A) shifts the center of attention from IT to governance. B) can be implemented by updating from COBIT 4.1. C) does not have the enablers used in COBIT 4.1 D) all of the above. A) shifts the center of attention from IT to governance. B) can be implemented by updating from COBIT 4.1. C) does not have the enablers used in COBIT 4.1 D) all of the above.

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called ______________________________.

(Short Answer)

4.7/5

(41)

Question 121

____ can consist of many computers and related equipment connected together via a network.

(Multiple Choice)

5.0/5

(37)

Question 122

Systems documentation provides an overall description of the application, including the system's purpose; an overview of system procedures; and sample source documents, outputs, and reports.

(True/False)

4.8/5

(33)

Question 123

Specifications for availability, reliability, performance, capacity for growth, levels of user support, disaster recovery, security, minimal system functionality, and service charges are included in:

(Multiple Choice)

4.8/5

(38)

Question 124

With the data replication strategy known as ______________________________ all data changes are data stamped and saved to secondary systems as the changes are happening.

(Short Answer)

4.9/5

(33)

Question 125

The chief information officer (CIO) prioritizes and selects IT projects and resources.

(True/False)

4.8/5

(35)

Question 126

Which of the following control plans is not a retention control plan?

(Multiple Choice)

4.8/5

(28)

Question 127

The WebTrust family of services offers best practices and e-business solutions related exclusively to B2B electronic commerce.

(True/False)

4.8/5

(42)

Question 128

Which of the following statements related to denial of service attacks is false?

(Multiple Choice)

4.9/5

(35)

Question 129

All of the following are components of a backup and recovery strategy except:

(Multiple Choice)

4.9/5

(38)

Question 130

The first list below contains 10 control plans discussed in Chapter 8. The second list describes 10 system failures that have control implications. Required: On the answer line to the left of each system failure, insert the capital letter from the first list of the best control plan to prevent the system failure from occurring. If you can't find a control that will prevent the failure, then choose a detective or a corrective plan. A letter should be used only once.

(Essay)

4.8/5

(50)

Question 131

Data encryption is a process that codes data to make it readable to human eye.

(True/False)

4.9/5

(36)

Question 132

This IT function's key control concern is that organization and IT strategic objectives are misaligned:

(Multiple Choice)

4.7/5

(39)

Question 133

Which of the following statements is true?

(Multiple Choice)

4.7/5

(46)

Question 134

COBIT 5:

(Multiple Choice)

4.8/5

(37)

Question 135

The controlled access to data, programs, and documentation is a principal responsibility of which of the following functions?

(Multiple Choice)

4.9/5

(46)

Question 136

Application controls restrict access to data, programs, and documentation.

(True/False)

4.8/5

(45)

Question 137

The control concern that there will be a high risk of data conversion errors relates primarily to which of the following information systems functions?

(Multiple Choice)

5.0/5

(34)

Question 138

Within the data center, the data control group is responsible for routing all work into and out of the data center, correcting errors, and monitoring error correction.

(True/False)

4.8/5

(33)

Question 139

Segregation of duties consists of separating the four functions of authorizing events, executing events, recording events, and safeguarding the resources resulting from consummating the events.

(True/False)

4.8/5

(34)

Question 140

Showing 121 - 140 of 159

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called ______________________________.

____ can consist of many computers and related equipment connected together via a network.

Systems documentation provides an overall description of the application, including the system's purpose; an overview of system procedures; and sample source documents, outputs, and reports.

Specifications for availability, reliability, performance, capacity for growth, levels of user support, disaster recovery, security, minimal system functionality, and service charges are included in:

With the data replication strategy known as ______________________________ all data changes are data stamped and saved to secondary systems as the changes are happening.

The chief information officer (CIO) prioritizes and selects IT projects and resources.

Which of the following control plans is not a retention control plan?

The WebTrust family of services offers best practices and e-business solutions related exclusively to B2B electronic commerce.

Which of the following statements related to denial of service attacks is false?

All of the following are components of a backup and recovery strategy except:

Data encryption is a process that codes data to make it readable to human eye.

This IT function's key control concern is that organization and IT strategic objectives are misaligned:

Which of the following statements is true?

COBIT 5:

The controlled access to data, programs, and documentation is a principal responsibility of which of the following functions?

Application controls restrict access to data, programs, and documentation.

The control concern that there will be a high risk of data conversion errors relates primarily to which of the following information systems functions?

Within the data center, the data control group is responsible for routing all work into and out of the data center, correcting errors, and monitoring error correction.

Segregation of duties consists of separating the four functions of authorizing events, executing events, recording events, and safeguarding the resources resulting from consummating the events.

Introduction to Accounting Information Systems

Enterprise Systems

Electronic Business E-Business Systems

Documenting Information Systems

Database Management Systems

Relational Databases and SQL

Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

Controlling Information Systems: Business Process and Application Controls

The Order Entrysales Oes Process

The Billingaccounts Receivablecash Receipts Barcr Process

The Purchasing Process

The Accounts Payablecash Disbursements Apcd Process

The Human Resources Process HR Management and Payroll Processes

Integrated Production Processes IPP

The General Ledger and Business Reporting GLBR Process

Acquiring and Implementing Accounting Information Systems

Filters