A.Problem statement

B.Alternative solutions

C.Cost-benefit analysis

D.Management approval

A.authenticating using username and password

B.downloading files from the host server

C.forwarding email and Internet protocol (IP) addresses

D.obtaining a public key from a certification authority (CA)

A.To assess evidence for management reporting

B.To validate the correctness of reported findings

C.To assess the risk of the audit environment

D.To validate remediation efforts

A.Assigning access to users according to the principle of least privilege

B.Lack of employee awareness of organizational security policies

C.Improperly configured routers and router access lists

D.Configuring firewall access rules

A.quality assurance function is separate from the programming function

B.scope of quality assurance activities is undefined

C.SDLC is coupled with the quality assurance plan

D.quality assurance function is periodically reviewed by internal audit