Question 1

All of the following are General controls except for:

Accepted Answer

A) Passwords 
B) Physical hardware controls 
C) Software Controls 
D) Inventory Controls 
A) Passwords 
B) Physical hardware controls 
C) Software Controls 
D) Inventory Controls

Question 2

The IT system includes this type of table for software, hardware, and application programs that contain the appropriate set-up and security settings.

Accepted Answer

A) Configuration table 
B) Authentication table 
C) User table 
D) Authority table 
A) Configuration table 
B) Authentication table 
C) User table 
D) Authority table

Question 3

The longest encryption keys are 128 bits.

Accepted Answer

A) True 
 B)False

Question 4

It is necessary for an IT system to be networked to an external internet to be open to opportunities for unauthorized access.

Accepted Answer

A) True 
 B)False

Question 5

This communication protocol is built into web server and browser software that encrypts data transferred on that website.You can determine if a website uses this technology by looking at the URL.

Accepted Answer

A) Secure sockets layer 
B) Service security line 
C) Secure encryption network 
D) Secure service layer 
A) Secure sockets layer 
B) Service security line 
C) Secure encryption network 
D) Secure service layer

Question 6

It is not necessary to control the humidity and temperature in the location where the computer system is housed.

Accepted Answer

A) True 
 B)False

Question 7

One of the advantages of private cloud computing is expanded access.

Accepted Answer

A) True 
 B)False

Question 8

Internal controls used specifically in accounting applications to control inputs, processing, and outputs are referred to as an):

Accepted Answer

A) Specific Controls 
B) Application Controls 
C) General Controls 
D) IT Controls 
A) Specific Controls 
B) Application Controls 
C) General Controls 
D) IT Controls

Question 9

Many IT systems do not use source documents; the input is automatic.

Accepted Answer

A) True 
 B)False

Question 10

This encryption method requests connection to the network via an access point and that point then requests the use identity and transmits that identity to an authentication server, substantially authenticating the computer and the user.

Accepted Answer

A) Wired Equivalency Privacy WEP) 
B) Wired Encryption Provider WEP) 
C) Wireless Provider Authentication WP
A)  
D) Wireless Protection Access WP
A)  
A) Wired Equivalency Privacy WEP) 
B) Wired Encryption Provider WEP) 
C) Wireless Provider Authentication WP
A)  
D) Wireless Protection Access WP
A)

Question 11

The procedures to collect and prepare source documents are termed:

Accepted Answer

A) Input validation procedures 
B) Form authorization procedures 
C) Data preparation procedures 
D) Document retention procedures 
A) Input validation procedures 
B) Form authorization procedures 
C) Data preparation procedures 
D) Document retention procedures

Question 12

The function of this committee is to govern the overall development and operation of IT systems.

Accepted Answer

A) IT Budget Committee 
B) IT Audit Committee 
C) IT Governance Committee 
D) IT Oversight Committee 
A) IT Budget Committee 
B) IT Audit Committee 
C) IT Governance Committee 
D) IT Oversight Committee

Question 13

This table contains a list of valid, authorized users and the access level granted to each one.

Accepted Answer

A) User table 
B) Authority table 
C) Authentication table 
D) Configuration table 
A) User table 
B) Authority table 
C) Authentication table 
D) Configuration table

Question 14

This type of control is intended to ensure the accuracy and completeness of processing that occurs in accounting applications:

Accepted Answer

A) Input Controls 
B) Internal Controls 
C) Processing Controls 
D) Output Controls 
A) Input Controls 
B) Internal Controls 
C) Processing Controls 
D) Output Controls

Question 15

Deciphering renders data useless to those who do not have the correct encryption key.

Accepted Answer

A) True 
 B)False

Question 16

This security feature, used on wireless networks, is a password that is passed between the sending and receiving nodes of a wireless network.

Accepted Answer

A) Secure sockets layer 
B) Service set identifier 
C) Wired provided access 
D) Virtual private network 
A) Secure sockets layer 
B) Service set identifier 
C) Wired provided access 
D) Virtual private network

Question 17

Two or more computer network or data servers that can run identical processes or maintain the same data are called:

Accepted Answer

A) Emergency power supply 
B) Uninterruptible power source 
C) Redundant servers 
D) Business continuity planning 
A) Emergency power supply 
B) Uninterruptible power source 
C) Redundant servers 
D) Business continuity planning

Question 18

All of the following are environmental control issues for physical hardware except for:

Accepted Answer

A) High temperatures 
B) Fires 
C) Excessive Humidity 
D) All of the Above 
E) None of the Above 
A) High temperatures 
B) Fires 
C) Excessive Humidity 
D) All of the Above 
E) None of the Above

Question 19

There are a number of reasons that all access to an IT system be logged.Which of the following is not one of the reasons for the log to be maintained?

