Question 1

Describe how audit evidence can be collected.

Accepted Answer

Since the audit effort revolves around the identification,collection,and evaluation of evidence,most audit effort is spent in the collection process.To identify,collect,and evaluate evidence,several methods have been developed to assist in the effort.These methods include: 1)the observation of the activities being audited; 2)a review of documentation to gain a better understanding of the AIS; 3)discussions with employees about their jobs and how procedures are carried out; 4)the creation and administration of questionnaires to gather data about the system;   examination of tangible assets; 6)confirmation of the accuracy of certain information;   of selected calculations; 8)vouching for the validity of a transaction by examination of all supporting documentation; and,9)analytical review of relationships and trends among information to detect items that should be further investigated.It is important to remember that only a sample of evidence is collected for audit purposes,as it is not feasible to perform audit procedures on the entire set of activities,records,assets,or documents that are under the review process in an audit.

Question 2

Which of the following is not an information systems audit test of controls?

Accepted Answer

A) Observe computer-site access procedures. 
B) Investigate how unauthorized access attempts are handled. 
C) Review logical access policies and procedures. 
D) Examine the results of disaster recovery plan simulations. 
A) Observe computer-site access procedures. 
B) Investigate how unauthorized access attempts are handled. 
C) Review logical access policies and procedures. 
D) Examine the results of disaster recovery plan simulations. C

Question 3

The information systems audit objective that pertains to source data being processed into some form of output is known as

Accepted Answer

A) overall security. 
B) program development. 
C) program modifications. 
D) processing. 
A) overall security. 
B) program development. 
C) program modifications. 
D) processing. D

Question 4

An auditor finds that employee absentee rates are significantly higher on Mondays and Fridays than on other work days.This is an example collecting audit evidence by

Accepted Answer

A) confirmation. 
B) reperformance. 
C) vouching. 
D) analytical review. 
A) confirmation. 
B) reperformance. 
C) vouching. 
D) analytical review.

Question 5

The ________ to auditing provides auditors with a clear understanding of possible errors and irregularities and the related risks and exposures.

Accepted Answer

A) risk-based approach 
B) risk-adjusted approach 
C) financial audit approach 
D) information systems approach 
A) risk-based approach 
B) risk-adjusted approach 
C) financial audit approach 
D) information systems approach

Question 6

The ________ audit is concerned with the economical and efficient use of resources and the accomplishment of established goals and objectives.

Accepted Answer

A) financial 
B) informational 
C) information systems 
D) operational 
A) financial 
B) informational 
C) information systems 
D) operational

Question 7

An auditor sets an embedded audit module to selectively monitor transactions.Selected transactions are then reprocessed independently,and the results are compared with those obtained by the normal system processing.The auditor is using

Accepted Answer

A) an integrated test facility. 
B) the snapshot technique. 
C) a system control audit review file. 
D) continuous and intermittent simulation. 
A) an integrated test facility. 
B) the snapshot technique. 
C) a system control audit review file. 
D) continuous and intermittent simulation.

Question 8

You are an internal auditor for Ron Burgandy Suits.The CEO has asked you to perform an audit of the program modifications process.Identify one procedure you might use to test controls surrounding the program modification process.

Accepted Answer

A) Review logical access control policies. 
B) Discuss modification policies with management,users,and systems personnel. 
C) Verify logical access controls are in effect for program changes. 
D) Separate development,test,and production versions of programs. 
A) Review logical access control policies. 
B) Discuss modification policies with management,users,and systems personnel. 
C) Verify logical access controls are in effect for program changes. 
D) Separate development,test,and production versions of programs.

Question 9

Name and describe the different types of audits.

Accepted Answer

The financial audit - this audit examine

Question 10

With regards to an accounting information system,a financial audit is most concerned with

Accepted Answer

A) the system's output. 
B) the system's input. 
C) the system's processing. 
D) the system's storage. 
A) the system's output. 
B) the system's input. 
C) the system's processing. 
D) the system's storage.

Question 11

An auditor manually calculates accumulated depreciation on a delivery van and compares her calculation with the accounting records.The auditor is performing

Accepted Answer

A) vouching. 
B) confirmation. 
C) reperformance. 
D) analytical review. 
A) vouching. 
B) confirmation. 
C) reperformance. 
D) analytical review.

Question 12

The purpose of ________ is to determine why,how,when,and who will perform the audit.

Accepted Answer

A) audit planning 
B) the collection of audit evidence 
C) the communication of audit results 
D) the evaluation of audit evidence 
A) audit planning 
B) the collection of audit evidence 
C) the communication of audit results 
D) the evaluation of audit evidence

Question 13

How is a financial audit different from an information systems audit?

