Question 1

This type of authentication uses some unique physical characteristic of the user to identify the user and allow the appropriate access to the system.

Accepted Answer

A) Nonrepudiation card 
B) Biometric device 
C) Configuration table 
D) Computer log 
A) Nonrepudiation card 
B) Biometric device 
C) Configuration table 
D) Computer log B

Question 2

Which of the following is NOT one of the types of control totals?

Accepted Answer

A) Digit Count 
B) Record Count 
C) Batch Totals 
D) Hash Totals 
A) Digit Count 
B) Record Count 
C) Batch Totals 
D) Hash Totals A

Question 3

A computer network covering a small geographic area, which, in most cases, are within a single building or a local group of buildings is called a:

Accepted Answer

A) Land area network 
B) Local access network 
C) Local area network 
D) Locality arena network 
A) Land area network 
B) Local access network 
C) Local area network 
D) Locality arena network C

Question 4

General controls for an IT system include:

Accepted Answer

A) Controls over the physical environment only 
B) Controls over the physical access only 
C) Controls over the physical environment and over the physical access 
D) None of the above 
A) Controls over the physical environment only 
B) Controls over the physical access only 
C) Controls over the physical environment and over the physical access 
D) None of the above

Question 5

This type of control is intended to ensure the accuracy and completeness of data input procedures and the resulting data:

Accepted Answer

A) Input Controls 
B) Internal Controls 
C) Processing Controls 
D) Output Controls 
A) Input Controls 
B) Internal Controls 
C) Processing Controls 
D) Output Controls

Question 6

Internal controls over the input, processing, and output of accounting applications are called:

Accepted Answer

A) Accounting Controls 
B) Application Controls 
C) Network Controls 
D) LAN Controls 
A) Accounting Controls 
B) Application Controls 
C) Network Controls 
D) LAN Controls

Question 7

Which of the following would normally not be found on the IT Governance Committee?

Accepted Answer

A) Computer input operators 
B) Chief Executive Officer 
C) Chief Information Officer 
D) Heads of business units 
A) Computer input operators 
B) Chief Executive Officer 
C) Chief Information Officer 
D) Heads of business units

Question 8

The company-to-company transfer of standard business documents in electronic form is called:

Accepted Answer

A) facsimile Transmission 
B) PDF Interchange 
C) Electronic Data Interchange 
D) Tele-transmission 
A) facsimile Transmission 
B) PDF Interchange 
C) Electronic Data Interchange 
D) Tele-transmission

Question 9

The totals of fields that have no apparent logical reason to be added are called:

Accepted Answer

A) Record Totals 
B) Digit Totals 
C) Batch Totals 
D) Hash Totals 
A) Record Totals 
B) Digit Totals 
C) Batch Totals 
D) Hash Totals

Question 10

A complete record of all dates, times, and uses for each person is referred to as a(n):

Accepted Answer

A) User password 
B) Computer log 
C) User profile 
D) Configuration table 
A) User password 
B) Computer log 
C) User profile 
D) Configuration table

Question 11

An alternative power supply that provides electrical power in the event that a main source is lost is called:

Accepted Answer

A) Uninterruptible power supply 
B) System power supply 
C) Emergency power supply 
D) Battery power supply 
A) Uninterruptible power supply 
B) System power supply 
C) Emergency power supply 
D) Battery power supply

Question 12

The function of this committee is to govern the overall development and operation of IT systems.

Accepted Answer

A) IT Budget Committee 
B) IT Audit Committee 
C) IT Governance Committee 
D) IT Oversight Committee 
A) IT Budget Committee 
B) IT Audit Committee 
C) IT Governance Committee 
D) IT Oversight Committee

Question 13

The work arrangement where employees work from home using some type of network connection to the office is referred to as:

Accepted Answer

A) Telecommuting 
B) Telemarketing 
C) Network Employment 
D) Electronic working 
A) Telecommuting 
B) Telemarketing 
C) Network Employment 
D) Electronic working

Question 14

A primary objective of output controls would be:

Accepted Answer

A) Manage the safekeeping of 
B) Assure the accuracy and completeness of the output 
C) Ensure that the input data is accurate 
D) Prevention and detection of processing errors 
A) Manage the safekeeping of 
B) Assure the accuracy and completeness of the output 
C) Ensure that the input data is accurate 
D) Prevention and detection of processing errors

Question 15

Which of the following is not a control intended to authenticate users?

Accepted Answer

A) User logâ€"in 
B) Security token 
C) Encryption 
D) Biometric devices 
A) User logâ€"in 
B) Security token 
C) Encryption 
D) Biometric devices

Question 16

Many companies use a public cloud computing model for software, data storage or both.Which of the following is an advantage to the public cloud computing model?

Accepted Answer

A) Expanded access 
B) Cost savings 
C) Scalability 
D) All of the above are advantages 
A) Expanded access 
B) Cost savings 
C) Scalability 
D) All of the above are advantages

Question 17

General controls in IT systems are divided into five broad categories.Which of the following is NOT one of those categories?

