- (Exam Topic 1)
Risk appetite directly affects what part of a vulnerability management program?

1. A. Staff
2. B. Scope
3. C. Schedule
4. D. Scan tools

Correct Answer: B

- (Exam Topic 2)
With respect to the audit management process, management response serves what function?

1. A. placing underperforming units on notice for failing to meet standards
2. B. determining whether or not resources will be allocated to remediate a finding
3. C. adding controls to ensure that proper oversight is achieved by management
4. D. revealing the “root cause” of the process failure and mitigating for all internal and external units

Correct Answer: B

- (Exam Topic 3)
Which of the following can the company implement in order to avoid this type of security issue in the future?

1. A. Network based intrusion detection systems
2. B. A security training program for developers
3. C. A risk management process
4. D. A audit management process

Correct Answer: B

- (Exam Topic 4)
The general ledger setup function in an enterprise resource package allows for setting accounting periods. Access to this function has been permitted to users in finance, the shipping department, and production scheduling. What is the most likely reason for such broad access?

1. A. The need to change accounting periods on a regular basis.
2. B. The requirement to post entries for a closed accounting period.
3. C. The need to create and modify the chart of accounts and its allocations.
4. D. The lack of policies and procedures for the proper segregation of duties.

Correct Answer: D

- (Exam Topic 5)
Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
What is one proven method to account for common elements found within separate regulations and/or standards?

1. A. Hire a GRC expert
2. B. Use the Find function of your word processor
3. C. Design your program to meet the strictest government standards
4. D. Develop a crosswalk

Correct Answer: D