Explanation/Reference:
Explanation:
The transport layer of the TCP/IP protocol suite provides for connection- oriented protocols to ensure reliable communication.

Section: Protection of Information Assets
Explanation/Reference:
The NOT is a keyword used in the question. You need to find out invalid statement about VoIP. VoIP uses
packet switching and not circuit switching.
For your exam you should know below information about VoIP:
Voice-Over-IP
IP telephony, internet telephony, is the technology that makes it possible to have a voice conversation over
the Internet or over any dedicated IP network instead of dedicated transmission lines. The protocol is used
to carry the signal over the IP network are commonly referred as Voice-Over-IP (VoIP).VoIP is a technology
where voice traffic is carried on top of existing data infrastructure. Sounds are digitalized into IP packets
and transferred through the network layer before being decode back into the original voice.
VoIP allows the elimination of circuit switching and the associated waste of bandwidth. Instead, packet
switching is used, where IP packets with voice data are sent over the network only when data needs to be
sent.
It has advantages over traditional telephony:
Unlike traditional telephony, VoIP innovation progresses at market rates rather than at the rates of
multilateral committee process of the International Telecommunication Union (ITU)
Lower cost per call or even free calls, especially for long distance call
Lower infrastructure costs. Once IP infrastructure is installed, no or little additional telephony infrastructure
is needed
VoIP Security Issues
With the introduction of VoIP, the need for security is more important because it is needed to protect two
assets - the data and the voice.
Protecting the security of conversation is vital now.
In VoIP, packets are sent over the network from the user's computer or VoIP phone to similar equipment at
other end. Packets may pass through several intermediate systems that are not under the control of the
user's ISP.The current Internet architecture does not provide same physical wire security as phone line.
The main concern of VoIP solution is that while, in the case of traditional telephones, if data system is
disrupted, then the different sites of the organization could still be reached via telephone. Thus a backup
communication facility should be planned for if the availability of communication is vital to organization.
Another issue might arise with the fact that IP telephones and their supporting equipment require the same
care and maintenance as computer system do.
To enhance the protection of the telephone system and data traffic, the VoIP infrastructure should be
segregated using Virtual Local Area Network (VLAN).
In many cases, session border controllers (SBCs) are utilized to provide security features for VoIP traffic
similar to that provided by firewalls.
The following were incorrect answers:
Lower cost per call or even free calls, especially for long distance call - This is a valid statement about
VoIP. In fact it is an advantage of VoIP.
Lower infrastructure cost - This is a valid statement and advantage of using VoIP as compare to traditional
telephony system.
VoIP is a technology where voice traffic is carried on top of existing data infrastructure - This is also valid
statement about VoIP.
The following reference(s) were/was used to create this question:
CISA review manual 2014 Page number355

Explanation/Reference:
Explanation:
Testing is crucial in determining that user requirements have been validated. The IS auditor should be involved in this phase and review error reports for their precision in recognizing erroneous data and review the procedures for resolving errors. A conceptual design specification is a document prepared during the requirements definition phase. A vendor contract is prepared during a software acquisition process.
Program change requests would normally be reviewed as a part of the postimplementation phase.

Explanation/Reference:
Investigation is the process that converts the information extracted to a format that can be understood by investigator. It includes conversion of hexadecimal or binary data into readable characters or a format suitable for data analysis tool.
For CISA exam you should know below mentioned key elements of computer forensics during audit planning.
Data Protection -To prevent sought-after information from being altered, all measures must be in place. It is important to establish specific protocol to inform appropriate parties that electronic evidence will be sought and not destroy it by any means.
Data Acquisition - All information and data required should transferred into a controlled location; this includes all types of electronic media such as fixed disk drives and removable media. Each device must be checked to ensure that it is write protected. This may be achieved by using device known as write blocker.
Imaging -The Imaging is a process that allows one to obtain bit-for bit copy of a data to avoid damage of original data or information when multiple analyses may be performed. The imaging process is made to obtain residual data, such as deleted files, fragments of deleted files and other information present, from the disk for analysis. This is possible because imaging duplicates the disk surface, sector by sector.
Extraction - This process consist of identification and selection of data from the imaged data set. This process should include standards of quality, integrity and reliability. The extraction process includes software used and media where an image was made. The extraction process could include different sources such as system logs, firewall logs, audit trails and network management information.
Interrogation -Integration is used to obtain prior indicators or relationships, including telephone numbers, IP addresses, and names of individuals from extracted data.
Investigation/ Normalization -This process converts the information extracted to a format that can be understood by investigator. It includes conversion of hexadecimal or binary data into readable characters or a format suitable for data analysis tool.
Reporting- The information obtained from computer forensic has limited value when it is not collected and reported in proper way. When an IS auditor writes report, he/she must include why the system was reviewed, how the computer data were reviewed and what conclusion were made from analysis. The report should achieve the following goals Accurately describes the details of an incident.
Be understandable to decision makers.
Be able to withstand a barrage of legal security
Be unambiguous and not open to misinterpretation.
Be easily referenced
Contains all information required to explain conclusions reached
Offer valid conclusions, opinions or recommendations when needed
Be created in timely manner.
The following were incorrect answers:
Interrogation -Integration is used to obtain prior indicators or relationships, including telephone numbers, IP addresses, and names of individuals from extracted data.
Extraction - This process consist of identification and selection of data from the imaged data set. This process should include standards of quality, integrity and reliability.
Reporting -The information obtained from computer forensic has limited value when it is not collected and reported in proper way. When an IS auditor writes report, he/she must include why the system was reviewed, how the computer data were reviewed and what conclusion were made from analysis.
Following reference(s) were/was used to create this question:
CISA review manual 2014 Page number367 and 368