A.The evidence was collected by the Internal forensics team.

B.The logs failed to identify the person handling the evidence.

C.The evidence was not fully backed up using a cloud-based solution prior to the trial.

D.The person who collected the evidence is not qualified to represent the case.

A.The IS auditor designed an embedded audit module exclusively for auditing the application system.

B.The IS auditor implemented a specific control during the development of the application system.

C.The IS auditor provided consulting advice concerning application system best practices.

D.The IS auditor participated as a member of the application system project team, but did not have operational responsibilities.

A.There is only one rule per group with access privileges.

B.The network security group can change network address translation (NAT).

C.Individual permissions are overriding group permissions.

D.There are conflicting permit and deny rules for the IT group.

A.The user department will manage access rights.

B.The replacement is occurring near year-end reporting

C.Testing was performed by the third-party consultant

D.Data migration is not part of the contracted activities.

A.Application level firewalls

B.File level encryption

C.File transfer protocol (FTP)

D.Instant messaging policy