- (Exam Topic 2)
Which of the following data security policies is most likely to be the result of a data privacy law?

1. A. Access to personally identifiable information is limited to those who need it to perform their job.
2. B. Confidential data must be backed up and recoverable within a 24-hour period.
3. C. Updates to systems containing sensitive data must be approved before being moved to production.
4. D. A record of employees with access to insider information must be maintained and those employees may not trade company stock during blackout periods

Correct Answer: A

- (Exam Topic 2)
An internal auditor was asked to review an equal equity partnership In one sampled transaction Partner A transferred equipment into the partnership with a self-declared value of $10,000 and Partner B contributed equipment with a self-declared value of $15 000 The capital accounts of each partner were subsequently credited with S12,500. Which of the following statements is true regarding this transaction?

1. A. The capital accounts of the partners should be increased by the original cost of the contnbuted equipment.
2. B. The capital accounts should be increased using a weighted average based on the current percentage of ownership
3. C. No action is needed as the capital account of each partner was increased by the correct amount
4. D. The capital accounts of the partners should be increased by the fair market value of their contribution

Correct Answer: C

- (Exam Topic 1)
Which of the following describes the free trade zone in an e-commerce environment?

1. A. Zone that separates an organization's servers from outside forces.
2. B. Area in which messages are scrutinized to determine if they are authorized.
3. C. Area where communication and transactions occur between trusted parties.
4. D. Zone where data is encrypted, users are authenticated, and user traffic is filtered.

Correct Answer: C

- (Exam Topic 1)
Which of the following are likely indicators of ineffective change management?
* 1. IT management is unable to predict how a change will impact interdependent systems or business processes.
* 2. There have been significant increases in trouble calls or in support hours logged by programmers.
* 3. There is a lack of turnover in the systems support and business analyst development groups.
* 4. Emergency changes that bypass the normal control process frequently are deemed necessary.

1. A. 1 and 3 only
2. B. 2 and 4 only
3. C. 1, 2, and 4 only
4. D. 1, 2, 3, and 4

Correct Answer: C

- (Exam Topic 2)
An organization recently documented its procedures for recovering systems and data after a disaster How are these documented procedures most likely to be used during a disaster simulation exercise''

1. A. To help property configure mass communication notification tools
2. B. To help identify training needs across the functional areas required to recover systems and data.
3. C. To help ensure that the team members who are required to recover systems and data understand their roles.
4. D. To help validate the contact information of key personnel required to recover systems and data

Correct Answer: C