Question 1

Public key encryption

Accepted Answer

A)  uses one key for encoding messages and another for decoding them 
B)  is an enhancement to Data Encryption Standard (DES) 
C)  is electronic authentication that cannot be forged 
D)  All of the above. 
A)  uses one key for encoding messages and another for decoding them 
B)  is an enhancement to Data Encryption Standard (DES) 
C)  is electronic authentication that cannot be forged 
D)  All of the above.

Question 2

Firewalls are special materials used to insulate computer facilities

Accepted Answer

A) True 
 B)False

Question 3

Access controls protect databases against destruction, loss or misuse through unauthorized access.

Accepted Answer

A) True 
 B)False

Question 4

What is an operating system? What does it do? What are operating system control objectives?

Accepted Answer

An operating system is a computer's cont

Question 5

Which of the following is true?

Accepted Answer

A)  Deep Packet Inspection uses a variety of analytical and statistical techniques to evaluate the contents of message packets. 
B)  An Intrusion prevention system works in parallel with a firewall at the perimeter of the network to act as a filer that removes malicious packets from the flow before they can affect servers and networks. 
C)  A distributed denial of service attack is so named because it is capable of attacking many victims simultaneously who are distributed across the internet. 
D)  None of the above are true statements. 
A)  Deep Packet Inspection uses a variety of analytical and statistical techniques to evaluate the contents of message packets. 
B)  An Intrusion prevention system works in parallel with a firewall at the perimeter of the network to act as a filer that removes malicious packets from the flow before they can affect servers and networks. 
C)  A distributed denial of service attack is so named because it is capable of attacking many victims simultaneously who are distributed across the internet. 
D)  None of the above are true statements.

Question 6

Which of the following is considered an unintentional threat to the integrity of the operating system?

Accepted Answer

A)  a hacker gaining access to the system because of a security flaw 
B)  a hardware flaw that causes the system to crash 
C)  a virus that formats the hard drive 
D)  the systems programmer accessing individual user files 
A)  a hacker gaining access to the system because of a security flaw 
B)  a hardware flaw that causes the system to crash 
C)  a virus that formats the hard drive 
D)  the systems programmer accessing individual user files

Question 7

Discuss the key features of the one-time password technique:

Accepted Answer

The one-time password was designed to ov

Question 8

Advance encryption standard (AES) is

Accepted Answer

A)  a 64 -bit private key encryption technique 
B)  a 128-bit private key encryption technique 
C)  a 128-bit public key encryption technique 
D)  a 256-bit public encryption technique that has become a U.S. government standard 
A)  a 64 -bit private key encryption technique 
B)  a 128-bit private key encryption technique 
C)  a 128-bit public key encryption technique 
D)  a 256-bit public encryption technique that has become a U.S. government standard

Question 9

Examining programmer authority tables for information about who has access to Data Definition Language commands will provide evidence about who is responsible for creating subschemas.

Accepted Answer

A) True 
 B)False

Question 10

All of the following are designed to control exposures from subversive threats except

Accepted Answer

A)  firewalls 
B)  one-time passwords 
C)  field interrogation 
D)  data encryption 
A)  firewalls 
B)  one-time passwords 
C)  field interrogation 
D)  data encryption

Question 11

To preserve audit trails in a computerized environment, transaction logs are permanent records of transactions.

Accepted Answer

A) True 
 B)False

Question 12

An integrated group of programs that supports the applications and facilitates their access to specified resources is called a (an)

Accepted Answer

A)  operating system. 
B)  database management system. 
C)  utility system 
D)  facility system. 
E)  object system. 
A)  operating system. 
B)  database management system. 
C)  utility system 
D)  facility system. 
E)  object system.

Question 13

In an electronic data interchange environment, the audit trail

Accepted Answer

A)  is a printout of all incoming and outgoing transactions 
B)  is an electronic log of all transactions received, translated, and processed by the system 
C)  is a computer resource authority table 
D)  consists of pointers and indexes within the database 
A)  is a printout of all incoming and outgoing transactions 
B)  is an electronic log of all transactions received, translated, and processed by the system 
C)  is a computer resource authority table 
D)  consists of pointers and indexes within the database

Question 14

What are the auditor's concerns in testing EDI controls?

Accepted Answer

When testing EDI controls, the auditor's

Question 15

Discuss three sources of exposure (threats) to the operating system.

