Which of the following types of attack works by taking advantage of the unenforced and unchecked assumptions the system makes about its inputs?

During the extraction and transfer process of data from an application database to an enterprise data
warehouse, some of the fields were not picked up in the extraction process and therefore did not end up in
the data warehouse. Which of the following is the GREATEST concern with this situation?

Which of the following is MOST effective in detecting an intrusion attempt?

Backup procedures for an organization's critical data are considered to be which type of control?

Which of the following is MOST important for an IS auditor to verify when reviewing an organization's information security practices following the adoption of a bring your own device (8YOD) program?