Which of the following is a substantive test?

Overall business risk for a particular threat can be expressed as:

The decisions and actions of an IS auditor are MOST likely to affect which of the following risks?

An IS auditor is reviewing access to an application to determine whether the 10 most recent “new user” forms
were correctly authorized. This is an example of:

An IS auditor is using a statistical sample to inventory the tape library. What type of test would this be
considered?

Database snapshots can provide an excellent audit trail for an IS auditor. True or false?

What is a data validation edit control that matches input data to an occurrence rate? Choose the BEST
answer.

Processing controls ensure that data is accurate and complete, and is processed only through which of the
following? Choose the BEST answer.

Data edits are implemented before processing and are considered which of the following? Choose the
BEST answer.

What is used as a control to detect loss, corruption, or duplication of data?