Accepted Answer

A) Authentication of uses and limiting unauthorized access 
B) Output controls 
C) Organization structure 
D) Physical environment and physical security of the system. 
A) Authentication of uses and limiting unauthorized access 
B) Output controls 
C) Organization structure 
D) Physical environment and physical security of the system.

Question 18

Which of the following is not an example of physical characteristics being used in biometric devices?

Accepted Answer

A) Retina scans 
B) Fingerprint matching 
C) Social security number 
D) Voice verification 
A) Retina scans 
B) Fingerprint matching 
C) Social security number 
D) Voice verification

Question 19

The accuracy, completeness, and timeliness of the process in IT systems is referred to as:

Accepted Answer

A) Availability Risks 
B) Security Risks 
C) Confidentiality Risks 
D) Processing Integrity Risks 
A) Availability Risks 
B) Security Risks 
C) Confidentiality Risks 
D) Processing Integrity Risks

Question 20

The AICPA Trust Services Principles categorizes IT controls and risks into categories.Which of the following is not one of those categories?

Accepted Answer

A) Confidentiality 
B) Security 
C) Recovery 
D) Availability 
A) Confidentiality 
B) Security 
C) Recovery 
D) Availability

This type of authentication uses some unique physical characteristic of the user to identify the user and allow the appropriate access to the system.

Which of the following is NOT one of the types of control totals?

A computer network covering a small geographic area, which, in most cases, are within a single building or a local group of buildings is called a:

General controls for an IT system include:

This type of control is intended to ensure the accuracy and completeness of data input procedures and the resulting data:

Internal controls over the input, processing, and output of accounting applications are called:

Which of the following would normally not be found on the IT Governance Committee?

The company-to-company transfer of standard business documents in electronic form is called:

The totals of fields that have no apparent logical reason to be added are called:

A complete record of all dates, times, and uses for each person is referred to as a(n):

An alternative power supply that provides electrical power in the event that a main source is lost is called:

The function of this committee is to govern the overall development and operation of IT systems.

The work arrangement where employees work from home using some type of network connection to the office is referred to as:

A primary objective of output controls would be:

Which of the following is not a control intended to authenticate users?

Many companies use a public cloud computing model for software, data storage or both.Which of the following is an advantage to the public cloud computing model?

General controls in IT systems are divided into five broad categories.Which of the following is NOT one of those categories?

Which of the following is not an example of physical characteristics being used in biometric devices?

The accuracy, completeness, and timeliness of the process in IT systems is referred to as:

The AICPA Trust Services Principles categorizes IT controls and risks into categories.Which of the following is not one of those categories?

Introduction to AIS

Foundational Concepts of the AIS

Fraud, Ethics, and Internal Control

IT Governance

Enterprise Resource Planning ERP Systems

Auditing Information Technology-Based Processes

Revenue and Cash Collection Processes and Controls

Expenditures Processes and Controlspurchases

Expenditures Processes and Controlspayroll and Fixed Assets

Conversion Processes and Controls

Administrative Processes and Controls

Data and Databases

E-Commerce and E-Business

Filters

Exam 4: Internal Controls and Risks in IT Systems

This type of authentication uses some unique physical characteristic of the user to identify the user and allow the appropriate access to the system.

Which of the following is NOT one of the types of control totals?

A computer network covering a small geographic area, which, in most cases, are within a single building or a local group of buildings is called a:

General controls for an IT system include:

This type of control is intended to ensure the accuracy and completeness of data input procedures and the resulting data:

Internal controls over the input, processing, and output of accounting applications are called:

Which of the following would normally not be found on the IT Governance Committee?

The company-to-company transfer of standard business documents in electronic form is called:

The totals of fields that have no apparent logical reason to be added are called:

A complete record of all dates, times, and uses for each person is referred to as a(n):

An alternative power supply that provides electrical power in the event that a main source is lost is called:

The function of this committee is to govern the overall development and operation of IT systems.

The work arrangement where employees work from home using some type of network connection to the office is referred to as:

A primary objective of output controls would be:

Which of the following is not a control intended to authenticate users?

Many companies use a public cloud computing model for software, data storage or both.Which of the following is an advantage to the public cloud computing model?

General controls in IT systems are divided into five broad categories.Which of the following is NOT one of those categories?

Which of the following is not an example of physical characteristics being used in biometric devices?

The accuracy, completeness, and timeliness of the process in IT systems is referred to as:

The AICPA Trust Services Principles categorizes IT controls and risks into categories.Which of the following is not one of those categories?

Introduction to AIS

Foundational Concepts of the AIS

Fraud, Ethics, and Internal Control

IT Governance

Enterprise Resource Planning ERP Systems

Auditing Information Technology-Based Processes

Revenue and Cash Collection Processes and Controls

Expenditures Processes and Controlspurchases

Expenditures Processes and Controlspayroll and Fixed Assets

Conversion Processes and Controls

Administrative Processes and Controls

Data and Databases

E-Commerce and E-Business

Filters