During a Review of a Web-Based Application Used by Customers

Multiple Choice

During a review of a web-based application used by customers to check the status of their bank accounts, it would be most important for the internal auditor to ensure that:

A) Access to read application logs is restricted to authorized users.
B) Account balance information is encrypted in the database.
C) The web server used to host the application is located in a physically secure area.
D) Sensitive data, such as account numbers, are submitted using encrypted communications.