CPE Quiz #
87
Based on Information Systems Control Journal Volume 6, 2002
A passing score of 75 percent qualifies for one (1) hour of CISA/CISM/CGEIT Continuing Professional Education (CPE) Credit
Your results will appear in a new window.
Enter your name below so it displays on the quiz results page:
Name:
Sarup Article1. Reasons cited by the author for failure of transformation change efforts include overcommunicating to the troops and ineffective leadership in driving change.
2. Control principles important in a governance framework for a change program include a project plan and charter, a tracking mechanism for monitoring the progress against plan, and a process to solicit feedback and address changes, among others.
3. Information technology generally is not germane to a transformational change effort.
Guldentops and De Haes Article4. COBIT is more likely to be used by smaller enterprises than larger ones, according to a survey conducted by ISACA and the IT Governance Institute.™
5. After COBIT, the most popular control methodologies in use among survey participants include COSO and ISO 9000.
Guldentops, Van Grembergen and De Haes Article6. Among industries, organizations responding to the ISACA and IT Governance Institute survey cited by the authors that had the most mature controls and governance program were in the retail and financial services industries.
7. Among geographies, organizations responding to the ISACA and IT Governance Institute survey cited by the authors that had the most mature controls and governance program were in the Americas and Europe.
Caldwell Article8. Security event management software is designed to correlate security event log data across multiple types of security devices.
9. To create a security event chain and correlate security event log data, systems must move security data to a consolidation point, they must be normalized to a common log format, and they must be reduced so they can be correlated more efficiently.
10. The following basic fields are among those most likely to be used for data correlation by security event management software: geography of device, device type and time threshold.
Hasan Article11. Benford's Law is based on certain assumptions about numbers that result from the same phenomenon. It states that the digits 1 through 9 are not equally likely to appear as a leading digit in multidigit numbers resulting from the phenomenon.
12. Examples of Benford's Law occurring in population statistics are that the number 9 is twice as likely to occur as a leading digit than the number 2 or 3.
13. Datasets must satisfy several conditions before applying Benford's Law. Some of these conditions include: the numbers must not be affected by minimum or maximum values, the numbers must occur naturally but not be assigned and the numbers must be related in some way.
Stasiak Article14. The first phase of a web application review is the crawl state, where the reviewer gathers information about the application under review.
15. Tools identified by the author for the attack phase of a web application review include AppScan, WebInspect and ScanDo.
Greene Article16. Standard-setting bodies that have published standards for application security include ISO, AICPA, ISACA and NIST.
|
Your results will appear in a new window.
|
Please note: This quiz requires a JavaScript-enabled browser.
If the quiz is not displayed above, you either do not have a browser which
supports JavaScript or JavaScript support has been disabled.
|
|
|