Deck 5: IT Governance

Question 1

Confidentiality of information is an ethical consideration for which of the following party or parties?

A)Management
B)Employees
C)Consultants
D)All of the above.

Answer 1

D

Question 2

Each of the following are methods for implementing a new application system except:

A)Direct cutover
B)Parallel
C)Pilot
D)Test

Answer 2

D

Question 3

Which of the following is not one of the approaches used to achieve the management of an IT control framework?

A)Information Systems Audit and Control As
B)The International Organization for Standardization 17799, Code of Practice for Information Security Management
C)The Information Technology Infrastructure Library
D)Sarbanes-Oxley Act section on IT Controls

Answer 3

D

Question 4

The IT governance committee is made up of many different individuals within the organization.Which of the following would not be one of those individuals?

A)Chief Information Officer
B)Chief External Auditor
C)Chief Executive Officer
D)Top Managers from User Departments

Question 5

A structure of relationships and processes to direct and control the enterprise in order to achieve the enterprise's goals by adding value while balancing risk versus return over IT and its processes is called:

A)IT Governance
B)Strategic Governance
C)Strategic Management
D)IT Management

Question 6

Which of the following is not part of the system design phase of the SDLC?

A)Conceptual design
B)Evaluation and selection
C)Parallel operation
D)Detailed design

Question 7

The use of the SDLC for IT system changes is important for several reasons.Which of the following is not part of the purposes of the SDLC processes?

A)As a part of strategic management of the organization
B)As part of the internal control structure of the organization
C)As part of the audit of an IT system
D)As partial fulfillment of management's ethical obligations

Question 8

Within the systems analysis phase of the SDLC, which of the following data collection methods does not involve any feedback from users of the IT system?

A)Documentation review
B)Interviews using structured questions
C)Interviews using unstructured questions
D)Questionnaires

Question 9

A retail store chain is developing a new integrated computer system for sales and inventories in its store locations.Which of the following implementation methods would involve the most risk?

A)Direct cutover
B)Phased-in implementation
C)Parallel running
D)Pilot testing

Question 10

To fulfill the management obligations that are an integral part of IT governance, management need not focus on:

A)Aligning IT strategy with the business strategy
B)Hiring an acceptable IT manager
C)Measuring IT's performance
D)Insisting that an IT control framework be adopted and implemented

Question 11

A group of senior managers selected to oversee the strategic management of IT is called:

A)IT Strategic Committee
B)IT Governance Committee
C)Chief Information Officer (CIO)
D)IT Management

Question 12

Which of the following feasibility aspects is an evaluation of whether the technology exists to meet the need identified in the proposed change to the IT system?

A)Technical feasibility
B)Operational feasibility
C)Economic feasibility
D)Schedule feasibility

Question 13

The purpose of the feasibility study is to assist in

A)Selecting
B)Designing internal controls
C)Designing reports for the IT system
D)Prioritizing IT requested changes

Question 14

IT governance includes all but which of the following responsibilities?

A)Aligning IT strategy with the business strategy
B)Writing programming code for IT systems
C)Insisting that an IT control framework be adopted and implemented
D)Measuring IT's performance

Question 15

The formal process that many organizations use to select, design, and implement IT systems is the:

A)Systems Development Life Cycle
B)Control Objectives for IT
C)Practice for Security Management
D)Information Technology Development

Question 16

A request for proposal (RFP) is used during the

A)Phase-in period.
B)Purchase of
C)Feasibility study
D)In-house design

Question 17

The process of determining the strategic vision for the organization, developing the long-term objectives, creating the strategies that will achieve the vision and objections, and implementing those strategies is referred to as

A)IT Governance
B)Strategic Governance
C)Strategic Management
D)IT Management

Question 18

Which of the following steps within the systems implementation phase could not occur concurrently with other steps, but would occur at the end?

A)Employee training
B)Data conversion
C)
D)Post-implementation review

Question 19

Which phase of the system development life cycle includes determining user needs of the IT system?

A)Systems planning
B)Systems analysis
C)Systems design
D)Systems implementation

Question 20

COBIT is an acronym for which of the following?

