Question 1

The only risk related to the entry points of telecommuting workers is the interaction risk.

Accepted Answer

A) True 
 B)False

Question 2

The form authorization and control includes the requirement that source documents should be prenumbered and are to be used in sequence.

Accepted Answer

A) True 
 B)False

Question 3

The company-to-company transfer of standard business documents in electronic form is called:

Accepted Answer

A) Facsimile Transmission 
B) PDF Interchange 
C) Electronic Data Interchange 
D) Tele-transmission 
A) Facsimile Transmission 
B) PDF Interchange 
C) Electronic Data Interchange 
D) Tele-transmission

Question 4

In entering client contact information in the computerized database of a telemarketing business, a clerk erroneously entered nonexistent area codes for a block of new clients.This error rendered the block of contacts useless to the company.Which of the following would most likely have led to discovery of this error into the company's computerized system?

Accepted Answer

A) Limit check 
B) Validity check 
C) Sequence check 
D) Record count 
A) Limit check 
B) Validity check 
C) Sequence check 
D) Record count

Question 5

Specific software tools that monitor data flow within a network and alert the IT staff to hacking attempts or other unauthorized access attempts is called:

Accepted Answer

A) Security detection 
B) Vulnerability assessment 
C) Penetration testing 
D) Intrusion detection 
A) Security detection 
B) Vulnerability assessment 
C) Penetration testing 
D) Intrusion detection

Question 6

The software that accomplishes end user tasks such as work processing, spreadsheets, and accounting functions is called:

Accepted Answer

A) Operating Software 
B) Database Software 
C) Application Software 
D) Management Software 
A) Operating Software 
B) Database Software 
C) Application Software 
D) Management Software

Question 7

General controls are divided into five broad categories.Which of the following is not one of these categories?

Accepted Answer

A) Authentication of users and limiting unauthorized access 
B) Hacking and other network break-ins 
C) Fraud Prevention 
D) Business Continuity 
A) Authentication of users and limiting unauthorized access 
B) Hacking and other network break-ins 
C) Fraud Prevention 
D) Business Continuity

Question 8

It is necessary to identify the "entry points" in the IT system that make an organization susceptible to IT risks.

Accepted Answer

A) True 
 B)False

Question 9

Each organization has to decide which combination of IT controls is most suitable for its IT system, making sure that the benefits of each control outweigh its costs.

Accepted Answer

A) True 
 B)False

Question 10

Hacking can be prevented by using which of the following?

Accepted Answer

A) Firewalls 
B) Encryption 
C) Virtual Private Networks 
D) None of the Above 
E) All of the above 
A) Firewalls 
B) Encryption 
C) Virtual Private Networks 
D) None of the Above 
E) All of the above

Question 11

Unauthorized access to the operating system would allow the unauthorized user to:

Accepted Answer

A) Browse disk files for sensitive data or passwords. 
B) Alter data through the operating system. 
C) Alter application programs. 
D) All of the above 
A) Browse disk files for sensitive data or passwords. 
B) Alter data through the operating system. 
C) Alter application programs. 
D) All of the above

Question 12

Which of the following items is not one of the source document controls?

Accepted Answer

A) Validity check 
B) Form design 
C) Form authorization and control 
D) Retention of source documents 
A) Validity check 
B) Form design 
C) Form authorization and control 
D) Retention of source documents

Question 13

If a company's IT system fails, it would have little or no effect on the company's operations.

Accepted Answer

A) True 
 B)False

Question 14

This form of encryption uses a public key, which is known by everyone, to encrypt data, and a private key, to decode the data.

Accepted Answer

A) Multiple encryption 
B) Public key encryption 
C) Wired encryption 
D) Symmetric encryption 
A) Multiple encryption 
B) Public key encryption 
C) Wired encryption 
D) Symmetric encryption

Question 15

In a wireless network, signals are transmitted through the air rather than over cables.Anyone who wants to gain access to the network would need to know the password to access these "air-borne" signals.

Accepted Answer

A) True 
 B)False

Question 16

Scalability, related to public cloud computing, refers to the fact that as a company can easily purchase new capacity from the cloud provider.

Accepted Answer

A) True 
 B)False

Question 17

Which of the following is not a good example of an effective password?

Accepted Answer

A) ABC*$123 
B) a1b2c3 
C) A*1b?2C$3 
D) MSU#Rules$ 
A) ABC*$123 
B) a1b2c3 
C) A*1b?2C$3 
D) MSU#Rules$

Question 18

A self-replicating piece of program code that can attach itself to other programs and data and perform malicious actions is referred to as an):

Accepted Answer

A) Worm 
B) Encryption 
C) Virus 
D) Infection 
A) Worm 
B) Encryption 
C) Virus 
D) Infection

Question 19

Internal controls that apply overall to the IT system are called:

Accepted Answer

A) Overall Controls 
B) Technology Controls 
C) Application Controls 
D) General Controls 
A) Overall Controls 
B) Technology Controls 
C) Application Controls 
D) General Controls

Question 20

An alternative power supply that provides electrical power in the event that a main source is lost is called:

Accepted Answer

A) Uninterruptible power supply 
B) System power supply 
C) Emergency power supply 
D) Battery power supply 
A) Uninterruptible power supply 
B) System power supply 
C) Emergency power supply 
D) Battery power supply

The only risk related to the entry points of telecommuting workers is the interaction risk.

The form authorization and control includes the requirement that source documents should be prenumbered and are to be used in sequence.

The company-to-company transfer of standard business documents in electronic form is called:

Specific software tools that monitor data flow within a network and alert the IT staff to hacking attempts or other unauthorized access attempts is called:

The software that accomplishes end user tasks such as work processing, spreadsheets, and accounting functions is called:

General controls are divided into five broad categories.Which of the following is not one of these categories?

It is necessary to identify the "entry points" in the IT system that make an organization susceptible to IT risks.

Each organization has to decide which combination of IT controls is most suitable for its IT system, making sure that the benefits of each control outweigh its costs.

Hacking can be prevented by using which of the following?

Unauthorized access to the operating system would allow the unauthorized user to:

Which of the following items is not one of the source document controls?

If a company's IT system fails, it would have little or no effect on the company's operations.

This form of encryption uses a public key, which is known by everyone, to encrypt data, and a private key, to decode the data.

In a wireless network, signals are transmitted through the air rather than over cables.Anyone who wants to gain access to the network would need to know the password to access these "air-borne" signals.

Scalability, related to public cloud computing, refers to the fact that as a company can easily purchase new capacity from the cloud provider.

Which of the following is not a good example of an effective password?

A self-replicating piece of program code that can attach itself to other programs and data and perform malicious actions is referred to as an):

Internal controls that apply overall to the IT system are called:

An alternative power supply that provides electrical power in the event that a main source is lost is called:

Introduction to AIS

Foundational Concepts of the AIS

Fraud, Ethics, and Internal Control

IT Governance

Erp Systems

Auditing Information Technology Bases Processes

Revenue and Cash Collection Processes

Expenditures Processes and Controls - Purchases

Expenditures Processes and Controls Payroll and Fixed Assets

Conversion Processes and Controls

Administrative Processes and Controls

Data and Databases

Ecommerce and Ebusiness

Filters

Exam 4: Internal Controls and Risks in IT Systems

The only risk related to the entry points of telecommuting workers is the interaction risk.

The form authorization and control includes the requirement that source documents should be prenumbered and are to be used in sequence.

The company-to-company transfer of standard business documents in electronic form is called:

Specific software tools that monitor data flow within a network and alert the IT staff to hacking attempts or other unauthorized access attempts is called:

The software that accomplishes end user tasks such as work processing, spreadsheets, and accounting functions is called:

General controls are divided into five broad categories.Which of the following is not one of these categories?

It is necessary to identify the "entry points" in the IT system that make an organization susceptible to IT risks.

Each organization has to decide which combination of IT controls is most suitable for its IT system, making sure that the benefits of each control outweigh its costs.

Hacking can be prevented by using which of the following?

Unauthorized access to the operating system would allow the unauthorized user to:

Which of the following items is not one of the source document controls?

If a company's IT system fails, it would have little or no effect on the company's operations.

This form of encryption uses a public key, which is known by everyone, to encrypt data, and a private key, to decode the data.

In a wireless network, signals are transmitted through the air rather than over cables.Anyone who wants to gain access to the network would need to know the password to access these "air-borne" signals.

Scalability, related to public cloud computing, refers to the fact that as a company can easily purchase new capacity from the cloud provider.

Which of the following is not a good example of an effective password?

A self-replicating piece of program code that can attach itself to other programs and data and perform malicious actions is referred to as an):

Internal controls that apply overall to the IT system are called:

An alternative power supply that provides electrical power in the event that a main source is lost is called:

Introduction to AIS

Foundational Concepts of the AIS

Fraud, Ethics, and Internal Control

IT Governance

Erp Systems

Auditing Information Technology Bases Processes

Revenue and Cash Collection Processes

Expenditures Processes and Controls - Purchases

Expenditures Processes and Controls Payroll and Fixed Assets

Conversion Processes and Controls

Administrative Processes and Controls

Data and Databases

Ecommerce and Ebusiness

Filters