An IS auditor's PRIMARY concern when application developers wish to use a copy of yesterday's production transaction file for volume tests is that:

• A.users may prefer to use contrived data for testing.
• B.unauthorized access to sensitive data may result.
• C.error handling and credibility checks may not be fully proven.
• D.the full functionality of the new process may not necessarily be tested.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor reviewing a production support team's incident management procedures is evaluating whether appropriate prioritization criteria have been defined. Which of the following is MOST important to include as part of the prioritization criteria?

• A.Cost to restore
• B.Business impact
• C.Restore point
• D.Time to repair

Comment: *

Name: *

Email: *

Verification: *

Which of the following is of greatest concern to the IS auditor?

• A.Failure to report a successful attack on the network
• B.Failure to prevent a successful attack on the network
• C.Failure to recover from a successful attack on the network
• D.Failure to detect a successful attack on the network

Comment: *

Name: *

Email: *

Verification: *

What process allows IS management to determine whether the activities of the organization differ from the planned or expected levels?

• A.Business impact assessment
• B.Risk assessment
• C.IS assessment methods
• D.Key performance indicators (KPIs)

Comment: *

Name: *

Email: *

Verification: *

The reason for establishing a stop or freezing point on the design of a new system is to:

• A.prevent further changes to a project in process.
• B.indicate the point at which the design is to be completed.
• C.require that changes after that point be evaluated for cost-effectiveness.
• D.provide the project management team with more control over the project design.

Comment: *

Name: *

Email: *

Verification: *