An off-site processing facility should be easily identifiable externally because easy identification
helps ensure smoother recovery. True or false?

If a database is restored from information backed up before the last system image, which of the
following is recommended?

The purpose of business continuity planning and disaster-recovery planning is to:

Organizations should use off-site storage facilities to maintain _________________ (fill in the blank)
of current and critical information within backup files. Choose the BEST answer.

If a programmer has update access to a live system, IS auditors are more concerned with the
programmer’s ability to initiate or modify transactions and the ability to access production than with
the programmer’s ability to authorize transactions. True or false?

Rather than simply reviewing the adequacy of access control, appropriateness of access policies,
and effectiveness of safeguards and procedures, the IS auditor is more concerned with
effectiveness and utilization of assets. True or false?

What are intrusion-detection systems (IDS) primarily used for?

Which of the following is of greatest concern when performing an IS audit?

Which of the following is the most fundamental step in preventing virus attacks?

When should systems administrators first assess the impact of applications or systems patches?