Question 1

An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:

Options :

A : Inform senior management of the risk involved.

B : Agree to work with the security officer on these shifts as a form of preventative control.

C : Develop a computer assisted audit technique to detect instances of abuses of the arrangement.

D : Review the system log for each of the late night shifts to determine whether any irregular actions occurred.

Answer: A

Question 2

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

Options :

A : International Organization for Standardizations -- 27004 (ISO-27004)

B : Payment Card Industry Data Security Standards (PCI-DSS)

C : Control Objectives for Information Technology (COBIT)

D : International Organization for Standardizations -- 27005 (ISO-27005)

Answer: A

Question 3

Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?

Options :

A : Terms and Conditions

B : Service Level Agreements (SLA)

C : Statement of Work

D : Key Performance Indicators (KPI)

Answer: B

Question 4

Physical security measures typically include which of the following components?

Options :

A : Physical, Technical, Operational

B : Technical, Strong Password, Operational

C : Operational, Biometric, Physical

D : Strong password, Biometric, Common Access Card

Answer: A

Question 5

Risk is defined as:

Options :

A : Threat times vulnerability divided by control

B : Advisory plus capability plus vulnerability

C : Asset loss times likelihood of event

D : Quantitative plus qualitative impact

Answer: A

Confidently Practice Online with Free 712-50 Exam Cram

Buying Options: