Exam 15: Auditing It Controls Part II: Security and Access

Hackers can disguise their message packets to look as if they came from an authorized user and gain access to the host's network using a technique called

Audit objectives in the electronic data interchange (EDI)environment include all of the following except

Audit trails in computerized systems are comprised of two types of audit logs: detailed logs of individual keystrokes and event-oriented logs.

Computer viruses usually spread throughout the system before being detected.

List three methods of controlling unauthorized access to telecommunication messages.

What are biometric devices?

A firewall is a hardware partition designed to protect networks from power surges.

Explain how SYN flood attacks can be controlled.

An integrated group of programs that supports the applications and facilitates their access to specified resources is called a(n)

A formal log-on procedure is the operating system's first line of defense.Explain how this works.

Malicious and destructive programs cause millions of dollars of loss to corporations annually.

The request-response technique should detect if a data communication transmission has been diverted.

A software program that allows access to a system without going through the normal log-on procedures is called a

Audit objectives for the database management system include all of the following except

Discuss three sources of exposure (threats)to the operating system.

Which control will not reduce the likelihood of data loss due to a line error?

Which of the following is not an access control in a database system?

In an electronic data interchange (EDI)environment,when the auditor compares the terms of the trading partner agreement against the access privileges stated in the database authority table,the auditor is testing which audit objective?

Transaction logs are permanent records of transactions created to preserve audit trails in a computerized environment.

Describe two ways that passwords are used to authorize and validate messages in the electronic data interchange environment.