1. Which of the following is an example of an IT general control for system development?

A. Providing training to users on system functions and controls

B. Implementing network security protocols

C. Reviewing and testing software changes before implementation

D. Restricting physical access to servers

2. Risks to information systems include all except:

A. Software bugs

B. Viruses & other threats

C. Hackers

D. Fishing

3. With this approach, auditors usually enter fake information into the clients systems.

A. Fake testing facility

B. Customized or purpose-written programs

C. Utility programs

D. Integrated test facility