Exam 14: Information Systems and Controls

What permissions are granted to a Creator role?

Which of the following statements about COBIT 2019 is TRUE?

Which of the following COBIT 2019 management IT objectives includes topics that would help an organization define compliance with external requirements, performance monitoring, and a system of internal control?

In what ways do climate control systems protect computer system components in a network operations center (NOC)?

An emergency change request bypasses which stage of the change management process?

What kind of security method can help prevent against piggybacking?

COBIT 2019 controls are organized into five domains that are divided into what two categories based on their objectives?

Which of the following backup sites is the most expensive but has the fastest recovery speed?

The Cardinal Company is considering a backup site for their organization. Explain to Cardinal management the major differences between a hot and warm backup site.

Which of the following statements about the COBIT 2019 IT governance domain, Evaluate, Direct and Monitor (EDM) is TRUE?

What physical location is used to recover systems and data after a disaster?

What elements of IT are IT general controls (ITGCs) designed to protect? Select all that apply.

Use what you have learned about how to protect the inside environment of a data center to describe how you would protect the center from fire damage.

Controlled access to data centers often includes multifactor authentication to mitigate the high risk to the equipment that is powering the business. An increased security measure used at very high security data centers is a man-in-the-middle trap. What kind of risk does the trap prevent?

The objectives of which COBIT domain include frameworks, resource optimization, and being transparent with stakeholders?

Unauthorized or incorrectly executed changes to a system may result in what kind of risk?

What determines when data is being stored during data back?

Which user has access to all three change management environments?

The Griffin Academy board approved a major change to the method for tuition calculation that will require a system change. A board member calls Julia, a developer in the IT department at Griffin, and requests that she make the change and implement the change immediately. If Jane does as she is told by the board member and does not put the change through the change management process, what kind of risk potential exists for Griffin?

Which type of authorization uses groups with pre-defined permissions to which users are assigned?