1. Why does the IS auditor often review the system logs?

A) To get evidence of password spoofing
B) To get evidence of data copy activities
C) To determine the existence of unauthorized access to data by a user or program
D) To get evidence of password sharing



2. What is essential for the IS auditor to obtain a clear understanding of network management?

A) Security administrator access to systems
B) Systems logs of all hosts providing application services
C) A graphical map of the network topology
D) Administrator access to systems



3. How is risk affected if users have direct access to a database at the system level?

A) Risk of unauthorized access increases, but risk of untraceable changes to the database decreases.
B) Risk of unauthorized and untraceable changes to the database increases.
C) Risk of unauthorized access decreases, but risk of untraceable changes to the database increases.
D) Risk of unauthorized and untraceable changes to the database decreases.



4. What is the most common purpose of a virtual private network implementation?

A) A virtual private network (VPN) helps to secure access between an enterprise and its partners when communicating over an otherwise unsecured channel such as the Internet.
B) A virtual private network (VPN) helps to secure access between an enterprise and its partners when communicating over a dedicated T1 connection.
C) A virtual private network (VPN) helps to secure access within an enterprise when communicating over a dedicated T1 connection between network segments within the same facility.
D) A virtual private network (VPN) helps to secure access between an enterprise and its partners when communicating over a wireless connection.



5. What benefit does using capacity-monitoring software to monitor usage patterns and trends provide to management?

A) The software can dynamically readjust network traffic capabilities based upon current usage.
B) The software produces nice reports that really impress management.
C) It allows users to properly allocate resources and ensure continuous efficiency of operations.
D) It allows management to properly allocate resources and ensure continuous efficiency of operations.