1. In a data center audit, an IS auditor finds that the humidity level is very low. The IS auditor would be MOST concerned because of an expected increase in:
A) employee discomfort B) risk of fire C) static electricity problems D) backup tape failures
2. Before concluding that internal controls can be relied upon, the IS auditor should:
A) discuss the internal control weakness with the auditee B) document application controls C) conduct tests of compliance D) document the system of internal control
3. The IS auditor has identified a potential fraud perpetrated by the network administrator. The IS auditor should:
A) issue a report to ensure a timely resolution B) review the audit finding with the audit committee prior to any other discussions C) perform more detailed tests prior to disclosing the audit results D) share the potential audit finding with the security administrator
4. Which of the following should an IS auditor review FIRST when planning a customer data privacy audit?
A) Legal and compliance requirements B) Customer agreements C) Organizational policies and procedures D) Data classification
5. Which of the following should be of MOST concern to an IS auditor reviewing the public key infrastructure (PKI) for enterprise e-mail?
A) The private key certificate has not been updated. B) The certificate revocation list has not been updated. C) The certificate practice statement has not been published. D) The PKI policy has not been updated within the last year.
Leave a comment