An organization has purchased a replacement mainframe computer to cope with the demands of increased business. Which of the following should be the PRIMARY concern of an IS auditor?

• A.Application access controls are adequate.
• B.The procurement is within the planned budget for the year.
• C.Appropriate tender evaluation processes have been followed.
• D.The disaster recovery plan has been reviewed and updated.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to enforce the principle of least privilege on a server containing data with different security classifications?

• A.Limiting access to the data files based on frequency of use
• B.Obtaining formal agreement by users to comply with the data classification policy
• C.Applying access controls determined by the data owner
• D.Using scripted access control lists to prevent unauthorized access to the server

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST method for preventing the leakage of confidential information in a laptop computer?

• A.Encrypt the hard disk with the owner's public key.
• B.Enable the boot password (hardware-based password).
• C.Use a biometric authentication device.
• D.Use two-factor authentication to logon to the notebook.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would present the risk to the effectiveness of a security operations center for a global financial institution processing transactions 24*7?

• A.Incident response reporting is based on open source software.
• B.The incident response function is outsourced to a third-party provider.
• C.Incident response is conducted from a single location during normal business hours.
• D.Correlation of events excludes logs for pre-production systems.

Comment: *

Name: *

Email: *

Verification: *

Loading of illegal software packages onto a network by an employee is MOST effectively detected by:

• A.regular scanning of hard drives
• B.diskless workstations
• C.maintaining current antivirus software
• D.logging of activity on network drives

Comment: *

Name: *

Email: *

Verification: *