Accepted Answer

Financial audits examine the reliability

Question 14

Why do all audits follow a sequence of events that can be divided into four stages,and what are the four stages?

Accepted Answer

The auditor's function generally remains

Question 15

Consideration of risk factors and materiality is most associated with which audit stage?

Accepted Answer

A) collection of audit evidence 
B) communication of audit results 
C) audit planning 
D) evaluation of audit evidence 
A) collection of audit evidence 
B) communication of audit results 
C) audit planning 
D) evaluation of audit evidence

Question 16

Andile Uzoma is the CEO of Chibuzo Incorporated.The board of directors has recently demanded that they receive more assurance that internal controls surrounding the company's information system are effective.Which type of audit would best suit the demands of the board of directors?

Accepted Answer

A) financial audit 
B) information system audit 
C) operational audit 
D) sustainability audit 
A) financial audit 
B) information system audit 
C) operational audit 
D) sustainability audit

Question 17

Which of the following is not one of the six objectives of an information systems audit?

Accepted Answer

A) Security provisions exist to protect data from unauthorized access,modification,or destruction. 
B) Obtaining evidence to provide reasonable assurance the financial statements are not materially misstated 
C) Programs have been developed and acquired in accordance with management's authorization. 
D) Program modifications have received management's authorization and approval. 
A) Security provisions exist to protect data from unauthorized access,modification,or destruction. 
B) Obtaining evidence to provide reasonable assurance the financial statements are not materially misstated 
C) Programs have been developed and acquired in accordance with management's authorization. 
D) Program modifications have received management's authorization and approval.

Question 18

The ________ stage of the auditing process involves (among other things)the auditors observing the operating activities and having discussions with employees.

Accepted Answer

A) audit planning 
B) collection of audit evidence 
C) communication of audit results 
D) evaluation of audit evidence 
A) audit planning 
B) collection of audit evidence 
C) communication of audit results 
D) evaluation of audit evidence

Question 19

Evaluating effectiveness,efficiency,and goal achievement are objectives of ________ audits.

Accepted Answer

A) financial 
B) operational 
C) information systems 
D) all of the above 
A) financial 
B) operational 
C) information systems 
D) all of the above

Question 20

When a control deficiency is identified,the auditor should inquire about

Accepted Answer

A) tests of controls. 
B) compensating controls. 
C) the feasibility of a systems review. 
D) materiality and inherent risk factors. 
A) tests of controls. 
B) compensating controls. 
C) the feasibility of a systems review. 
D) materiality and inherent risk factors.

Exam 11: Auditing Computer-Based Information Systems

Describe how audit evidence can be collected.

Which of the following is not an information systems audit test of controls?

The information systems audit objective that pertains to source data being processed into some form of output is known as

An auditor finds that employee absentee rates are significantly higher on Mondays and Fridays than on other work days.This is an example collecting audit evidence by

The ________ to auditing provides auditors with a clear understanding of possible errors and irregularities and the related risks and exposures.

The ________ audit is concerned with the economical and efficient use of resources and the accomplishment of established goals and objectives.

An auditor sets an embedded audit module to selectively monitor transactions.Selected transactions are then reprocessed independently,and the results are compared with those obtained by the normal system processing.The auditor is using

You are an internal auditor for Ron Burgandy Suits.The CEO has asked you to perform an audit of the program modifications process.Identify one procedure you might use to test controls surrounding the program modification process.

Name and describe the different types of audits.

With regards to an accounting information system,a financial audit is most concerned with

An auditor manually calculates accumulated depreciation on a delivery van and compares her calculation with the accounting records.The auditor is performing

The purpose of ________ is to determine why,how,when,and who will perform the audit.

How is a financial audit different from an information systems audit?

Why do all audits follow a sequence of events that can be divided into four stages,and what are the four stages?

Consideration of risk factors and materiality is most associated with which audit stage?

Andile Uzoma is the CEO of Chibuzo Incorporated.The board of directors has recently demanded that they receive more assurance that internal controls surrounding the company's information system are effective.Which type of audit would best suit the demands of the board of directors?

Which of the following is not one of the six objectives of an information systems audit?

The ________ stage of the auditing process involves (among other things)the auditors observing the operating activities and having discussions with employees.

Evaluating effectiveness,efficiency,and goal achievement are objectives of ________ audits.

When a control deficiency is identified,the auditor should inquire about

Accounting Information Systems: an Overview

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Confidentiality and Privacy Controls

Processing Integrity and Availability Controls

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design,implementation,and Operation

Filters