Which of the following issues associated with a data center's closed circuit television (CCTV) surveillance cameras should be of MOST concern to an IS auditor?

• A.CCTV cameras are not installed in break rooms
• B.CCTV recordings are not regularly reviewed.
• C.CCTV records are deleted after one year.
• D.CCTV footage is not recorded 24 x 7.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of GREATEST concern to an IS auditor reviewing a network printer disposal process?

• A.Evidence is not available to verify printer hard drives have been sanitized prior to disposal.
• B.Disposal policies and procedures are not consistently implemented
• C.Business units are allowed to dispose printers directly to
• D.Inoperable printers are stored in an unsecured area.

Comment: *

Name: *

Email: *

Verification: *

Which of the following types of attack involves a program that creates an infinite loop, makes lots of copies of itself, and continues to open lots of files?

• A.Local DoS attacks
• B.Remote DoS attacks
• C.Distributed DoS attacks
• D.Local Virus attacks
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important for an IS auditor to verify when reviewing the use of an outsourcer for disposal of storage media?

• A.The vendor's process appropriately sanitizes the media before disposal
• B.The contract includes issuance of a certificate of destruction by the vendor
• C.The vendor has not experienced security incidents in the past.
• D.The disposal transportation vehicle is fully secure

Comment: *

Name: *

Email: *

Verification: *

During a change control audit of a production system, an IS auditor finds that the change management
process is not formally documented and that some migration procedures failed. What should the IS auditor
do next?

• A.Recommend redesigning the change management process.
• B.Gain more assurance on the findings through root cause analysis.
• C.Recommend that program migration be stopped until the change process is documented.
• D.Document the finding and present it to management.

Comment: *

Name: *

Email: *

Verification: *