Question 1

A company's audit committee is solely responsible for fraud risk assessments.

Accepted Answer

A) True 
 B)False

Question 2

To prevent invalid data input,a bank added an extra number at the end of each account number and subjected the new number to an algorithm.This technique is known as:

Accepted Answer

A) A validation check. 
B) check digit verification. 
C) A dependency check. 
D) A format check. 
A) A validation check. 
B) check digit verification. 
C) A dependency check. 
D) A format check.

Question 3

When computer programs or files can be accessed from terminals,users should be required to enter a(n):

Accepted Answer

A) Parity check. 
B) Password as a personal identification code. 
C) Check digit. 
D) Echo check. 
A) Parity check. 
B) Password as a personal identification code. 
C) Check digit. 
D) Echo check.

Question 4

Which of the following describes the recommended prerequisites for managing vulnerabilities?

Accepted Answer

A) Implement the COSO ERM framework,and identify key vulnerabilities. 
B) Determine the main objective of vulnerability management,and assign roles and responsibilities. 
C) Identify the key vulnerabilities,and implement appropriate controls to minimize the vulnerabilities. 
D) Implement suitable controls,and assess those controls for potential vulnerabilities. 
A) Implement the COSO ERM framework,and identify key vulnerabilities. 
B) Determine the main objective of vulnerability management,and assign roles and responsibilities. 
C) Identify the key vulnerabilities,and implement appropriate controls to minimize the vulnerabilities. 
D) Implement suitable controls,and assess those controls for potential vulnerabilities.

Question 5

Bacchus,Inc.is a large multinational corporation with various business units around the world.After a fire destroyed the corporation headquarters and largest manufacturing site,plans for which of the following would help Bacchus ensure a timely recovery?

Accepted Answer

A) Daily backup. 
B) Network security. 
C) Business continuity. 
D) Backup power. 
A) Daily backup. 
B) Network security. 
C) Business continuity. 
D) Backup power.

Question 6

Which of the following statements is incorrect?

Accepted Answer

A) A fraud prevention program starts with a fraud risk assessment across the entire firm 
B) The audit committee typically has an oversight role in risk assessment process 
C) Communicating a firm's policy file to employees is one of the most important responsibilities of management 
D) A fraud prevention program should include an evaluation on the efficiency of business processes. 
A) A fraud prevention program starts with a fraud risk assessment across the entire firm 
B) The audit committee typically has an oversight role in risk assessment process 
C) Communicating a firm's policy file to employees is one of the most important responsibilities of management 
D) A fraud prevention program should include an evaluation on the efficiency of business processes.

Question 7

Which of the following is not included in the remediation phase for vulnerability management?

Accepted Answer

A) Risk Response Plan. 
B) Policy and procedures for remediation. 
C) Vulnerability Prioritization. 
D) Control Implementation. 
A) Risk Response Plan. 
B) Policy and procedures for remediation. 
C) Vulnerability Prioritization. 
D) Control Implementation.

Question 8

The goal of information security management is to maintain confidentiality,integrity and availability of a firm's information.

Accepted Answer

A) True 
 B)False

Question 9

Which of the following statements is most accurate with regard to business continuity management (BCM)and disaster recovery planning (DRP)?

Accepted Answer

A) DRP is an important component of BCM. 
B) BCM and DRP should be considered independently of each other. 
C) BCM is an important component of DRP. 
D) DRP should be considered as optional,while BCM should be considered as necessary. 
A) DRP is an important component of BCM. 
B) BCM and DRP should be considered independently of each other. 
C) BCM is an important component of DRP. 
D) DRP should be considered as optional,while BCM should be considered as necessary.

Question 10

Spam is a self-replicating program that runs and spreads by modifying other programs or files.

Accepted Answer

A) True 
 B)False

Question 11

Which of the following statements is true regarding risk management and vulnerability management?

Accepted Answer

A) They both have the objective of reducing the likelihood that detrimental events occur. 
B) Risk management is often conducted using an IT asset-based approach. 
C) Vulnerability management is more complex and strategic. 
D) Both approaches involve processes that typically take many months or years to complete. 
A) They both have the objective of reducing the likelihood that detrimental events occur. 
B) Risk management is often conducted using an IT asset-based approach. 
C) Vulnerability management is more complex and strategic. 
D) Both approaches involve processes that typically take many months or years to complete.

Question 12

An information technology director collected the names and locations of key vendors,current hardware configuration,names of team members,and an alternative processing location.What is the director most likely preparing?

Accepted Answer

A) Data restoration plan. 
B) Disaster recovery plan. 
C) System security policy. 
D) System hardware policy. 
A) Data restoration plan. 
B) Disaster recovery plan. 
C) System security policy. 
D) System hardware policy.

Question 13

One type of fault tolerance is using redundant units to provide a system the ability to continue functioning when part of the system fails.

Accepted Answer

A) True 
 B)False

Question 14

A Trojan Horse is a self-replicating,self-propagating,self-contained program that uses networking mechanisms to spread itself.

Accepted Answer

A) True 
 B)False

Question 15

Asymmetric-key encryption is suitable for encrypting large data sets or messages.

Accepted Answer

A) True 
 B)False

Question 16

Encryption is a control that changes plain text into which of the following?

