An IS auditor is reviewing documentation from a change that was applied to an application. Which of the following findings would be the GREATEST concern?

• A.Testing documentation is approved prior to completion of user acceptance testing (UAT).
• B.Testing documentation is dated three weeks before the system implementation date.
• C.Testing documentation does not show manager approval.
• D.Testing documentation is kept in hard copy format.

Comment: *

Name: *

Email: *

Verification: *

What is the purpose of ISACA's professional ethics statement?

• A.To clearly specify acceptable and unacceptable behavior
• B.To provide procedural advisement to the new IS auditor
• C.To provide instructions on how to deal with irregularities and illegal acts by the client
• D.To provide advice on when it is acceptable for the auditor to deviate from audit standards

Comment: *

Name: *

Email: *

Verification: *

.The quality of the metadata produced from a data warehouse is _______________ in the warehouse's design. Choose the BEST answer.

• A.Often hard to determine because the data is derived from a heterogeneous data environment
• B.The most important consideration
• C.Independent of the quality of the warehoused databases
• D.Of secondary importance to data warehouse content

Comment: *

Name: *

Email: *

Verification: *

Which of the following measures can protect systems files and data, respectively?

• A.User account access controls and cryptography
• B.User account access controls and firewall
• C.User account access controls and IPS
• D.IDS and cryptography
• E.Firewall and cryptography
• F.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST contributes to the successful management of security incidents?

• A.Tested controls
• B.Established procedures
• C.Established policies
• D.Current technologies

Comment: *

Name: *

Email: *

Verification: *