Question 1

Which of the following will BEST ensure that archived electronic information of permanent importance remains accessible over time?

APerforming preventive maintenance on old hardware

BAcquiring applications that emulate old software

CRegularly migrating data to current technology

DPeriodically backing up archived data

Answer : C

Question 2

Which of the following BEST enables an IS auditor to prioritize financial reporting spreadsheets for an end-user computing (EUC) audit?

AUnderstanding the purpose of each spreadsheet

BIdentifying the spreadsheets with built-in macros

CReviewing spreadsheets based on file size

DAscertaining which spreadsheets are most frequently used

Answer : A

Question 3

IT management has accepted the risk associated with an IS auditor's finding due to the cost and complexity of the corrective actions. Which of the following should be the auditor's NEXT course of action?

APerform a cost-benefit analysis.

BDocument and inform the audit committee.

CReport the finding to external regulators.

DNotify senior management.

Answer : B

Question 4

The MOST important measure of the effectiveness of an organization's security program is the:

Acomparison with critical incidents experienced by competitors.

Bnumber of vulnerability alerts escalated to senior management.

Cnumber of new vulnerabilities reported.

Dadverse impact of incidents on critical business activities.

Answer : D

Question 5

An IS auditor finds that the cost of developing an application is now projected to significantly exceed the budget. Which of the following is the GREATEST risk to communicate to senior management?

ANoncompliance with project methodology

BInability to achieve expected benefits

CIncreased staff turnover

DProject abandonment