Question 1

Which of the following change management steps occurs in the test environment?

Accepted Answer

A)  Production control implements change. 
B)  Developer writes code. 
C)  IT Analyst documents testing. 
D)  User reviews and approves code. 
A)  Production control implements change. 
B)  Developer writes code. 
C)  IT Analyst documents testing. 
D)  User reviews and approves code.

Question 2

Joel has developed new code and implemented it into the model environment so that the user can test it to see if it works as required. What stage in the change management process is Joel preparing for?

Accepted Answer

A)  User acceptance testing 
B)  User code review 
C)  User developer check 
D)  User production run 
A)  User acceptance testing 
B)  User code review 
C)  User developer check 
D)  User production run

Question 3

Which of these access roles would you assign an internal auditor reviewing accounts payable and accounts receivable transactions?

Accepted Answer

A)  Administrator 
B)  Read-only 
C)  User 
D)  Creator 
A)  Administrator 
B)  Read-only 
C)  User 
D)  Creator

Question 4

Caribbean Technologies is located on the island of Grand Cayman in the Caribbean SeA. The management team established a data center both onsite and offsite in Ohio. What onsite protection measures would you recommend be implemented?

Accepted Answer

A)  Climate controls 
B)  Raised floors 
C)  Interior room with no windows 
D)  All answer choices are correct. 
A)  Climate controls 
B)  Raised floors 
C)  Interior room with no windows 
D)  All answer choices are correct.

Question 5

User access de-provisioning should occur when which of the following user access status changes occur? Choose all that apply.

Accepted Answer

A)  Termination 
B)  New hire 
C)  Transfer 
D)  Dormancy 
A)  Termination 
B)  New hire 
C)  Transfer 
D)  Dormancy

Question 6

Which of the following change management steps occurs in the production environment?

Accepted Answer

A)  User requests change. 
B)  Developer tests code. 
C)  Code is live in system. 
D)  User reviews and approves code. 
A)  User requests change. 
B)  Developer tests code. 
C)  Code is live in system. 
D)  User reviews and approves code.

Question 7

What role should be assigned to a new team member who needs access to make changes to the system, create files, download and upload files, and edit files.

Accepted Answer

A)  Creator 
B)  Read-only 
C)  User 
D)  Administrator 
A)  Creator 
B)  Read-only 
C)  User 
D)  Administrator

Question 8

What is the most widely used international standard for IT governance?

Accepted Answer

A)  COSO 
B)  COBIT 
C)  ISACA 
D)  ITGC 
A)  COSO 
B)  COBIT 
C)  ISACA 
D)  ITGC

Question 9

In what way do the three change management environment stages work together to prevent a change being accidentally implemented?

Accepted Answer

A)  The three stages are isolated from one another. 
B)  The same IT staff member works with the issue in all three stages to ensure error free completion. 
C)  Code flows through each stage and then is tested by the developer to ensure that it meets the user's requirements. 
D)  The three stages are symbolic of the iterative process. 
A)  The three stages are isolated from one another. 
B)  The same IT staff member works with the issue in all three stages to ensure error free completion. 
C)  Code flows through each stage and then is tested by the developer to ensure that it meets the user's requirements. 
D)  The three stages are symbolic of the iterative process.

Question 10

Data centers should be situated in a room with no windows to prevent

Accepted Answer

A)  someone from breaking in through the window. 
B)  damage occurring to systems when a window breaks in a storm. 
C)  unauthorized access to the room. 
D)  All answer choices are correct. 
A)  someone from breaking in through the window. 
B)  damage occurring to systems when a window breaks in a storm. 
C)  unauthorized access to the room. 
D)  All answer choices are correct.

Question 11

Moore Software Development (MSD), Inc. began operations in Moore, Oklahoma, an area prone to tornadoes. Recent business growth necessitates the need for a larger data center. Select the most appropriate statement associated with MSD's new data center.

Accepted Answer

A)  MSD should expand their current on-site data center so that all components will be secure in one location. 
B)  MSD should lease data center space nearby to allow current IT staff easy access to additional components. 
C)  MSD should locate a space for an off-site data center in an area away from the risk of bad weather to mitigate the risk of losing both centers at the same time. 
D)  All of these statements are correct. 
A)  MSD should expand their current on-site data center so that all components will be secure in one location. 
B)  MSD should lease data center space nearby to allow current IT staff easy access to additional components. 
C)  MSD should locate a space for an off-site data center in an area away from the risk of bad weather to mitigate the risk of losing both centers at the same time. 
D)  All of these statements are correct.

Question 12

What statement about the functionality of a cold backup site is FALSE?

