Exam 4: Internal Controls and Risks in IT Systems

In order to master risks and controls and how they fit together, which of the following is NOT one of the areas to fully understand?

Large-scale IT systems should be protected by physical access controls.Which of the following is not listed as one of those controls?

Risks associated with public cloud computing include all of the following, except:

A new technology that is used to authenticate users is one that plugs into the USB port and eliminates the need for a card reader.This item is called a:

This type of input check ensures that the batch of transactions is sorted in order, but does not help to find the missing transactions.

Examples of Business Continuity include all of the following except:

The software that controls the basic input and output activities of the computer are called:

Which programmed input validation check determines whether the appropriate type of data, either alphabetic or numeric, was entered?

The IT Governance Committee has several important responsibilities.Which of the following is not normally one of those responsibilities?

The risk that an unauthorized user would shut down systems within the IT system is a(n):

The software that accomplishes end user tasks such as work processing, spreadsheets, and accounting functions is called:

The process of proactively examining the IT system for weaknesses that can be exploited by hackers, viruses, or malicious employees is called:

Nonrepudiation means that:

This encryption method, used with wireless network equipment, is symmetric in that both the sending and receiving network nodes must use the same encryption key.It has been proven to be susceptible to hacking.

The IT system includes this type of table for software, hardware, and application programs that contain the appropriate set-up and security settings.

AICPA Trust Principles describe five categories of IT risks and controls.Which of these five categories would be described by the statement, "The system is protected against unauthorized access"?

This form of encryption uses a single encryption key that must be used to encrypt data and also to decode the encrypted data.

Which programmed input validation check compares the value in a field with related fields which determine whether the value is appropriate?

In entering client contact information in the computerized database of a telemarketing business, a clerk erroneously entered nonexistent area codes for a block of new clients.This error rendered the block of contacts useless to the company.Which of the following would most likely have led to discovery of this error into the company's computerized system?

Which of the following URL's would indicate that the site is using browser software that encrypts data transferred to the website?