Question 1

The policy of requiring an employee to alternate jobs periodically is known as ______________________________.

Accepted Answer

The answer of The policy of requiring an employee to...

Question 2

Personnel development control plans consist of each of the following except:

Accepted Answer

A)  checking employment references 
B)  providing sufficient and timely training 
C)  supporting employee educational interests and pursuits 
D)  performing scheduled evaluations 
A)  checking employment references 
B)  providing sufficient and timely training 
C)  supporting employee educational interests and pursuits 
D)  performing scheduled evaluations

Question 3

Forced vacations is a policy of requiring an employee to take leave from the job and substitute another employee in his or her place.

Accepted Answer

A) True 
 B)False

Question 4

Which one of the following personnel is not involved in safeguarding resources resulting from consummating events?

Accepted Answer

A)  security officer 
B)  technical service manager 
C)  database administrator 
D)  CIO 
A)  security officer 
B)  technical service manager 
C)  database administrator 
D)  CIO

Question 5

Computer hacking and cracking is the intentional, unauthorized access to an organization's computer system, accomplished by bypassing the system's access security controls.

Accepted Answer

A) True 
 B)False

Question 6

Quality assurance function:

Accepted Answer

A)  modifies and adapts application software 
B)  conducts reviews to determine adherence to IT standards 
C)  analyzes existing applications and proposes solutions 
D)  supervises applications systems development 
A)  modifies and adapts application software 
B)  conducts reviews to determine adherence to IT standards 
C)  analyzes existing applications and proposes solutions 
D)  supervises applications systems development

Question 7

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

Accepted Answer

A) True 
 B)False

Question 8

A(n) ______________________________ indemnifies a company in case it suffers losses from defalcations committed by its employees.

Accepted Answer

The answer of A(n) ______________________________ indemnifies a company in case...

Question 9

The department or function that develops and operates an organization's information systems is often called the:

Accepted Answer

A)  information systems organization 
B)  computer operations department 
C)  controller's office 
D)  computer technology branch 
A)  information systems organization 
B)  computer operations department 
C)  controller's office 
D)  computer technology branch

Question 10

The trust service principle of processing ______________________________ determines whether processing is complete, accurate, timely and authorized.

Accepted Answer

The answer of The trust service principle of processing ______________________________...

Question 11

The ______________________________ maintains custody of and controls access to programs, files, and documentation.

Accepted Answer

The answer of The ______________________________ maintains custody of and controls...

Question 12

Which of the following has the responsibility to ensure the security of all IT resources?

Accepted Answer

A)  steering committee 
B)  security officer 
C)  CIO 
D)  systems development manager 
A)  steering committee 
B)  security officer 
C)  CIO 
D)  systems development manager

Question 13

The primary reasons for performing regular employee performance reviews include all of the following except:

Accepted Answer

A)  determine whether an employee is satisfying the requirements indicated by a job description 
B)  assess an employee's strengths and weaknesses 
C)  assist management in determining salary adjustments, promotions, or terminations 
D)  develop a strategy for filling necessary positions 
A)  determine whether an employee is satisfying the requirements indicated by a job description 
B)  assess an employee's strengths and weaknesses 
C)  assist management in determining salary adjustments, promotions, or terminations 
D)  develop a strategy for filling necessary positions

Question 14

Embezzlement is a fraud committed by two or more individuals or departments.

Accepted Answer

A) True 
 B)False

Question 15

Personnel termination control plans might include all of the following except:

Accepted Answer

A)  require immediate separation 
B)  identify the employee's reasons for leaving 
C)  establish a policy of forced vacations 
D)  collect the employee's keys, badges, etc. 
A)  require immediate separation 
B)  identify the employee's reasons for leaving 
C)  establish a policy of forced vacations 
D)  collect the employee's keys, badges, etc.

Question 16

Searching through rubbish for system information such as passwords is called:

Accepted Answer

A)  scavenging 
B)  phishing 
C)  smoozing 
D)  shoulder surfing 
A)  scavenging 
B)  phishing 
C)  smoozing 
D)  shoulder surfing

Question 17

A policy that requires employees to alternate jobs periodically is called:

Accepted Answer

A)  segregation of duties 
B)  forced vacations 
C)  rotation of duties 
D)  personnel planning 
A)  segregation of duties 
B)  forced vacations 
C)  rotation of duties 
D)  personnel planning

Question 18

In a logic bomb attack, a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages, making it impossible for the attacked site to engage in its normal activities.

Accepted Answer

A) True 
 B)False

Question 19

______________________________ identification systems identify authorized personnel through some unique physical trait such as fingers, hands, voice, eyes, face, and writing dynamics.

