- (Exam Topic 3)
Which of the following trends would cause the GREATEST concern regarding the effectiveness of an organization's user access control processes? An increase in the:

1. A. ratio of disabled to active user accounts.
2. B. percentage of users with multiple user accounts.
3. C. average number of access entitlements per user account.
4. D. average time between user transfers and access updates.

Correct Answer: D

- (Exam Topic 1)
During a routine check, a system administrator identifies unusual activity indicating an intruder within a firewall. Which of the following controls has MOST likely been compromised?

1. A. Data validation
2. B. Identification
3. C. Authentication
4. D. Data integrity

Correct Answer: C

- (Exam Topic 4)
Which of the following is the GREATEST benefit of a three lines of defense structure?

1. A. An effective risk culture that empowers employees to report risk
2. B. Effective segregation of duties to prevent internal fraud
3. C. Clear accountability for risk management processes
4. D. Improved effectiveness and efficiency of business operations

Correct Answer: C

- (Exam Topic 4)
Which of the following stakeholders are typically included as part of a line of defense within the three lines of defense model?

1. A. Board of directors
2. B. Vendors
3. C. Regulators
4. D. Legal team

Correct Answer: A

- (Exam Topic 3)
An organization planning to transfer and store its customer data with an offshore cloud service provider should be PRIMARILY concerned with:

1. A. data aggregation
2. B. data privacy
3. C. data quality
4. D. data validation

Correct Answer: B