When auditing security for a data center, an IS auditor should look for the presence of a voltage regulator to ensure that the:

• A.hardware is protected against power surges.
• B.integrity is maintained if the main power is interrupted.
• C.immediate power will be available if the main power is lost.
• D.hardware is protected against long-term power fluctuations.

Comment: *

Name: *

Email: *

Verification: *

During the requirements definition phase for a database application, performance is listed as a top priority.
To access the DBMS files, which of the following technologies should be recommended for optimal I/O performance?

• A.Storage area network (SAN)
• B.Network Attached Storage (NAS)
• C.Network file system (NFS v2)
• D.Common Internet File System (CIFS)

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics would be MOST useful to an IS auditor when assessing the resilience of an application programming interface (API)?

• A.Number of patches released within a time interval for the API
• B.Number of defects logged during development compared to other APIs
• C.Number of developers adopting the API for their applications
• D.Number of API calls expected versus actually received within a lime interval

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY reason an organization would require that users sign an acknowledgment of their system access responsibilities is to:

• A.maintain compliance with industry best practices.
• B.serve as evidence of security awareness training.
• C.assign accountability for transactions made with the user's ID.
• D.maintain an accurate record of users' access rights.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way for an IS auditor to determine how well an information security program has been implemented throughout the organization?

• A.Review security awareness training content for completeness.
• B.Evaluate the integration of security best practices into business workflows.
• C.Evaluate the percentage of employees who have taken security awareness training.
• D.Perform security risk assessments for the organization's business units

Comment: *

Name: *

Email: *

Verification: *