Accepted Answer

A) Any login or use abnormalities can be examined in more detail to determine any weaknesses in the login procedures. 
B) A user cannot deny any particular act that he or she did on the system. 
C) To establish nonrepudiation of sales transactions by a customer. 
D) To establish a user profile. 
A) Any login or use abnormalities can be examined in more detail to determine any weaknesses in the login procedures. 
B) A user cannot deny any particular act that he or she did on the system. 
C) To establish nonrepudiation of sales transactions by a customer. 
D) To establish a user profile.

Question 20

This type of authentication uses some unique physical characteristic of the user to identify the user and allow the appropriate access to the system.

Accepted Answer

A) Nonrepudiation card 
B) Biometric device 
C) Configuration table 
D) Computer log 
A) Nonrepudiation card 
B) Biometric device 
C) Configuration table 
D) Computer log

All of the following are General controls except for:

The IT system includes this type of table for software, hardware, and application programs that contain the appropriate set-up and security settings.

The longest encryption keys are 128 bits.

It is necessary for an IT system to be networked to an external internet to be open to opportunities for unauthorized access.

This communication protocol is built into web server and browser software that encrypts data transferred on that website.You can determine if a website uses this technology by looking at the URL.

It is not necessary to control the humidity and temperature in the location where the computer system is housed.

One of the advantages of private cloud computing is expanded access.

Internal controls used specifically in accounting applications to control inputs, processing, and outputs are referred to as an):

Many IT systems do not use source documents; the input is automatic.

This encryption method requests connection to the network via an access point and that point then requests the use identity and transmits that identity to an authentication server, substantially authenticating the computer and the user.

The procedures to collect and prepare source documents are termed:

The function of this committee is to govern the overall development and operation of IT systems.

This table contains a list of valid, authorized users and the access level granted to each one.

This type of control is intended to ensure the accuracy and completeness of processing that occurs in accounting applications:

Deciphering renders data useless to those who do not have the correct encryption key.

This security feature, used on wireless networks, is a password that is passed between the sending and receiving nodes of a wireless network.

Two or more computer network or data servers that can run identical processes or maintain the same data are called:

All of the following are environmental control issues for physical hardware except for:

There are a number of reasons that all access to an IT system be logged.Which of the following is not one of the reasons for the log to be maintained?

This type of authentication uses some unique physical characteristic of the user to identify the user and allow the appropriate access to the system.

Introduction to AIS

Foundational Concepts of the AIS

Fraud, Ethics, and Internal Control

IT Governance

Erp Systems

Auditing Information Technology Bases Processes

Revenue and Cash Collection Processes

Expenditures Processes and Controls - Purchases

Expenditures Processes and Controls Payroll and Fixed Assets

Conversion Processes and Controls

Administrative Processes and Controls

Data and Databases

Ecommerce and Ebusiness

Filters

Exam 4: Internal Controls and Risks in IT Systems

All of the following are General controls except for:

The IT system includes this type of table for software, hardware, and application programs that contain the appropriate set-up and security settings.

The longest encryption keys are 128 bits.

It is necessary for an IT system to be networked to an external internet to be open to opportunities for unauthorized access.

This communication protocol is built into web server and browser software that encrypts data transferred on that website.You can determine if a website uses this technology by looking at the URL.

It is not necessary to control the humidity and temperature in the location where the computer system is housed.

One of the advantages of private cloud computing is expanded access.

Internal controls used specifically in accounting applications to control inputs, processing, and outputs are referred to as an):

Many IT systems do not use source documents; the input is automatic.

This encryption method requests connection to the network via an access point and that point then requests the use identity and transmits that identity to an authentication server, substantially authenticating the computer and the user.

The procedures to collect and prepare source documents are termed:

The function of this committee is to govern the overall development and operation of IT systems.

This table contains a list of valid, authorized users and the access level granted to each one.

This type of control is intended to ensure the accuracy and completeness of processing that occurs in accounting applications:

Deciphering renders data useless to those who do not have the correct encryption key.

This security feature, used on wireless networks, is a password that is passed between the sending and receiving nodes of a wireless network.

Two or more computer network or data servers that can run identical processes or maintain the same data are called:

All of the following are environmental control issues for physical hardware except for:

There are a number of reasons that all access to an IT system be logged.Which of the following is not one of the reasons for the log to be maintained?

This type of authentication uses some unique physical characteristic of the user to identify the user and allow the appropriate access to the system.

Introduction to AIS

Foundational Concepts of the AIS

Fraud, Ethics, and Internal Control

IT Governance

Erp Systems

Auditing Information Technology Bases Processes

Revenue and Cash Collection Processes

Expenditures Processes and Controls - Purchases

Expenditures Processes and Controls Payroll and Fixed Assets

Conversion Processes and Controls

Administrative Processes and Controls

Data and Databases

Ecommerce and Ebusiness

Filters