Accepted Answer

A)  A cold backup site may be an almost empty room. 
B)  A cold backup site is the least expensive type of backup site for a company to implement. 
C)  A cold backup site imports data at the end of each business day. 
D)  A cold backup site may take days or weeks to recover. 
A)  A cold backup site may be an almost empty room. 
B)  A cold backup site is the least expensive type of backup site for a company to implement. 
C)  A cold backup site imports data at the end of each business day. 
D)  A cold backup site may take days or weeks to recover.

Question 13

Accounting professionals utilize multiple frameworks. Which framework would a manager select to make sure that all internal controls are Sarbanes Oxley compliant?

Accepted Answer

A)  ITGC 
B)  COSO 
C)  ISACA 
D)  COBIT 
A)  ITGC 
B)  COSO 
C)  ISACA 
D)  COBIT

Question 14

Which of the following COBIT 2019 management IT objectives includes topics that would help an organization manage operations, problems, continuity, and business process controls?

Accepted Answer

A)  Align, Plan and Organize (APO) 
B)  Build, Acquire and Implement (BAI) 
C)  Deliver, Service and Support (DSS) 
D)  Monitor, Evaluate and Assess (ME
A)  
A)  Align, Plan and Organize (APO) 
B)  Build, Acquire and Implement (BAI) 
C)  Deliver, Service and Support (DSS) 
D)  Monitor, Evaluate and Assess (ME
A)

Question 15

What user access role includes permission to add, remove, and set access rights on all objects?

Accepted Answer

A)  Administrator 
B)  Creator 
C)  User 
D)  Read-only 
A)  Administrator 
B)  Creator 
C)  User 
D)  Read-only

Question 16

How does a man-in-the middle trap create another level of security?

Accepted Answer

A)  The man-in-the middle trap forces users to spend time in the trap before entering the data center, so only those who really need in will enter. 
B)  The man-in-the middle trap allows only one person to be between two doors, each with security measures, at a time. 
C)  The man-in-the middle trap will not allow a person to exit if they do not have the verbal passcode to enter the data center. 
D)  The man-in-the middle trap allows data center employees to trap intruders using trapdoors in the raised floor. 
A)  The man-in-the middle trap forces users to spend time in the trap before entering the data center, so only those who really need in will enter. 
B)  The man-in-the middle trap allows only one person to be between two doors, each with security measures, at a time. 
C)  The man-in-the middle trap will not allow a person to exit if they do not have the verbal passcode to enter the data center. 
D)  The man-in-the middle trap allows data center employees to trap intruders using trapdoors in the raised floor.

Question 17

What statement concerning backup cycles is FALSE?

Accepted Answer

A)  Warm and cold backup sites depend on which backup cycle is used. 
B)  A backup cycle determines the frequency in which data is backed up. 
C)  One of the most common backup cycle methods is know as the Grandfather-Father-Son backup scheme. 
D)  The Grandfather-Father-Son backup cycle removes the need to conduct quarterly, or annual backups. 
A)  Warm and cold backup sites depend on which backup cycle is used. 
B)  A backup cycle determines the frequency in which data is backed up. 
C)  One of the most common backup cycle methods is know as the Grandfather-Father-Son backup scheme. 
D)  The Grandfather-Father-Son backup cycle removes the need to conduct quarterly, or annual backups.

Question 18

Which statement describing COBIT 2019 is TRUE?

Accepted Answer

A)  COBIT contributors do not have the pay the subscription fee. 
B)  COBIT has an organizational focus on HR governance. 
C)  COBIT is designed to assist in IT governance and implementing IT controls. 
D)  COBIT has a control scope that encompasses all internal controls. 
A)  COBIT contributors do not have the pay the subscription fee. 
B)  COBIT has an organizational focus on HR governance. 
C)  COBIT is designed to assist in IT governance and implementing IT controls. 
D)  COBIT has a control scope that encompasses all internal controls.

Question 19

A formal change management process includes multiple environments to reduce risk. A formal change must go through the environments in what order?

Accepted Answer

A)  Test, Model, then Production 
B)  Model, Test, then Production 
C)  Production, Model, then Test 
D)  Production, Test, then Model 
A)  Test, Model, then Production 
B)  Model, Test, then Production 
C)  Production, Model, then Test 
D)  Production, Test, then Model

Question 20

Which of the following statements concerning user access reviews is TRUE?

Accepted Answer

A)  User access reviews are periodic reviews of current power users and their system roles. 
B)  User access reviews move infrequently used accounts to a dormant status. 
C)  A user access review should be a simple, quick process that is completed frequently. 
D)  A user access review lowers inappropriate use risks associated with employee changes. 
A)  User access reviews are periodic reviews of current power users and their system roles. 
B)  User access reviews move infrequently used accounts to a dormant status. 
C)  A user access review should be a simple, quick process that is completed frequently. 
D)  A user access review lowers inappropriate use risks associated with employee changes.

