Which of the following is the dominating objective of BCP and DRP?

• A.To protect human life
• B.To mitigate the risk and impact of a business interruption
• C.To eliminate the risk and impact of a business interruption
• D.To transfer the risk and impact of a business interruption

Comment: *

Name: *

Email: *

Verification: *

Which of the following should an IS auditor regard as the PRIMARY role of IT governance when considering an outsourcing arrangement for IT services?

• A.Ensuring the risk associated with outsourcing has been mitigated
• B.Ensuring the outsourcing contract includes a right-to-audit clause
• C.Ensuring stakeholder input in the outsourcing decision process
• D.Ensuring vendor due diligence during the vendor selection process

Comment: *

Name: *

Email: *

Verification: *

An IT steering committee should review information systems PRIMARILY to assess:

• A.whether IT processes support business requirements.
• B.if proposed system functionality is adequate.
• C.the stability of existing software.
• D.the complexity of installed technology.

Comment: *

Name: *

Email: *

Verification: *

The purpose of a checksum on an amount field in an electronic data interchange (EDI) communication of financial transactions is to ensure:

• A.integrity,
• B.authenticity.
• C.authorization,
• D.nonrepudiation.

Comment: *

Name: *

Email: *

Verification: *

An organization's database administrator (DBA) has implemented native database auditing.
Which of the following is the GREATEST concern with this situation?

• A.Development of supplementary tools for database monitoring may be required.
• B.Production database performance may be negatively affected.
• C.Policy-driven event logging may be impaired.
• D.Configuration management resilience may be impaired.

Comment: *

Name: *

Email: *

Verification: *