Exam 14: Information Systems and Controls

If a company were to utilize the Grandfather-Father-Son backup scheme, what backup cycles are implemented?

IT Solutions Express (ITSE) is a database service firm in an area prone to tornadoes. Because ITSE stores critical data, they have a hot backup site for systems and data. As part of ITSE's disaster recovery plan, they need a plan that allows key personnel to resume work offsite within 4 hours if a tornado happens to strike their main facility. What kind of disaster recovery plan is necessary to meet the business requirements of ITSE?

COBIT includes 5 domains, 40 control objectives, and over 300 generic IT controls. Explain how IT auditors use the COBIT framework to ensure that a company meets its control objectives.

Which of the following is an example of a user authentication control?

Which of the following change management steps occurs in the model environment?

Explain how user access reviews protect the data and security of a system.

Select each of the following examples of a logical user access control? Choose all that apply.

Which framework would an IT manager select to make sure that access to sensitive customer data is limited to only those who require access?

What role in an organization assumes responsibility for testing code before implementation in the production environment?

Which of the following statements concerning data backups are TRUE?

Which of the following change management steps occurs in the model environment?

What role should be assigned to a new team member who just needs access to review files and not make changes?

Which of the following statements represents a poor design element for a data center protected from the outside environment?

Which of the following statements about user access de-provisioning is FALSE?

Describe a well-designed backup data center for a business with primary operations in an area subject to severe weather.

Select the appropriate role assigned to a leader in the IT team who needs unlimited access and is responsible for assigning roles to other users.

What kind of occurrence would constitute an emergency change to a system?

Sushma, the IT employee responsible for setting up user names and passwords, handles user access updates daily to prevent inappropriate access to the organization's system. After what event should Sushma complete user access de-provisioning for an organization employee?

ABC Technology Management, InC. is seeking guidance on managing risk, security, budgets, and innovation. Which COBIT 2019 management IT objective should ABC consult?

Which type of backup copies all data during every backup?