Which of the following change management steps occurs in the test environment?

Joel has developed new code and implemented it into the model environment so that the user can test it to see if it works as required. What stage in the change management process is Joel preparing for?

Which of these access roles would you assign an internal auditor reviewing accounts payable and accounts receivable transactions?

Caribbean Technologies is located on the island of Grand Cayman in the Caribbean SeA. The management team established a data center both onsite and offsite in Ohio. What onsite protection measures would you recommend be implemented?

User access de-provisioning should occur when which of the following user access status changes occur? Choose all that apply.

Which of the following change management steps occurs in the production environment?

What role should be assigned to a new team member who needs access to make changes to the system, create files, download and upload files, and edit files.

What is the most widely used international standard for IT governance?

In what way do the three change management environment stages work together to prevent a change being accidentally implemented?

Data centers should be situated in a room with no windows to prevent

Moore Software Development (MSD), Inc. began operations in Moore, Oklahoma, an area prone to tornadoes. Recent business growth necessitates the need for a larger data center. Select the most appropriate statement associated with MSD's new data center.

What statement about the functionality of a cold backup site is FALSE?

Accounting professionals utilize multiple frameworks. Which framework would a manager select to make sure that all internal controls are Sarbanes Oxley compliant?

Which of the following COBIT 2019 management IT objectives includes topics that would help an organization manage operations, problems, continuity, and business process controls?

What user access role includes permission to add, remove, and set access rights on all objects?

How does a man-in-the middle trap create another level of security?

What statement concerning backup cycles is FALSE?

Which statement describing COBIT 2019 is TRUE?

A formal change management process includes multiple environments to reduce risk. A formal change must go through the environments in what order?

Which of the following statements concerning user access reviews is TRUE?

Accounting As Information

Risks and Risk Assessments

Risk Management and Internal Controls

Software and Systems

Data Storage and Analysis

Systems and Database Design

Emerging and Disruptive Technologies

Documenting Systems and Processes

Human Resources and Payroll Processes

Purchasing and Payments Process

Conversion Processes

Marketing, Sales, and Collection Processes

Financial Reporting Processes

Fraud

Cybersecurity

Data Analytics

Data Visualization

Audit Assurance

Filters

Exam 14: Information Systems and Controls

Which of the following change management steps occurs in the test environment?

Joel has developed new code and implemented it into the model environment so that the user can test it to see if it works as required. What stage in the change management process is Joel preparing for?

Which of these access roles would you assign an internal auditor reviewing accounts payable and accounts receivable transactions?

Caribbean Technologies is located on the island of Grand Cayman in the Caribbean SeA. The management team established a data center both onsite and offsite in Ohio. What onsite protection measures would you recommend be implemented?

User access de-provisioning should occur when which of the following user access status changes occur? Choose all that apply.

Which of the following change management steps occurs in the production environment?

What role should be assigned to a new team member who needs access to make changes to the system, create files, download and upload files, and edit files.

What is the most widely used international standard for IT governance?

In what way do the three change management environment stages work together to prevent a change being accidentally implemented?

Data centers should be situated in a room with no windows to prevent

Moore Software Development (MSD), Inc. began operations in Moore, Oklahoma, an area prone to tornadoes. Recent business growth necessitates the need for a larger data center. Select the most appropriate statement associated with MSD's new data center.

What statement about the functionality of a cold backup site is FALSE?

Accounting professionals utilize multiple frameworks. Which framework would a manager select to make sure that all internal controls are Sarbanes Oxley compliant?

Which of the following COBIT 2019 management IT objectives includes topics that would help an organization manage operations, problems, continuity, and business process controls?

What user access role includes permission to add, remove, and set access rights on all objects?

How does a man-in-the middle trap create another level of security?

What statement concerning backup cycles is FALSE?

Which statement describing COBIT 2019 is TRUE?

A formal change management process includes multiple environments to reduce risk. A formal change must go through the environments in what order?

Which of the following statements concerning user access reviews is TRUE?

Accounting As Information

Risks and Risk Assessments

Risk Management and Internal Controls

Software and Systems

Data Storage and Analysis

Systems and Database Design

Emerging and Disruptive Technologies

Documenting Systems and Processes

Human Resources and Payroll Processes

Purchasing and Payments Process

Conversion Processes

Marketing, Sales, and Collection Processes

Financial Reporting Processes

Fraud

Cybersecurity

Data Analytics

Data Visualization

Audit Assurance

Filters