NO.231 Which of the following environmental controls is appropriate to protect computer equipment against short-term reductions in electrical power?

NO.232 Which of the following would MOST effectively and executive management in achieving IT and business alignment?

NO.233 Which of the following metrics would be MOST useful to an IS auditor when assessing the resilience of an application programming interface (API)?

NO.234 Which of the following types of data validation editing checks is used to determine if a field contains data, and not zeros or blanks?

NO.235 An organization has software that is not compliant with data protection requirements. To help ensure that appropriate and relevant data protection controls are implemented in the future, the auditor’s BEST course of action would be to:

NO.236 When introducing a maturity model to the IT management process, it is BEST to align the maturity level to a point that reflects which of the following?

NO.237 Which of the following concerns associated with the World Wide Web would be addressed by a firewall?

NO.238 Which of the following represents a potential single point of failure in the virtualized environment that could result in a compromise with greater scope and impact?

NO.239 The PRIMARY purpose for an IS auditor to review previous audit reports during the planning phase of a current audit is to:

NO.240 Electromagnetic emissions from a terminal represent an exposure because they:

NO.241 What uses questionnaires to lead the user through a series of choices to reach a conclusion?

NO.242 An IS auditor should be concerned when a telecommunication analyst:

NO.243 A LAN administrator normally would be restricted from:

NO.244 A legacy application is running on an operating system that is no longer supported by the vendor. If the organization continues to use the current application, which of the following should be the IS auditor’s GREATEST concern?

NO.245 Which of the following is the BEST methodology to use for estimating the complexity of developing a large business application?

NO.246 .Which of the following exploit vulnerabilities to cause loss or damage to the organization and its assets?

NO.247 An IS auditor reviewing the key roles and responsibilities of the database administrator (DBA) is LEAST likely to expect the job description of the DBA to include:

NO.248 Which of the follows should an IS auditor consider FIRST when evaluating firewall rules?

NO.249 An organization implemented a cybersecurity policy last year Which of the following is the GREATE ST indicator that the policy may need to be revised”7 :