The IS auditor learns that when equipment was brought into the data center by a vendor, the
emergency power shutoff switch was accidentally pressed and the UPS was engaged. Which of
the following audit recommendations should the IS auditor suggest?

An organization having a number of offices across a wide geographical area has developed a
disaster recovery plan (DRP). Using actual resources, which of the following is the MOST
costeffective test of the DRP?

Which of the following is a continuity plan test that uses actual resources to simulate a system
crash to cost-effectively obtain evidence about the plan’s effectiveness?

A malicious code that changes itself with each file it infects is called a:

The initial step in establishing an information security program is the:

For which of the following applications would rapid recovery be MOST crucial?

A hardware control that helps to detect errors when data are communicated from one computer to
another is known as a:

Which of the following systems-based approaches would a financial processing company employ
to monitor spending patterns to identify abnormal patterns and report them?

Which of the following is a telecommunication device that translates data from digital form to analog
form and back to digital?

A LAN administrator normally would be restricted from: