Which of the following is the BEST control to help ensure that security requirements are considered throughout the life cycle of an agile software development project?
#121
Answer: A✅ Correct❌ Incorrect
Which of the following is MOST important when assembling an internal team to perform penetration testing for the organization?
#122
Answer: B✅ Correct❌ Incorrect
Which of the following would a digital signature MOST likely prevent?
#123
Answer: B✅ Correct❌ Incorrect
An IS auditor is determining the scope for an upcoming audit. Which of the following BEST enables the auditor to ensure appropriate controls are considered?
#124
Answer: C✅ Correct❌ Incorrect
A PRIMARY objective of risk management is to keep the total cost of risks below the:
#125
Answer: B✅ Correct❌ Incorrect
When is the BEST time to commence continuity planning for a new application system?
#126
Answer: C✅ Correct❌ Incorrect
Which of the following BEST indicates that an incident management process is effective?
#127
Answer: C✅ Correct❌ Incorrect
Prior to the migration of acquired software into production, it is MOST important that the IS auditor review the:
#128
Answer: A✅ Correct❌ Incorrect
Which type of attack poses the GREATEST risk to an organization's most sensitive data?
#129
Answer: B✅ Correct❌ Incorrect
Using swipe cards to limit employee access to restricted areas requires implementing which additional control?
#130
Answer: C✅ Correct❌ Incorrect
When developing metrics to measure the contribution of IT to the achievement of business goals, the MOST important consideration is that the metrics:
#131
Answer: B✅ Correct❌ Incorrect
The MOST important function of a business continuity plan (BCP) is to:
#132
Answer: A✅ Correct❌ Incorrect
A small financial institution is preparing to implement a check image processing system to support planned mobile banking product offerings. Which of the following is MOST critical to the successful implementation of the system?
#133
Answer: C✅ Correct❌ Incorrect
A characteristic of a digital signature is that it:
#134
Answer: B✅ Correct❌ Incorrect
What is the BEST way to control updates to the vendor master file in an accounts payable system?
#135
Answer: D✅ Correct❌ Incorrect
A current project to develop IT-based solutions will need additional funding to meet changes in business requirements. Who is BEST suited to obtain this additional funding?
#136
Answer: C✅ Correct❌ Incorrect
During the implementation of an enterprise resource planning (ERP) system, an IS auditor is reviewing the results of user acceptance testing (UAT). Which of the following should be the auditor's PRIMARY focus?
#137
Answer: A✅ Correct❌ Incorrect
Which of the following observations should be of GREATEST concern to an IS auditor assessing access controls for the accounts payable module of a finance system?
#138
Answer: B✅ Correct❌ Incorrect
Which of the following is the PRIMARY reason to involve IS auditors in the software acquisition process?
#139
Answer: D✅ Correct❌ Incorrect
When planning a review of IT governance, an IS auditor is MOST likely to:
#140
Answer: B✅ Correct❌ Incorrect
Which type of testing is BEST for evaluating how well an application functions with other IT systems?
#141
Answer: A✅ Correct❌ Incorrect
Which of the following potential scenarios is MOST likely to result in audit risk?
#142
Answer: A✅ Correct❌ Incorrect
In the case of a disaster where the data center is no longer available, which of the following tasks should be done FIRST?
#143
Answer: D✅ Correct❌ Incorrect
Which of the following would be of GREATEST concern to an IS auditor reviewing an IT-related customer service project?
#144
Answer: C✅ Correct❌ Incorrect
Which of the following is the GREATEST concern when applying emergency patches?
#145
Answer: C✅ Correct❌ Incorrect
Which of the following application input controls would MOST likely detect data input errors in the customer account number field during the processing of an accounts receivable transaction?
#146
Answer: C✅ Correct❌ Incorrect
Which of the following types of environmental equipment will MOST likely be deployed below the floor tiles of a data center?
#147
Answer: C✅ Correct❌ Incorrect
Which of the following is the BEST justification for deferring remediation testing until the next audit?
#148
Answer: B✅ Correct❌ Incorrect
Which of the following would BEST help to ensure the availability of data stored with a cloud provider?
#149
Answer: C✅ Correct❌ Incorrect
Which of the following security assessment techniques attempts to exploit a system's open ports?