Accepted Answer

The answer of ______________________________ identification systems identify authorized personnel through...

Question 20

Which of the following personnel security control plans is corrective in nature as opposed to being a preventive or detective control plan?

Accepted Answer

A)  rotation of duties 
B)  fidelity bonding 
C)  forced vacations 
D)  performing scheduled evaluations 
A)  rotation of duties 
B)  fidelity bonding 
C)  forced vacations 
D)  performing scheduled evaluations

The policy of requiring an employee to alternate jobs periodically is known as ______________________________.

Personnel development control plans consist of each of the following except:

Forced vacations is a policy of requiring an employee to take leave from the job and substitute another employee in his or her place.

Which one of the following personnel is not involved in safeguarding resources resulting from consummating events?

Computer hacking and cracking is the intentional, unauthorized access to an organization's computer system, accomplished by bypassing the system's access security controls.

Quality assurance function:

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

A(n) ______________________________ indemnifies a company in case it suffers losses from defalcations committed by its employees.

The department or function that develops and operates an organization's information systems is often called the:

The trust service principle of processing ______________________________ determines whether processing is complete, accurate, timely and authorized.

The ______________________________ maintains custody of and controls access to programs, files, and documentation.

Which of the following has the responsibility to ensure the security of all IT resources?

The primary reasons for performing regular employee performance reviews include all of the following except:

Embezzlement is a fraud committed by two or more individuals or departments.

Personnel termination control plans might include all of the following except:

Searching through rubbish for system information such as passwords is called:

A policy that requires employees to alternate jobs periodically is called:

In a logic bomb attack, a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages, making it impossible for the attacked site to engage in its normal activities.

______________________________ identification systems identify authorized personnel through some unique physical trait such as fingers, hands, voice, eyes, face, and writing dynamics.

Which of the following personnel security control plans is corrective in nature as opposed to being a preventive or detective control plan?

Introduction to Accounting Information Systems

Enterprise Systems

Electronic Business E-Business Systems

Documenting Information Systems

Database Management Systems

Relational Databases and SQL

Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

Controlling Information Systems: Business Process and Application Controls

The Order Entrysales Oes Process

The Billingaccounts Receivablecash Receipts Barcr Process

The Purchasing Process

The Accounts Payablecash Disbursements Apcd Process

The Human Resources Process HR Management and Payroll Processes

Integrated Production Processes IPP

The General Ledger and Business Reporting GLBR Process

Acquiring and Implementing Accounting Information Systems

Filters

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

The policy of requiring an employee to alternate jobs periodically is known as ______________________________.

Personnel development control plans consist of each of the following except:

Forced vacations is a policy of requiring an employee to take leave from the job and substitute another employee in his or her place.

Which one of the following personnel is not involved in safeguarding resources resulting from consummating events?

Computer hacking and cracking is the intentional, unauthorized access to an organization's computer system, accomplished by bypassing the system's access security controls.

Quality assurance function:

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

A(n) ______________________________ indemnifies a company in case it suffers losses from defalcations committed by its employees.

The department or function that develops and operates an organization's information systems is often called the:

The trust service principle of processing ______________________________ determines whether processing is complete, accurate, timely and authorized.

The ______________________________ maintains custody of and controls access to programs, files, and documentation.

Which of the following has the responsibility to ensure the security of all IT resources?

The primary reasons for performing regular employee performance reviews include all of the following except:

Embezzlement is a fraud committed by two or more individuals or departments.

Personnel termination control plans might include all of the following except:

Searching through rubbish for system information such as passwords is called:

A policy that requires employees to alternate jobs periodically is called:

In a logic bomb attack, a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages, making it impossible for the attacked site to engage in its normal activities.

______________________________ identification systems identify authorized personnel through some unique physical trait such as fingers, hands, voice, eyes, face, and writing dynamics.

Which of the following personnel security control plans is corrective in nature as opposed to being a preventive or detective control plan?

Introduction to Accounting Information Systems

Enterprise Systems

Electronic Business E-Business Systems

Documenting Information Systems

Database Management Systems

Relational Databases and SQL

Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

Controlling Information Systems: Business Process and Application Controls

The Order Entrysales Oes Process

The Billingaccounts Receivablecash Receipts Barcr Process

The Purchasing Process

The Accounts Payablecash Disbursements Apcd Process

The Human Resources Process HR Management and Payroll Processes

Integrated Production Processes IPP

The General Ledger and Business Reporting GLBR Process

Acquiring and Implementing Accounting Information Systems

Filters