Which of the following intrusion detection systems (IDSs) monitors the general patterns of activity and traffi
Which of the following intrusion detection systems (IDSs) monitors the general patterns of activity and traffic on a network and creates a database?
Which of the following would be an effective access control?
An organization is using an enterprise resource management (ERP) application. Which of the following would be an effective access control?
What should be the GREATEST concern to an IS auditor when employees use portable media (MP3 players, flash dri
What should be the GREATEST concern to an IS auditor when employees use portable media (MP3 players, flash drives)?
An IS auditor should expect the responsibility for authorizing access rights to production data and systems to
An IS auditor should expect the responsibility for authorizing access rights to production data and systems to be entrusted to the:
Which of the following is the MOST significant logical security finding?
An IS auditor has completed a network audit. Which of the following is the MOST significant logical security finding?
Which of the following would MOST effectively enhance the security of a challenge-response based authenticatio
Which of the following would MOST effectively enhance the security of a challenge-response based authentication system?
Which of the following is the BEST practice to ensure that access authorizations are still valid?
Which of the following is the BEST practice to ensure that access authorizations are still valid?
What would be of GREATEST concern if discoveredduring a forensic investigation?
A technical lead who was working on a major project has left the organization. The project manager reports suspicious system activities on one of the servers that is accessible to the whole team. What would be of GREATEST concern if discoveredduring a forensic investigation?
The IS auditor should:
An IS auditor finds that a DBA has read and write access to production datA. The IS auditor should:
When using a universal storage bus (USB) flash drive to transport confidential corporate data to an offsite lo
When using a universal storage bus (USB) flash drive to transport confidential corporate data to an offsite location, an effective control would be to: