Which of the following would provide efficient access control over the organization’s data?
A business application system accesses a corporate database using a single ID and password embedded in a program. Which of the following would provide efficient access control over the organization’s data?
In an online banking application, which of the following would BEST protect against identity theft?
In an online banking application, which of the following would BEST protect against identity theft?
Which of the following is the BEST method for preventing the leakage of confidential information in a laptop c
Which of the following is the BEST method for preventing the leakage of confidential information in a laptop computer?
The responsibility for authorizing access to application data should be with the:
The responsibility for authorizing access to application data should be with the:
What should the IS auditor do next?
During an audit of the logical access control of an ERP financial system an IS auditor found some user accounts shared by multiple individuals. The user IDs were based on roles rather than individual identities. These accounts allow access to financial transactions on the ERP. What should the IS auditor do next?
Minimum password length and password complexity verification are examples of:
Minimum password length and password complexity verification are examples of:
The IS auditor’s PRIMARY concern should be that:
An organization has been recently downsized, in light of this, an IS auditor decides to test logical access controls. The IS auditor’s PRIMARY concern should be that:
The logical exposure associated with the use of a checkpoint restart procedure is:
The logical exposure associated with the use of a checkpoint restart procedure is:
Inadequate programming and coding practices introduce the risk of:
Inadequate programming and coding practices introduce the risk of:
Which of the following would prevent unauthorized changes to information stored in a server’s log?
Which of the following would prevent unauthorized changes to information stored in a server’s log?