Accepted Answer

A) Cyberspace. 
B) Cryptext. 
C) Mnemonic code. 
D) Cyphertext. 
A) Cyberspace. 
B) Cryptext. 
C) Mnemonic code. 
D) Cyphertext.

Question 17

Symmetric-key encryption is rarely used today due to key distribution and key management issues.

Accepted Answer

A) True 
 B)False

Question 18

Asymmetric-key encryption uses which of the following techniques to allow users to communicate securely?

Accepted Answer

A) A message digest. 
B) A 16-bit encryption key. 
C) A public key and a private key. 
D) A digital signature. 
A) A message digest. 
B) A 16-bit encryption key. 
C) A public key and a private key. 
D) A digital signature.

A company's audit committee is solely responsible for fraud risk assessments.

To prevent invalid data input,a bank added an extra number at the end of each account number and subjected the new number to an algorithm.This technique is known as:

When computer programs or files can be accessed from terminals,users should be required to enter a(n):

Which of the following describes the recommended prerequisites for managing vulnerabilities?

Bacchus,Inc.is a large multinational corporation with various business units around the world.After a fire destroyed the corporation headquarters and largest manufacturing site,plans for which of the following would help Bacchus ensure a timely recovery?

Which of the following statements is incorrect?

Which of the following is not included in the remediation phase for vulnerability management?

The goal of information security management is to maintain confidentiality,integrity and availability of a firm's information.

Which of the following statements is most accurate with regard to business continuity management (BCM)and disaster recovery planning (DRP)?

Spam is a self-replicating program that runs and spreads by modifying other programs or files.

Which of the following statements is true regarding risk management and vulnerability management?

An information technology director collected the names and locations of key vendors,current hardware configuration,names of team members,and an alternative processing location.What is the director most likely preparing?

One type of fault tolerance is using redundant units to provide a system the ability to continue functioning when part of the system fails.

A Trojan Horse is a self-replicating,self-propagating,self-contained program that uses networking mechanisms to spread itself.

Asymmetric-key encryption is suitable for encrypting large data sets or messages.

Encryption is a control that changes plain text into which of the following?

Symmetric-key encryption is rarely used today due to key distribution and key management issues.

Asymmetric-key encryption uses which of the following techniques to allow users to communicate securely?

Accounting Information Systems and Firm Value

Accountants As Business Analysts

Data Modeling

Relational Databases and Enterprise Systems

Sales and Collections Business Process

Purchases and Payments Business Process

Conversion Business Process

Reporting Processes and Extensible Business Reporting Language Xbrl

Data Analytics in Accounting: Concepts and the Amps Model

Data Analytics in Accounting: Tools and Practice

Emerging Technologies: Blockchain and Ai Automation

Accounting Information Systems and Internal Controls

Monitoring and Auditing Ais

The Balanced Scorecard, Business Model Canvas, and Business Value of Information Technology

Evaluating Ais Investments

Filters

Exam 14: Information Security and Computer Fraud

A company's audit committee is solely responsible for fraud risk assessments.

To prevent invalid data input,a bank added an extra number at the end of each account number and subjected the new number to an algorithm.This technique is known as:

When computer programs or files can be accessed from terminals,users should be required to enter a(n):

Which of the following describes the recommended prerequisites for managing vulnerabilities?

Bacchus,Inc.is a large multinational corporation with various business units around the world.After a fire destroyed the corporation headquarters and largest manufacturing site,plans for which of the following would help Bacchus ensure a timely recovery?

Which of the following statements is incorrect?

Which of the following is not included in the remediation phase for vulnerability management?

The goal of information security management is to maintain confidentiality,integrity and availability of a firm's information.

Which of the following statements is most accurate with regard to business continuity management (BCM)and disaster recovery planning (DRP)?

Spam is a self-replicating program that runs and spreads by modifying other programs or files.

Which of the following statements is true regarding risk management and vulnerability management?

An information technology director collected the names and locations of key vendors,current hardware configuration,names of team members,and an alternative processing location.What is the director most likely preparing?

One type of fault tolerance is using redundant units to provide a system the ability to continue functioning when part of the system fails.

A Trojan Horse is a self-replicating,self-propagating,self-contained program that uses networking mechanisms to spread itself.

Asymmetric-key encryption is suitable for encrypting large data sets or messages.

Encryption is a control that changes plain text into which of the following?

Symmetric-key encryption is rarely used today due to key distribution and key management issues.

Asymmetric-key encryption uses which of the following techniques to allow users to communicate securely?

Accounting Information Systems and Firm Value

Accountants As Business Analysts

Data Modeling

Relational Databases and Enterprise Systems

Sales and Collections Business Process

Purchases and Payments Business Process

Conversion Business Process

Reporting Processes and Extensible Business Reporting Language Xbrl

Data Analytics in Accounting: Concepts and the Amps Model

Data Analytics in Accounting: Tools and Practice

Emerging Technologies: Blockchain and Ai Automation

Accounting Information Systems and Internal Controls

Monitoring and Auditing Ais

The Balanced Scorecard, Business Model Canvas, and Business Value of Information Technology

Evaluating Ais Investments

Filters