Which of the following is the PRIMARY concern if a business continuity plan (BCP) is not based on a business impact analysis (BIA)?

• A.The critical systems were not identified, but all systems are covered in the BCP.
• B.The knowledge of key people within the organization was not considered in the BCP.
• C.The strategy of the BCP does not reflect estimated potential losses.
• D.Management was not involved in the early stages of the BCP.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important consideration when developing an incident response program?

• A.Senior management support
• B.Technical skills of response staff
• C.Number of dedicated response staff
• D.Incident response procedures

Comment: *

Name: *

Email: *

Verification: *

An IS auditor finds that the process for removing access for terminated employee is not documented. What is the MOST significant risk from this observation?

• A.Access rights may not be removed in a timely manner
• B.Procedures may not align with the practices
• C.HR records may not match system access
• D.Unauthorized access cannot be identified

Comment: *

Name: *

Email: *

Verification: *

In wireless communication, which of the following controls allows the device receiving the communications to verify that the received communications have not been altered in transit?

• A.Device authentication and data origin authentication
• B.Wireless intrusion detection (IDS) and prevention systems (IPS)
• C.The use of cryptographic hashes
• D.Packet headers and trailers

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST reliable way for an IS auditor to evaluate the operational effectiveness of an organization's data loss prevention (DLP) controls?

• A.Verify that confidential files cannot be transmitted to a personal USB device.
• B.Conduct interviews to identify possible data protection vulnerabilities.
• C.Review data classification levels based on industry best practice.
• D.Verify that current DLP software is installed on all computer systems.

Comment: *

Name: *

Email: *

Verification: *