- (Exam Topic 3)
An organization is disposing of a system containing sensitive data and has deleted all files from the hard disk. An IS auditor should be concerned because:

1. A. deleted data cannot easily be retrieved.
2. B. deleting the files logically does not overwrite the files' physical data.
3. C. backup copies of files were not deleted as well.
4. D. deleting all files separately is not as efficient as formatting the hard disk.

Correct Answer: B

- (Exam Topic 2)
Which of the following provides the MOST assurance over the completeness and accuracy ol loan application processing with respect to the implementation ol a new system?

1. A. Comparing code between old and new systems
2. B. Running historical transactions through the new system
3. C. Reviewing quality assurance (QA) procedures
4. D. Loading balance and transaction data to the new system

Correct Answer: B

- (Exam Topic 4)
Which of the following should be done FIRST to minimize the risk of unstructured data?

1. A. Identify repositories of unstructured data.
2. B. Purchase tools to analyze unstructured data.
3. C. Implement strong encryption for unstructured data.
4. D. Implement user access controls to unstructured data.

Correct Answer: A
Based on the information provided, the first step to minimize the risk of unstructured data should be to A: Identify repositories of unstructured data. Unstructured data can present a significant security risk if not managed properly, so it is important to identify where it is stored and who has access to it. Once the repositories of unstructured data have been identified, additional steps can be taken to protect it, such as implementing strong encryption and user access controls, and purchasing tools to analyze it.

- (Exam Topic 1)
What is BEST for an IS auditor to review when assessing the effectiveness of changes recently made to processes and tools related to an organization's business continuity plan (BCP)?

1. A. Full test results
2. B. Completed test plans
3. C. Updated inventory of systems
4. D. Change management processes

Correct Answer: A

- (Exam Topic 2)
An IS auditor learns the organization has experienced several server failures in its distributed environment. Which of the following is the BEST recommendation to limit the potential impact of server failures in the future?

1. A. Redundant pathways
2. B. Clustering
3. C. Failover power
4. D. Parallel testing

Correct Answer: B