CSIT 161: FINAL EXAM QUESTIONS And ANSWERS 100% CORRECT

Ricky is reviewing security logs to independently assess security controls. Which security review process is Ricky engaging in? - ANSWER-audit Christopher is designing a security policy for his organization. He would like to use an approach that allows a reasonable list of activities but does not allow other activities. Which permission level is he planning to use? - ANSWER-prudent Jacob is conducting an audit of the security controls at an organization as an independent reviewer. Which question would NOT be part of his audit? - ANSWER-Is the security control likely to become obsolete in the near future? Which regulatory standard would NOT require audits of companies in the United States? - ANSWER-Personal Information Protection and Electronic Documents Act (PIPEDA) Emily is the information security director for a large company that handles sensitive personal information. She is hiring an auditor to conduct an assessment demonstrating that her firm is satisfying requirements regarding customer private data. What type of assessment should she request? - ANSWER-SOC 3 Which item is an auditor least likely to review during a system controls audit? - ANSWER-Resumes of system administrators What is a set of concepts and policies for managing IT infrastructure, development, and operations? - ANSWER-IT Infrastructure Library (ITIL) Which audit data collection method helps ensure that the information-gathering process covers all relevant areas? - ANSWER-Checklist Curtis is conducting an audit of an identity management system. Which question is NOT likely to be in the scope of his audit? - ANSWER-Does the firewall properly block unsolicited network connection attempts? What information should an auditor share with the client during an exit interview? - ANSWER-Details on major issues