M4C3

The main focus of acceptance testing is

• Ensuring that the system is acceptable to management
• Accepting errors & bugs in the system
• Ensuring that the system is acceptable to users
• Ensuring that the system is acceptable to auditors

Which of the following test would be carried out when, individual software modules are combined together as a group?

• Integration testing
• Unit testing
• System testing
• White box testing

Which of the following should be reviewed to provide assurance of the database referential integrity

• Field definition
• Master table definition
• Composite keys
• Foreign key structure

MOST helpful to IS Auditor,when evaluating the effectiveness & adequacy of a preventive computer maintenance program is

• A system downtime log
• Vendors' reliability figures
• Regularly scheduled maintenance log
• A written preventive maintenance schedule

In a relational DBMS a record refers to which of the following

• Tuple
• Rows
• Column
• Transaction

Which of following will ensure that a column in one table will have a valid value or “null” in another table’s column?

• Primary key
• Secondary key
• SQL
• Foreign key

Database normalization is

• Data redundancy optimization
• Data logging and accountability
• Streamlining data process
• Deleting temporary files

Which of the following is NOT a property of database transactions?

• Consistency
• Atomicity
• Insulation
• Durability

After discovering a security vulnerability in a third-party application that interfaces with several external systems, a patch is applied to a significant number of modules. Which of the following tests should an IS auditor recommend?

• Stress
• Black box
• Interface
• System

An organization has recently installed a security patch, which crashed the production server. To minimize the probability of this occurring again, an IS auditor should:

• Apply the patch according to the patch's release notes
• Ensure that a good change management process is in place
• Thoroughly test the patch before sending it to production
• Approve the patch after doing a risk assessment