Which of the following is the primary concern of the auditor?
When evaluating the virtual server environment, the information system auditor learned that the production server, development server and management console are all hosted on the same physical host. Which of the following is the primary concern of the auditor?A . The development server and production server share the same...
The advantage of object-oriented system development is that it:
The advantage of object-oriented system development is that it:A . Suitable for data with complex relationshipsB . Partition the system as a client server architectureC . Easier to program than procedural languagesD . Reduce system documentation requirementsView AnswerAnswer: A
Which of the following is most likely to be evaluated?
Management requires a post-implementation review of the newly installed procurement package to determine the system meets business requirements. Which of the following is most likely to be evaluated?A . Live processing resultsB . Test resultsC . Implementation methodD . Procurement guidelines and policiesView AnswerAnswer: A
In the actual difficult audit review process, if the Business Impact Analysis (BIA) did not proceed, the auditor should first:
In the actual difficult audit review process, if the Business Impact Analysis (BIA) did not proceed, the auditor should first:A . Assess the impact on current disaster recovery capabilities.B . Submit an interim report to management.C . Perform business impact analysis.D . Perform additional compliance tests.View AnswerAnswer: D
Which of the following attacks is best suited for intrusion detection systems (IDS) checking?
Which of the following attacks is best suited for intrusion detection systems (IDS) checking?A . SpoofingB . System scanningC . Logic bombD . SpammingView AnswerAnswer: B
Which of the following is the most appropriate advice for an information systems auditor?
A bank wants to outsource the system to cloud-based supply in another country. Which of the following is the most appropriate advice for an information systems auditor?A . As expected, because the supplier must comply with all laws of the country where the customer is locatedB . Ensure that...
Which of the following is most helpful for information systems auditors when evaluating control effectiveness?
Which of the following is most helpful for information systems auditors when evaluating control effectiveness?A . Have interview communication with the management levelB . Results of control testC . Control self-assessmentD . Control matrixView AnswerAnswer: B
The biggest advantage of use prototype approach in software development is to help:
The biggest advantage of use prototype approach in software development is to help:A . Minimize changes to the scope of the system.B . Reduce the time allocated to user testing and reviewC . Improve the efficiency of quality assurance (QA) testing.D . Conceptualize and clarify requirementsView AnswerAnswer: D
Which of the following is most important when evaluating the retention period for a cloud provider's client data backup?
Which of the following is most important when evaluating the retention period for a cloud provider's client data backup?A . Last audit recommendationB . Contractual commitmentC . Industry best practicesD . Data storage costsView AnswerAnswer: B
Information systems auditors are conducting post-implementation analysis of enterprise resource planning (ERP) systems. The end user expressed concern about the accuracy of the system's critical automatic calculations.
Information systems auditors are conducting post-implementation analysis of enterprise resource planning (ERP) systems. The end user expressed concern about the accuracy of the system's critical automatic calculations. The auditor’s first action step should be:A . Verify the integrity of the user acceptance testB . Review the initial business requirementsC...