712-50 Practice Test

712-50 Practice Test practice questions, page 20 of 25, with answer review and explanations.

Question 96

What two methods are used to assess risk impact?

  1. Quantitative and qualitative
  2. Qualitative and percent of loss realized
  3. Subjective and Objective
  4. Cost and annual rate of expectance

Question 97

An organization information security policy serves to___________________.

  1. define security configurations for systems
  2. establish budgetary input in order to meet compliance requirements
  3. establish acceptable systems and user behavior
  4. define relationships with external law enforcement agencies
  5. None

Question 98

An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:

  1. Review the system log for each of the late night shifts to determine whether any irregular actions occurred.
  2. Inform senior management of the risk involved.
  3. Develop a computer-assisted audit technique to detect instances of abuses of the arrangement.
  4. Agree to work with the security officer on these shifts as a form of preventative control.

Question 99

The patching and monitoring of systems on a consistent schedule is required by?

  1. Industry best practices
  2. Audit best practices
  3. Risk Management framework
  4. Local privacy laws

Question 100

IT control objectives are useful to IT auditors as they provide the basis for understanding the:

  1. The audit control checklist
  2. Technique for securing information
  3. Desired results or purpose of implementing specific control procedures.
  4. Security policy