• A.Explain the impact to resource requirements.
• B.Explain the impact to disaster recovery.
• C.Explain the impact to incident management.
• D.Explain the impact to backup scheduling.

Comment: *

Name: *

Email: *

Verification: *

A vendor requires privileged access to a key business application. Which of the following is the BEST recommendation to reduce the risk of data leakage?

• A.Require the vendor to implement job rotation for privileged roles
• B.Perform a review of privileged roles and responsibilities
• C.Implement real-time activity monitoring for privileged roles
• D.Include the right-to-audit in the vendor contract

Comment: *

Name: *

Email: *

Verification: *

The waterfall life cycle model of software development is BEST suited for which of the following situations?

• A.The project intends to apply an object-oriented design approach.
• B.The project will involve the use of new technology.
• C.The project is subject to time pressures.
• D.The protect requirements are wall understood.

Comment: *

Name: *

Email: *

Verification: *

Malicious program code was found in an application and corrected prior to release into production. After the release, the same issue was reported. Which of the following is the IS auditor's BEST recommendation?

• A.Ensure the business signs off on end-to-end user acceptance test (UAT) results.
• B.Ensure programmers cannot access code after the completion of program edits.
• C.Ensure change management reports are independently reviewed.
• D.Ensure corrected program code is compiled in a dedicated server.

Comment: *

Name: *

Email: *

Verification: *