Question 1

An IS auditor reviewing the database controls for a new e-commerce system discovers a security weakness in the database configuration. Which of the following should be the IS auditor's NEXT course of action?

Options :

A : Disclose the findings to senior management.

B : Identify existing mitigating controls.

C : ttempt to exploit the weakness.

D : Assist in drafting corrective actions.

Answer: B

Question 2

A contract for outsourcing IS functions should always include:

Options :

A : a provision for an independent audit of the contractor-s operations.

B : data transfer protocols.

C : the names and roles of staff to be employed in the operation.

D : full details of security procedures to be observed by the contractor.

Answer: D

Question 3

An organization with many desktop PCs is considering moving to a thin client architecture. Which of the following is the MAJOR advantage?

Options :

A : Administrative security can be provided for the client.

B : System administration can be better managed.

C : The security of the desktop PC is enhanced.

D : Desktop application software will never have to be upgraded.

Answer: D

Question 4

Which of the following is MOST important to have in place to build consensus among key stakeholders on the cost-effectiveness of IT?

Options :

A : IT project governance and management

B : Standardized enterprise architecture (EA)

C : IT performance monitoring and reporting

D : A uniform IT chargeback process

Answer: C

Question 5

Which of the following is the PRIMARY reason for an IS audit manager to review the work performed by a senior IS auditor prior to presentation of a report?

Options :

A : To ensure the conclusions are adequately supported

B : To ensure adequate sampling methods were used during fieldwork

C : To ensure the work is properly documented and filed

D : To ensure the work is conducted according to industry standards

Answer: A