Accepted Answer

1. Privileged personnel who abuse their

Question 16

The operating system performs all of the following tasks except

Accepted Answer

A)  translates third-generation languages into machine language 
B)  assigns memory to applications 
C)  authorizes user access 
D)  schedules job processing 
A)  translates third-generation languages into machine language 
B)  assigns memory to applications 
C)  authorizes user access 
D)  schedules job processing

Question 17

Audit trails cannot be used to

Accepted Answer

A)  detect unauthorized access to systems 
B)  facilitate reconstruction of events 
C)  reduce the need for other forms of security 
D)  promote personal accountability 
A)  detect unauthorized access to systems 
B)  facilitate reconstruction of events 
C)  reduce the need for other forms of security 
D)  promote personal accountability

Question 18

A recovery module suspends all data processing while the system reconciles its journal files against the database.

Accepted Answer

A) True 
 B)False

Question 19

The database management system controls access to program files.

Accepted Answer

A) True 
 B)False

Question 20

All of the following are objectives of operating system control except

Accepted Answer

A)  protecting the OS from users 
B)  protesting users from each other 
C)  protecting users from themselves 
D)  protecting the environment from users 
A)  protecting the OS from users 
B)  protesting users from each other 
C)  protecting users from themselves 
D)  protecting the environment from users

Public key encryption

Firewalls are special materials used to insulate computer facilities

Access controls protect databases against destruction, loss or misuse through unauthorized access.

What is an operating system? What does it do? What are operating system control objectives?

Which of the following is true?

Which of the following is considered an unintentional threat to the integrity of the operating system?

Discuss the key features of the one-time password technique:

Advance encryption standard (AES) is

Examining programmer authority tables for information about who has access to Data Definition Language commands will provide evidence about who is responsible for creating subschemas.

All of the following are designed to control exposures from subversive threats except

To preserve audit trails in a computerized environment, transaction logs are permanent records of transactions.

An integrated group of programs that supports the applications and facilitates their access to specified resources is called a (an)

In an electronic data interchange environment, the audit trail

What are the auditor's concerns in testing EDI controls?

Discuss three sources of exposure (threats) to the operating system.

The operating system performs all of the following tasks except

Audit trails cannot be used to

A recovery module suspends all data processing while the system reconciles its journal files against the database.

The database management system controls access to program files.

All of the following are objectives of operating system control except

The Information System: an Accountants Perspective

Introduction to Transaction Processing

Ethics, Fraud, and Internal Control

The Revenue Cycle

The Expenditure Cycle Part I: Purchases and Cash Disbursements Procedures

The Expenditure Cycle Part II: Payroll Processing and Fixed Asset Procedures

The Conversion Cycle

Financial Reporting, and Management Reporting Systems

Database Management Systems

The Rea Approach to Business Process Modeling

Enterprise Resource Planning Systems

Electronic Commerce Systems

Managing the Systems Development Life Cycle

Construct, Deliver, and Maintain Systems Projects

IT Controls Part I: Sarbanes-Oxley and It Governance

IT Controls Part III: Systems Development, Program Changes, and Application Controls

Filters

Exam 16: IT Controls Part II: Security and Access

Public key encryption

Firewalls are special materials used to insulate computer facilities

Access controls protect databases against destruction, loss or misuse through unauthorized access.

What is an operating system? What does it do? What are operating system control objectives?

Which of the following is true?

Which of the following is considered an unintentional threat to the integrity of the operating system?

Discuss the key features of the one-time password technique:

Advance encryption standard (AES) is

Examining programmer authority tables for information about who has access to Data Definition Language commands will provide evidence about who is responsible for creating subschemas.

All of the following are designed to control exposures from subversive threats except

To preserve audit trails in a computerized environment, transaction logs are permanent records of transactions.

An integrated group of programs that supports the applications and facilitates their access to specified resources is called a (an)

In an electronic data interchange environment, the audit trail

What are the auditor's concerns in testing EDI controls?

Discuss three sources of exposure (threats) to the operating system.

The operating system performs all of the following tasks except

Audit trails cannot be used to

A recovery module suspends all data processing while the system reconciles its journal files against the database.

The database management system controls access to program files.

All of the following are objectives of operating system control except

The Information System: an Accountants Perspective

Introduction to Transaction Processing

Ethics, Fraud, and Internal Control

The Revenue Cycle

The Expenditure Cycle Part I: Purchases and Cash Disbursements Procedures

The Expenditure Cycle Part II: Payroll Processing and Fixed Asset Procedures

The Conversion Cycle

Financial Reporting, and Management Reporting Systems

Database Management Systems

The Rea Approach to Business Process Modeling

Enterprise Resource Planning Systems

Electronic Commerce Systems

Managing the Systems Development Life Cycle

Construct, Deliver, and Maintain Systems Projects

IT Controls Part I: Sarbanes-Oxley and It Governance

IT Controls Part III: Systems Development, Program Changes, and Application Controls

Filters