CISAEXAM
Chapter1-ANS- Sourcecode-ANS-uncompiled,archivecode Objectcode-ANS-compiledcodethatisdistributedandputintoproduction;notabletoberead byhumans Inherentrisk-ANS-theriskthatanerrorcouldoccurassumingnocompensatingcontrolexist Controlrisk-ANS-theriskthatanerrorexiststhatwouldnotbepreventedbyinternalcontrols Detectionrisk-ANS-theriskthatanerrorexists,butisnotdetected.TheriskthatanISauditor mayuseaninadequatetestprocedureandconcludethatnomaterialerrorexistswheninfact errorsdoexist.Auditrisk-ANS-theoveralllevelofrisk;thelevelofrisktheauditorispreparedtoaccept.Compliancetesting-ANS-determinesifcontrolsarebeingappliedinamannerthatcomplies withmgmt'spoliciesandprocedures Substantivetesting-ANS-evaluatestheintegrityofindividualtransactions,data,andother information.Regressiontesting-ANS-usedtoretestearlierprogramabendsthatoccurredduringtheinitial testingphase.Sociabilitytesting-ANS-toensuretheapplicationworksasexpectedinthespecified environmentwhereotherapplicationsrunconcurrently.Includestestingofinterfaceswithother systems.Paralleltesting-ANS-Feedingtestdataintotwosystemsandcomparingtheresults.Whiteboxtesting-ANS-testthesoftware'sprogramlogic.Blackboxtesting-ANS-Testingthefunctionaloperatingeffectivenesswithoutregardtointernal programstructure.Redundancycheck-ANS-detectstransmissionerrorsbyappendingcalculatedbitsontotheend ofeachsegmentofdata. 1 / 3
Variablesampling-ANS-usedtoestimatetheaverageortotalvalueofapopulation.Discoverysampling-ANS-usedtodeterminetheprobabilityoffindinganattributeina population.Attributesampling-ANS-selectingitemsfromapopulationbasedonacommonattribute.Used forcompliancetesting.Chapter2-ANS- SteeringCommittee-ANS-Appointedbyseniormanagement.Servesasageneralreviewboard forprojectsandacquisitions...notinvolvedinroutineoperations.Thecommitteeshouldinclude representativesfromseniormanagement,usermanagement,andtheISdepartment.Escalates issuestoseniormanagement.RequestforProposal(RFP)-ANS-Adocumentdistributedtosoftwarevendorsrequestingtheir submissionofaproposaltodeveloporprovideasoftwareproduct.RFPshouldinclude:Project Overview,KeyRequirementsandConstraints,ScopeLimitations,Vendorquestionnaire, customerreferences,demonstrations,etc.QualityAssurance-ANS-Checktoverifypoliciesarefollowed.QualityControl-ANS-Checktoverifyfreefromdefects.Bottom-upapproachforpolicydevelopment-ANS-beginsbydefiningoperational-level requirementsandpolicieswhicharederivedandimplementedasaresultofariskassessment.Chapter3-ANS- OSIModel-ANS-AllPeopleSeemToNeedDominosPizza Layer7-Applicationlayer-ANS-Theapplicationlayerinterfacesdirectlytoandperforms commonapplicationservicesfortheapplicationprocesses.Layer6-Presentationlayer-ANS-ThepresentationlayerrelievestheApplicationlayerof concernregardingsyntacticaldifferencesindatarepresentationwithintheend-usersystems.MIMEencoding,datacompression,encryption,andsimilarmanipulationofthepresentationof dataisdoneatthislayer.Layer5-Sessionlayer-ANS-Thesessionlayerprovidesthemechanismformanagingthe dialoguebetweenend-userapplicationprocesses(Bydialogwemeanthatwhoseturnisitto transmit).Itprovidesforeitherduplexorhalf-duplexoperation.Thislayerisresponsiblefor settingupandtearingdownTCP/IPsessions. 2 / 3
Layer4-Transportlayer-ANS-Thetransportlayerisresponsibleforreliabledatadelivery.The transportlayerprovidestransparenttransferofdatabetweenendusers,thusrelievingtheupper layersfromanyconcernwithprovidingreliableandcost-effectivedatatransfer.Thetransport layercontrolsthereliabilityofagivenlink.Thetransportlayercankeeptrackofpacketsand retransmitthosethatfail.Alsoaddressespacketsequencing.Thebestknownexampleofa layer4protocolisTCP.Layer3-Networklayer-ANS-Thenetworklayerprovidesthefunctionalandproceduralmeans oftransferringvariablelengthdatasequencesfromasourcetoadestinationviaoneormore networkswhilemaintainingthequalityofservicerequestedbytheTransportlayer.TheNetwork layerperformsnetworkrouting,flowcontrol,segmentation/desegmentation,anderrorcontrol functions.Routersoperateatthislayer--sendingdatathroughouttheextendednetwork Layer2-Datalinklayer-ANS-Thedatalinklayerprovidesthefunctionalandproceduralmeans totransferdatabetweennetworkentitiesandtodetectandpossiblycorrecterrorsthatmay occurinthePhysicallayer.Theaddressingschemeisphysicalwhichmeansthattheaddresses (MACaddress)arehard-codedintothenetworkcardsatthetimeofmanufacture.The
addressingschemeisflat.Note:ThebestknownexampleofthisisEthernet.
Layer1-Physicallayer-ANS-Thephysicallayerdefinesallelectricalandphysical specificationsfordevices.Thisincludesthelayoutofpins,voltages,andcablespecifications.Hubsandrepeatersarephysical-layerdevices.Metadata-ANS-isliterally"dataaboutdata."Thistermreferstoinformationaboutdataitself-- perhapstheorigin,size,formattingorothercharacteristicsofadataitem.Primarykey-ANS-Everydatabasetableshouldhaveoneormorecolumnsdesignatedasthe primarykey.Thevaluethiskeyholdsshouldbeuniqueforeachrecordinthedatabase(e.g.SocialSecuritynumber).Foreignkey-ANS-Thesekeysareusedtocreaterelationshipsbetweentables.Referentialintegrityconstraints-ANS-ensurethatachangeinaprimarykeyofonetableis automaticallyupdatedinamatchingforeignkeyofothertables.Thisisdoneusingtriggers.Normalization-ANS-Theeliminationofredundantdata.Tuple-ANS-rowinatable DanglingTuple-ANS-rowinatablethathaslostreferentialintegrity DDL-DataDefinitionLanguage-ANS-usedforsetupanremovalphases,definesdbstructure DML-DataManipulationLanguage-ANS-usedtoinsert,retrieveandmodifydata
- / 3