1. (TCO 3) Which of the following preventive controls are necessary to provide adequate security for social engineering threats? (Points : 2) Controlling remote access Encryption Host and application hardening Awareness training 2. (TCO 3) Multi-factor authentication (Points : 2) Involves the use of two or more basic authentication methods. Is a table specifying which portions of the systems users are permitted to access. Provides weaker authentication than the use of effective passwords. Requires the use of more than one effective password. 3. (TCO 3) The Trust Services Framework reliability principle that states that users must be able to enter, update, and retrieve data during agreed-upon times is known as (Points : 2) availability. security. maintainability. integrity. 4. (TCO 3) Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information? (Points : 2) Access. Monitoring and enforcement. Registration. Security. 5. (TCO 3) With which stage in the auditing process are the consideration of risk factors and materiality most associated? (Points : 2) audit planning collection of audit evidence communication of audit results evaluation of audit evidence 6. (TCO 3) Identify six physical access controls. (Points : 5) 7. (TCO 3) Explain why the auditor's role in program development and acquisition should be limited. (Points : 5)