Exam 16: IT Controls Part II: Security and Access

Describe two tests of controls that would provide evidence that the database management system is protected against unauthorized access attempts.

Viruses rarely attach themselves to executable files.

What is event monitoring?

A worm is software program that replicates itself in areas of idle memory until the system fails.

Operating system controls are of interest to system professionals but should not concern accountants and auditors.

In determining whether a system is adequately protected from attacks by computer viruses, all of the following policies are relevant except

In a computerized environment, the audit trail log must be printed onto paper documents.

A formal log-on procedure is the operating system's first line of defense. Explain how this works.

Contrast the Private Encryption Standard approach with the Public Key Encryption approach to controlling access to telecommunication messages.

Audit trails in computerized systems are comprised of two types of audit logs: detailed logs of individual keystrokes and event-oriented logs.

All of the following will reduce the exposure to computer viruses except

The request-response technique should detect if a data communication transmission has been diverted.

Passwords are secret codes that users enter to gain access to systems. Security can be compromised by all of the following except

The checkpoint feature

In an electronic data interchange (EDI) environment, when the auditor compares the terms of the trading partner agreement against the access privileges stated in the database authority table, the auditor is testing which audit objective?

What are some typical problems with passwords?

Electronic data interchange customers may be given access to the vendor's data files.

What can be done to defeat a DDoS Attack?

Discuss three techniques for breaching operating system controls.

List three methods of controlling unauthorized access to telecommunication messages.