An IS auditor usually places more reliance on evidence directly collected. What is an example of
such evidence?

What topology provides the greatest redundancy of routes and the greatest network fault tolerance?

Which of the following could lead to an unintentional loss of confidentiality? Choose the BEST
answer.

If senior management is not committed to strategic planning, how likely is it that a company’s
implementation of IT will be successful?

Key verification is one of the best controls for ensuring that:

Batch control reconciliation is a _____________________ (fill in the blank) control for mitigating
risk of inadequate segregation of duties.

A core tenant of an IS strategy is that it must:

Proper segregation of duties normally does not prohibit a LAN administrator from also having
programming responsibilities. True or false?

Who is ultimately accountable for the development of an IS security policy?

What should an IS auditor do if he or she observes that project-approval procedures do not exist?