A)Control Objectives for Business and Information Technology
B)Control Objectives for Information and related Technology
C)Center for Business and Informative Technology
D)Control Operations for Business and Information Technology

Question 21

The process of assessing the feasibility and fit of each of the alternative conceptual approaches and selecting the one that best meets the organization's needs is termed:

A)Conceptual Design
B)Evaluation and Selection
C)Systems Analysis
D)Systems Implementation

Question 22

The phases of the SDLC include all of the following except:

A)Systems Planning
B)Systems Implementation
C)Systems Analysis
D)Systems Purchasing

Question 23

This phase of SDLC involves the planning and continuing oversight of the design, implementation, and use of the IT systems.

A)Systems Analysis
B)Systems Implementation
C)Systems Planning
D)Systems Design

Question 24

The Evaluation and Selection cycle of the expanded SDLC would not include which of the following steps?

A)Design or buy the system selected.
B)Identify the alternative system approaches.
C)Evaluate the fit of each of the alternatives to company needs.
D)Implement the alternative selected.

Question 25

Which of the following is false with regards to the systems development life cycle (SDLC)

A)The systems development lifecycle eventually loops back to systems planning
B)The systems development lifecycle has changed over time as systems have become more complex
C)Systems planning, analysis, design, implementation and maintenance are all steps in the SDLC.
D)When purchasing packaged, automated accounting

Question 26

The set of steps undertaken to program, test, and activate the IT system as designed in the system design phase is called:

A)Systems Planning
B)Systems Implementation
C)Systems Design
D)Systems Analysis

Question 27

The study of the current system to determine the strengths and weaknesses and the user needs of that system is called:

A)Systems Analysis
B)Systems Design
C)Systems Planning
D)Systems Implementation

Question 28

The decision to buy or design software directly follows which step in the system design flowchart?

A)Conceptual design
B)Systems analysis
C)Evaluation and selection
D)Systems planning

Question 29

The process of designing the outputs, inputs, user interfaces, databases, manual procedures, security and controls, and documentation of the new system is referred to as:

A)Conceptual Design
B)
C)Systems Design
D)Detailed Design

Question 30

The process of matching alternatives system models to the needs identified in the system analysis phase is called:

A)Conceptual Design
B)Systems Analysis
C)Systems Planning
D)Evaluation and Selection

Question 31

During this phase of the SDLC, management should request and receive ongoing reports about the performance of the IT system.

A)Operation and Maintenance
B)System Analysis
C)Systems Design
D)Systems Planning

Question 32

The regular, ongoing, functioning of the IT system and the processes to fix smaller problems, or bugs, in the IT system is called:

A)Systems Analysis
B)Systems Planning
C)Operation and Maintenance
D)Systems Implementation

Question 33

The expanded SDLC presented in the textbook expands the processes within the system design phase.This is necessary because:

A)It necessary for most companies to create their own
B)The design phase needs to include the programming activities of self-created
C)There is usually more than one
D)Many organizations require a change in the type of operating system along with any changes in

Question 34

Which is the correct flow of the SDLC?

A)Systems Planning, systems design, Systems Analysis, operation and maintenance, systems implementation
B)Systems Planning, Systems Analysis, systems design, systems implementation, operation and maintenance
C)Systems design, Systems Analysis, Systems Planning, systems implementation, operation and maintenance
D)Systems design, Systems Planning, systems implementation, operation and maintenance, Systems Analysis

Question 35

The evaluation of long-term, strategic objectives and prioritization of the IT systems in order to assist the organizations in achieving its objectives is called:

A)Systems Planning
B)Systems Analysis
C)Systems Design
D)Systems Implementation

Question 36

The creation of the system that meets user needs and incorporates the improvements identified by the systems analysis phase is called:

A)Systems Planning
B)Systems Design
C)Systems Analysis
D)Operation and Maintenance

Question 37

When attempting to prioritize IT projects, the IT governance committee needs to consider:

A)The assessment of IT systems and their match to strategic organizational objectives.
B)The feasibility of each of the requested modifications or upgrades.
C)Both of the above.
D)None of the above.

Question 38

This phase of SDLC requires the collection of data about the system and the careful scrutiny of those data to determine areas of the system that can be improved.

A)Systems Planning
B)Systems Implementation
C)Systems Analysis
D)Systems Purchasing

Question 39

Which of the following is not one of the steps outlined in systems development life cycle (SDLC)?

A)Systems Planning
B)Systems Design
C)Systems Major Release Upgrade Plan
D)Systems Implementation

Question 40

Which of the following is true with regards to the systems development life cycle (SDLC)

A)The exact steps in the SDLC and/or their sequence are not as important as is the need to formalize and conduct those steps completely and consistently.
B)Once the systems development life cycle (SDLC) is complete, it is not necessary to restart the cycle unless
C)It is unlikely that the IT governance committee will go back through the phases of the SDLC to design new and improved IT systems
D)In the modern IT environment, it is necessary for an organization to follow each of the steps in the SDLC in the order presented.

