Question 1

The PRIMARY benefit of information asset classification is that it:

Options :

A : enables risk management decisions.

B : helps to align organizational objectives.

C : prevents loss of assets.

D : facilitates budgeting accuracy.

Answer: A

Question 2

Which of the following should be of GREATEST concern to an IS auditor who is assessing an organization’s configuration and release management process?

Options :

A : The organization does not use an industry-recognized methodology.

B : Changes and change approvals are not documented.

C : There is no centralized configuration management database (CMDB).

D : All changes require middle and senior management approval.

Answer: B

Question 3

An online retailer is receiving customer complaints about receiving different items from what they ordered on the organization's website. The root cause has been traced to poor data quality. Despite efforts to clean erroneous data from the system, multiple data quality issues continue to occur. Which of the following recommendations would be the BEST way to reduce the likelihood of future occurrences?

Options :

A : Outsource data cleansing activities to reliable third parties.

B : Assign responsibility for improving data quality.

C : Implement business rules to validate employee data entry.

D : Invest in additional employee training for data entry.

Answer: B

Question 4

In the development of a new financial application, the IS auditor’s FIRST involvement should be in the:

Options :

A : control design

B : application design

C : system test

D : feasibility study

Answer: B

Question 5

Which of the following is the MOST efficient control that helps to ensure complete data transfer through an interface?

Options :

A : Use transmission encryption for data transfer between systems.

B : Use protocols that allow full duplex communication between source and destination systems.

C : Compare data hash values between the source and destination systems.

D : Conduct code reviews of data transfer encoders and decoders in source and destination systems.

Answer: C