QUESTION 8 Project documentation is the review of all relevant material related to the IT operation, application, program, and/or software and is generally not a significant part of an IT audit.

True False

QUESTION 9 When conducting a web server IT audit the auditor should ensure that the web server has appropriate logging enabled and that monitoring processes are in place.

True False

QUESTION 10 A vulnerability in assessing risk could be the absence or weakness of cumulative controls protecting the asset(s).

True False