Question 41

Face-to-face, verbal questioning of users of an IT system to determine facts or beliefs about the system are called:

A)Interrogation
B)User Review
C)Interviews
D)System Survey

Question 42

The many sets of activities within the organization performed to accomplish the functions necessary to continue the daily operations are referred to as:

A)Business Systems
B)Business Processes
C)Business Activities
D)Business Functions

Question 43

The assessment of the costs and benefits associated with the proposed IT system is referred to as:

A)Operational Feasibility
B)Economic Feasibility
C)Schedule Feasibility
D)Technical Feasibility

Question 44

Typical steps within the systems analysis phase of the SDLC would not include which of the following?

A)Preliminary Investigation
B)Survey of the Current System
C)Economic Feasibility
D)Determination of User Information Needs

Question 45

This type of question is designed such that the format and range of the answer is known ahead of time.

A)Structured Question
B)Oral Question
C)Unstructured Question
D)Range Question

Question 46

The realistic possibility of affording, implementing, and using the IT systems being considered is referred to as:

A)Feasibility
B)Rationality
C)Sequentially
D)Ranking

Question 47

The detailed examination of documentation that exists about the system to gain an understanding of the system under study is called a(n):

A)Documentation Review
B)Systems Audit
C)System Survey
D)Records Observation

Question 48

This type of question is completely open ended, and the respondent is free to answer in any way that he / she feels addresses the question.

A)Structured Question
B)Oral Question
C)Unstructured Question
D)Range Question

Question 49

The purpose of this step in the systems analysis phase is to determine whether the problem or deficiency in the current system really exists and to make a "go"€ or a "no-go" decision.

A)Survey of the Current System
B)Determination of User Information Needs
C)Business Process Reengineering
D)Preliminary Investigation

Question 50

The assessment of the realism of the possibility that the current employees will be able to operate the proposed IT system is referred to as:

A)Operational Feasibility
B)Economic Feasibility
C)Schedule Feasibility
D)Technical Feasibility

Question 51

The assessment of the realism of the possibility that technology exists to meet the need identified in the proposed change to the IT system is called:

A)Operational Feasibility
B)Economic Feasibility
C)Schedule Feasibility
D)Technical Feasibility

Question 52

A detailed study of the current system to identify weaknesses to improve upon and strengths that should be maintained is referred to as:

A)Preliminary Investigation
B)System Survey
C)Process Reengineering
D)Determination of User Information Needs

Question 53

The systems analysis report, which is sent to the IT governance committee, will inform the committee of all of the following, except:

A)The results of the systems survey
B)User needs determination
C)Detailed design
D)Recommendations regarding the continuation of the project

Question 54

A company has stated that the main strategic objective is to improve the accounts payable function within the organization.There are limited resources for IT upgrades and modifications.The IT governance committee has received IT update requests from the public relations department, human services, and vendor satisfaction department.Given this information, which would likely be the first upgrade implemented?

A)Public relations would be first because it would include all areas of the business - vendors, employees, and customers.
B)Vendor satisfaction would be first because it would be most in line with the strategic objective of the company.
C)Human services would be the first because the employees are the ones who are most affected by changes in the IT departments.
D)It is not possible to make a decision without further information.

Question 55

The need to match IT systems to organizational objectives emphasizes the need for the IT governance committee to include top management as its members because:

A)These managers establish strategic objectives and are in the best position to assess the fit of the IT systems to those objectives.
B)These managers are in a position to allocate re
C)Both of the above
D)None of the above

Question 56

A written, rather than an oral, form or questioning of users to determine facts or beliefs about a system is referred to as a(n):

A)Interview
B)Questionnaire
C)Interrogation
D)System Survey

Question 57

The fundamental rethinking and radical redesign of business processes to bring about dramatic improvements in performance is called:

A)Business Process Reengineering
B)Process Redesign
C)Business Analysis and Design
D)Business Process Design and Analysis

Question 58

The assessment of the realistic possibility that the proposed IT system can be implemented within a reasonable amount of time is called:

A)Operational Feasibility
B)Economic Feasibility
C)Schedule Feasibility
D)Technical Feasibility

Question 59

Watching the steps that employees take as they process transactions in the system is referred to as:

A)Investigation
B)Interrogation
C)Observation
D)Interview

Question 60

The purpose of this phase is to question the current approaches in the system and to think about better ways to carry out the steps and processes of the system.

