is a detective control. A VPN would provide confidentiality and
authentication (reliability).
647
、
The PRIMARY reason for using digital signatures is to ensure data:
A
、
confidentiality.
B
、
integrity.
C
、
availability.
D
、
timeliness.
ANSWER:B
NOTE:Digital signatures provide integrity because the digital signature of
a signed message (file, mail, document, etc.) changes every time a single
bit of the document changes; thus, a signed document cannot be altered.
Depending on the mechanism chosen to implement a digital signature, the
mechanism might be able to ensure data confidentiality or even timeliness,
but this is not assured. Availability is not related to digital
signatures.
648
、
An IS auditor finds that, at certain times of the day, the data
warehouse query performance decreases significantly. Which of the
following controls would it be relevant for the IS auditor to review?
A
、
Permanent table-space allocation
B
、
Commitment and rollback controls
C
、
User spool and database limit controls
D
、
Read/write access log controls
ANSWER:C
NOTE:User spool limits restrict the space available for running user
queries. This prevents poorly formed queries from consuming excessive
system resources and impacting general query performance. Limiting the
space available to users in their own databases prevents them from
building excessively large tables. This helps to control space utilization
which itself acts to help performance by maintaining a buffer between the
actual data volume stored and the physical device capacity. Additionally,
it prevents users from consuming excessive resources in ad hoc table
builds (as opposed to scheduled production loads that often can run
overnight and are optimized for performance purposes). In a data
warehouse, since you are not running online transactions, commitment and
rollback does not have an impact on performance. The other choices are not
as likely to be the root cause of this performance issue.
649
、
While planning an audit, an assessment of risk should be made to