Purpose of a Security Audit CT-SEC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common framework used as audit criteria for information security management?

   • AISO/IEC 27001
   • BPMBOK
   • CITIL
   • DTOGAF
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the first phase of a typical security audit process?

   • APlanning and preparation
   • BData collection
   • CFollow-up
   • DReporting
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which statement correctly contrasts a security audit and a security assessment?

   • AAn audit typically results in a pass/fail against criteria, while an assessment provides a risk-based view
   • BAn audit always includes penetration testing, while an assessment never does
   • CAn audit is informal, while an assessment is formal
   • DAn audit is only for external compliance, while an assessment is only for internal improvement
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which framework is commonly used as audit criteria for web application security?

   • ACMMI
   • BPRINCE2
   • CCOBIT
   • DOWASP
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Why are security audits essential for an organization?

   • AThey eliminate all security risks permanently
   • BThey replace the need for security policies
   • CThey help ensure compliance and support continuous improvement
   • DThey guarantee that no security breach will ever occur
   Reveal Solution Discussion Select an answer first