Exam for engine

NO.182 Which of the following is the MOST effective way to achieve the integration of information security governance into corporate governance?

NO.183 Which of the following would BEST help to support an auditor’s conclusion about the effectiveness of an implemented data classification program?

NO.184 The technique used to ensure security in virtual private networks (VPNs) is:

NO.185 Which of the following is the BEST way to ensure enterprise architectural objectives are aligned with business and technology objectives?

NO.186 Which of the following is the MOST important privacy consideration for an organization that uses a cloud service provider to process customer data?

NO.187 A small organization is experiencing rapid growth and plans to create a new information security policy.
Which of the following is MOST relevant to creating the policy?

NO.188 Which of the following ensures confidentiality of information sent over the internet?

NO.189 During a disaster recovery audit, an IS auditor finds that a business impact analysis (BIA) has not been performed. The auditor should FIRST

NO.190 Which of the following is MOST important for an IS auditor to examine when reviewing an organization’s privacy policy?

NO.191 An efficient use of public key infrastructure (PKI) should encrypt the:

NO.192 A manufacturing firm wants to automate its invoice payment system. Objectives state that the system should require considerably less time for review and authorization and the system should be capable of identifying errors that require follow up. Which of the following would BEST meet these objectives?

NO.193 Which function in the purchasing module of an enterprise resource planning (ERP) system ensures payments are not issued for incorrect invoices’

NO.194 Which of the following should be the PRIMARY consideration when developing an IT strategy?

NO.195 Which of the following would be MOST useful to an IS auditor confirming that an IS department meets its service level agreements (SLAs)?

NO.196 Which of the following is the BEST way to mitigate the risk associated with malicious changes to binary code during the software development life cycle (SDLC)?

NO.197 After discovering a security vulnerability in a third-party application that interfaces with several external systems, a patch is applied to a significant number of modules. Which of the following tests should an IS auditor recommend?