In a high-volume, real-time system, the MOST effective technique by which to continuously monitor and analyze transaction processing is:

• A.integrated test facility (ITF).
• B.parallel simulation.
• C.transaction tagging.
• D.embedded audit modules.

Comment: *

Name: *

Email: *

Verification: *

Which of the following tests performed by an IS auditor would be the MOST effective in determining compliance with an organization's change control procedures?

• A.Review software migration records and verify approvals.
• B.identify changes that have occurred and verify approvals.
• C.Review change control documentation and verify approvals.
• D.Ensure that only appropriate staff can migrate changes into production.

Comment: *

Name: *

Email: *

Verification: *

An organization with high availability resource requirements is selecting a provider for cloud computing.
Which of the following would cause the GREATEST concern to an IS auditor? The provider:

• A.does not store backup media offsite.
• B.deploys patches automatically without testing.
• C.hosts systems for the organization's competitor.
• D.is not internationally certified for high availability.

Comment: *

Name: *

Email: *

Verification: *

While conducting an audit of a service provider, an IS auditor observes that the service provider has outsourced a part of the work to another provider. Since the work involves confidential information, the IS auditor's PRIMARY concern shouldbe that the:

• A.requirement for protecting confidentiality of information could be compromised.
• B.contract may be terminated because prior permission from the outsourcer was not obtained.
• C.other service provider to whom work has been outsourced is not subject to audit.
• D.outsourcer will approach the other service provider directly for further work.

Comment: *

Name: *

Email: *

Verification: *

In a public key infrastructure (PKI), the authority responsible for the identification and authentication of an applicant for a digital certificate (i.e., certificate subjects) is the:

• A.registration authority (RA).
• B.issuing certification authority (CA).
• C.subject CA.
• D.policy management authority.

Comment: *

Name: *

Email: *

Verification: *