A)Systems Analysis
B)Systems Survey
C)Analysis of Systems Survey
D)Preliminary Investigation

Question 61

The forms, documents, screens, or electronic means used to put data into the accounting system are called:

A)Outputs of the system
B)Data storage
C)Internal controls
D)Inputs of the system

Question 62

The purpose of this phase of systems design is to create the entire set of specifications necessary to build and implement the system.

A)Detailed design
B)Evaluation and selection
C)Operational design
D)Detailed analysis

Question 63

All of the following steps come after the evaluation of RFPs and Software in the system design process except:

A)Selecting
B)Purchasing
C)Determining modifications to
D)Hiring a consultant

Question 64

There are many different types of documentation necessary to operate and maintain an accounting system.These types of documentation include all of the following, except:

A)Flowcharts
B)Operator Manuals
C)Output Examples
D)Entity Relationship Diagrams

Question 65

Considerations related to adopting or increasing cloud computing usage, include:

A)The customer support provided by the cloud vendor
B)The service level agreement with the cloud provider
C)The manner of monitoring the could service usage
D)All of the above

Question 66

In the detailed design stage of systems design it is necessary that the various parts of the system be designed.The parts of the system to be designed at this point would include all of the following, except:

A)Outputs
B)Inputs
C)Program Code
D)Data Storage

Question 67

When a vendor returns a request for proposal, it will include all of the following, except:

A)Match of the system and user needs
B)Description of the
C)The technical support it intends to provide
D)Prices for the

Question 68

Which of the following is NOT considered an issue with cloud computing?

A)Decreased physical security protocols
B)Increased accessibility
C)Increased reliance on 3rd party providers
D)Increased risk of hackers

Question 69

This phase of the systems design for in-house development of software involves the identifying the alternative approaches to systems that will meet the needs identified in the system analysis phase.

A)Request for proposal
B)Conceptual design
C)Systems concept
D)Systems analysis

Question 70

A system conversion method in which on a chose date the old system operation is terminated and all processing begins on the new system.

A)Direct cutover conversion
B)Phase-in conversion
C)Pilot conversion
D)Parallel conversion

Question 71

This document is sent to each software vendor offering a software package that meets the user and system needs and is sent to solicit proposals.

A)Requested
B)Request for Proposal
C)System
D)

Question 72

Which of the following is not a method of data input?

A)Keying in data with a keyboard from data on a paper form
B)Electronic data interchange
C)Bar code scanning
D)Viewed on the screen

Question 73

The process of assessing the feasibility and fit of each of the alternative conceptual approaches and selecting the one that best fits the organization's needs is called:

A)Conceptual Design
B)Systems Design
C)Evaluation and Selection
D)Systems Implementation

Question 74

The purpose of this analysis is to determine which of the alternative designs is the most cost effective.

A)Operational feasibility
B)Technical feasibility
C)Economic feasibility
D)Schedule feasibility

Question 75

A system conversion method in which the old and the new systems are operated simultaneously for a short time.

A)Direct cutover conversion
B)Phase-in conversion
C)Pilot conversion
D)Parallel conversion

Question 76

After all of the RFPs have been received, either the IT governance committee or the project team will evaluate the proposals in order to select the best software package.Things that must be considered would include:

A)The match of the system and the user needs to the features of the
B)Testimonials from other customers who use the
C)Reputation and reliability of the vendor
D)All of the above

Question 77

Which of the following is NOT one of the approaches to cloud computing?

A)
B)Internet Clouds
C)Platform as a Service
D)Private Clouds

Question 78

Reports and documents, such as income statements, aged accounts receivable reports, checks, and invoices are referred to as:

A)Outputs of the system
B)Data storage
C)Internal controls
D)Inputs of the system

Question 79

In this feasibility, the project team must estimate the total amount of time necessary to implement the each alternative design.

A)Operational feasibility
B)Technical feasibility
C)Economic feasibility
D)Schedule feasibility

Question 80

During this process, the project team must consider the number of employees, their capabilities and expertise, and any supporting systems necessary to operate each alternative design.

A)Operational feasibility
B)Technical feasibility
C)Economic feasibility
D)Schedule feasibility