The amount of data that will be collected during an audit is primarily determined by the audit scope. The audit scope is the extent and boundaries of the audit, such as the subject matter, the time period, the locations, the departments, the functions, the systems, or the processes to be audited. The audit scope defines what will be included or excluded from the audit, and it helps to ensure that the audit objectives are met and the audit resources are used efficiently and effectively. The auditor's experience level, the availability of the data, and the integrity of the data are not the primary factors that determine the amount of data that will be collected during an audit, as they depend on the audit scope to be defined first. References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 1, Security and Risk Management, page 54. Official (ISC)2 CISSP CBK Reference, Fifth Edition, Chapter 1, Security and Risk Management, page 69.

Procedural code in a procedural language implies sequential execution
of instructions based on the von Neumann architecture of a CPU,
Memory, and Input/Output device. Variables are part of the sets of
instructions used to solve a particular problem and, thus, the data are not separate from the statements. Such languages have control statements such as goto, ifthenelse and so on. The program execution is iterative and corresponds to a sequence of state changes in a state
machine.
*Answer knowledge base, refers to the rules and facts of the
particular problem domain.
*The inference engine takes the inputs to the KBS and uses the knowledge base to infer new facts and to solve the problem.
*Answer "Interface between the user and the system" refers to the interface between the user and the system through which the data are entered, displayed, and output.

Replay can be accomplished on Kerberos if the compromised tickets are used within an allotted time window.
The security depends on careful implementation:enforcing limited lifetimes for authentication credentials minimizes the threat of of replayed credentials, the KDC must be physically secured, and it should be hardened, not permitting any non-kerberos activities.
Reference:
Official ISC2 Guide to the CISSP, 2007 Edition, page 184
also see:
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten
Domains of Computer Security, 2001, John Wiley & Sons, Page 42