Explanation/Reference:
Explanation:
ISPs can use access control lists to implement inbound traffic filtering as a control to identify IP packets transmitted from unauthorized sources.

The ability of one individual to capture and verify messages represents an inadequate segregation, since messages can be taken as correct and as if they had already been verified.

Section: Protection of Information Assets
Explanation:
The basis for an expert system is the capture and recording of the knowledge and experience of individuals
in an organization. Coding and entering the knowledge in a central repository, shareable within the
enterprise, is a means of facilitating the expert system. Enhancing personnel productivity and performance
is a benefit; however, it is not as important as capturing the knowledge and experience. Employee turnover
is not necessarily affected by an expert system.

Section: Protection of Information Assets
Explanation:
In performing detailed network assessments and access control reviews, an IS auditor should first determine the points of entry to the system and review the points of entry accordingly for appropriate controls. Evaluation of user access authorization, assessment of user identification and authorization, and evaluation of the domain-controlling server configuration are all implementation issues for appropriate controls for the points of entry.