The IS auditor learns that when equipment was brought into the data center by a vendor, the emergency power
shutoff switch was accidentally pressed and the UPS was engaged. Which of the following audit
recommendations should the IS auditor suggest?

An organization having a number of offices across a wide geographical area has developed a disaster recovery
plan (DRP). Using actual resources, which of the following is the MOST costeffective test of the DRP?

Which of the following is a continuity plan test that uses actual resources to simulate a system crash to costeffectively obtain evidence about the plan’s effectiveness?

A malicious code that changes itself with each file it infects is called a:

The initial step in establishing an information security program is the:

For which of the following applications would rapid recovery be MOST crucial?

A hardware control that helps to detect errors when data are communicated from one computer to another is
known as a:

Which of the following systems-based approaches would a financial processing company employ to monitor
spending patterns to identify abnormal patterns and report them?

Which of the following is a telecommunication device that translates data from digital form to analog form and
back to digital?

A LAN administrator normally would be restricted from: