Exam 4: Internal Controls and Risks in IT Systems

A company using public cloud computing has the ability to purchase new capacity from the cloud provider, instead of buyer servers or new data storage.This ability is referred to as:

The use of the smart card or security tokens is referred to as a two factor authorization because:

General controls for an IT system include:

Controls will help to reduce risks, but it is impossible to completely eliminate risks.

To increase the effectiveness of login restrictions, user Ids must be unique for each user.

The user ID and password for a particular user should not allow access to the configuration tables unless that user is authorized to change the configuration settings.

It is important to understand that the IT governance committee delegates many of its duties by the policies that it develops.

Many companies use a public cloud computing model for software, data storage or both.Which of the following is an advantage to the public cloud computing model?

The paper form used to capture and record the original data of an accounting transaction is called an):

Field check, limit check, range check and sequence check are all examples of:

This type of input validation check examines a field to ensure that the data entry in the field is valid compared with a preexisting list of acceptable values.

A proactive program for considering risks to the business continuation and the development of plans and procedures to reduce those risks is referred to as:

Unauthorized access is a concern when an IT system is networked to either internal networks or the Internet.

Authorized employees may need to access the company IT system from locations outside the organization.These employees should connect to the IT system using this type of network.

This type of input check ensures that the batch of transactions is sorted in order, but does not help to find the missing transactions.

This form of encryption uses a single encryption key that must be used to encrypt data and also to decode the encrypted data.

To verify the accuracy of application software, an organization should be sure the software is tested before it is implemented and must regularly test it after implementation.

Large-scale IT systems should be protected by physical access controls.Which of the following is not listed as one of those controls?

The process of converting data from human readable form to computer readable form is referred to as:

Which of the following is NOT one of the types of input controls?