QUESTION 385
When reviewing the implementation of a LAN, an IS auditor should FIRST review the:

QUESTION 386
An organization that operates an e-commerce website wants to provide continuous service to its customers and is planning to invest in a hot site due to service criticality. Which of the following is the MOST important consideration when making this decision?

QUESTION 387
The scheduling of audit follow-ups should be based PRIMARILY on

QUESTION 388
The effectiveness of an incident response team will be GREATEST when:

QUESTION 389
The MOST significant reason for using key performance indicators (KPIs) to track the progress of IT projects against initial targets is that they:

QUESTION 390
Which of the following issues should be the GREATEST concern to the IS auditor when reviewing an IT disaster recovery test?

QUESTION 391
An IS auditor observes a weakness in the tape management system at a data center in that some parameters are set to bypass or ignore tape header records. Which of the following is the MOST effective compensating control for this weakness?

QUESTION 392
The MAIN reason for requiring that all computer clocks across an organization be synchronized is to:

QUESTION 393
Which of the following provides for the GREATEST cost reduction in a large data center?

QUESTION 394
An online retailer is receiving customer complaints about receiving different items from what they ordered on the organization’s website. The root cause has been traced to poor data quality Despite efforts to clean erroneous data from the system, multiple data quality issues continue to occur. Which of the following recommendations would be the BEST way to reduce the likelihood of future occurrences?

QUESTION 395
Which of the following activities provides an IS auditor with the insight regarding potential single person dependencies that might exist withing the organization?

QUESTION 396
In a botnet, mailbot logs into a particular type of system for making coordinated attack attempts. What type of system is this?

QUESTION 397
.What is often the most difficult part of initial efforts in application development? Choose the BEST answer.

QUESTION 398
When an organization is outsourcing their information security function, which of the following should be kept in the organization?

问题 399
In a small organization, an IS auditor finds that security administration and system analysis functions are performed by the same employee. Which of the following is the MOST significant finding?

问题 400
Which of the following is the BEST way to help ensure that products developed in an agile software development environment meet the required quality standards?

问题 401
Which of the following is the PRIMARY advantage of having an established information security governance framework in place when an organization is adopting emerging technologies?

问题 402
Which of the following attack redirects outgoing message from the client back onto the client, preventing outside access as well as flooding the client with the sent packets?

问题 403
Which of the following is widely accepted as one of the critical components in networking management?

问题 404
To provide protection for media backup stored at an offsite location, the storage site should be:

问题 405
The PRIMARY purpose of audit trails is to:

问题 406
An IS auditor is reviewing the installation of a new server. The IS auditor’s PRIMARY objective is to ensure that

问题 407
Which of the following MOST effectively mitigates the risk of disclosure of sensitive data stored on company-owned smartphones?

问题 408
Management receives information indicating a high level of risk associated with potential flooding near the organization’s data center within the next few years. As a result, a decision has been made to move data center operations to another facility on higher ground. Which approach has been adopted?