Question 1

Some systems professionals have unrestricted access to the organization's programs and data.

Accepted Answer

A) True 
 B)False

Question 2

What is RAID?

Accepted Answer

RAID is the use of parallel disks that c

Question 3

Which of the following would strengthen organizational control over a large-scale data processing center?

Accepted Answer

A) Requiring the user departments to specify the general control standards necessary for processing transactions. 
B) Requiring that requests and instructions for data processing services be submitted directly to the computer operator in the data center. 
C) Having the database administrator report to the manager of computer operations. 
D) Assigning maintenance responsibility to the original system designer who best knows its logic. 
A) Requiring the user departments to specify the general control standards necessary for processing transactions. 
B) Requiring that requests and instructions for data processing services be submitted directly to the computer operator in the data center. 
C) Having the database administrator report to the manager of computer operations. 
D) Assigning maintenance responsibility to the original system designer who best knows its logic.

Question 4

Why should new systems development activities be segregated from the program change (maintenance)function.

Accepted Answer

Combining these functions increases the

Question 5

Discuss the advantages and disadvantages of the second site backup options.

Accepted Answer

Second site backups include mu

Question 6

Systems development is separated from data processing activities because failure to do so

Accepted Answer

A)  weakens database access security 
B)  allows programmers access to make unauthorized changes to applications during execution 
C)  results in inadequate documentation 
D)  results in master files being inadvertently erased 
A)  weakens database access security 
B)  allows programmers access to make unauthorized changes to applications during execution 
C)  results in inadequate documentation 
D)  results in master files being inadvertently erased

Question 7

Explain vendor exploitation.

Accepted Answer

Once the client firm has divested itself

Question 8

.  Why is poor-quality systems documentation a prevalent problem?

Accepted Answer

Many firms that do not use CASE tools wi

Question 9

Adequate backups will protect against all of the following except

Accepted Answer

A)  natural disasters such as fires 
B)  unauthorized access 
C)  data corruption caused by program errors 
D)  system crashes 
A)  natural disasters such as fires 
B)  unauthorized access 
C)  data corruption caused by program errors 
D)  system crashes

Question 10

Which of the following disaster recovery techniques may be least optimal in the case of a disaster?

Accepted Answer

A) empty shell 
B) mutual aid pact 
C) internally provided backup 
D) they are all equally beneficial. 
A) empty shell 
B) mutual aid pact 
C) internally provided backup 
D) they are all equally beneficial.

Question 11

What are the objectives of IT Governance?

Accepted Answer

Key objectives of IT governanc

Question 12

All of the following are issues of computer security except

Accepted Answer

A)  releasing incorrect data to authorized individuals 
B)  permitting computer operators unlimited access to the computer room 
C)  permitting access to data by unauthorized individuals 
D)  providing correct data to unauthorized individuals 
A)  releasing incorrect data to authorized individuals 
B)  permitting computer operators unlimited access to the computer room 
C)  permitting access to data by unauthorized individuals 
D)  providing correct data to unauthorized individuals

Question 13

What are commodity IT assets?

Accepted Answer

Commodity IT assets are not unique to a

Question 14

Which of the following is true?

Accepted Answer

A) Core competency theory argues that an organization should outsource specific core assets. 
B) Core competency theory argues that an organization should focus exclusively on its core business competencies 
C) Core competency theory argues that an organization should not outsource specific commodity assets. 
D)  Core competency theory argues that an organization should retain certain specific non-core assets in-house. 
A) Core competency theory argues that an organization should outsource specific core assets. 
B) Core competency theory argues that an organization should focus exclusively on its core business competencies 
C) Core competency theory argues that an organization should not outsource specific commodity assets. 
D)  Core competency theory argues that an organization should retain certain specific non-core assets in-house.

Question 15

What are the three primary CBIS functions that must be separated?

Accepted Answer

The three primary CBIS functions that mu

Question 16

Briefly explain the core-competency theory.

Accepted Answer

Core competency theory argues that an or

Question 17

Which of the following is not true?

Accepted Answer

A)  When management outsources their organization's IT functions, they also outsource responsibility for internal control. 
B)  Once a client firm has outsourced specific IT assets, its performance becomes linked to the vendor's performance. 
C)  IT outsourcing may affect incongruence between a firm's IT strategic planning and its business planning functions. 
D)  The financial justification for IT outsourcing depends upon the vendor achieving economies of scale. 
A)  When management outsources their organization's IT functions, they also outsource responsibility for internal control. 
B)  Once a client firm has outsourced specific IT assets, its performance becomes linked to the vendor's performance. 
C)  IT outsourcing may affect incongruence between a firm's IT strategic planning and its business planning functions. 
D)  The financial justification for IT outsourcing depends upon the vendor achieving economies of scale.

Question 18

Why should the tasks of systems development and maintenance be segregated from operations?

Accepted Answer

The segregation of systems development (

Question 19

Which of the following is not an essential feature of a disaster recovery plan?

Accepted Answer

A)  off-site storage of backups 
B)  computer services function 
C)  second site backup 
D)  critical applications identified 
A)  off-site storage of backups 
B)  computer services function 
C)  second site backup 
D)  critical applications identified

Some systems professionals have unrestricted access to the organization's programs and data.

What is RAID?

Which of the following would strengthen organizational control over a large-scale data processing center?

Why should new systems development activities be segregated from the program change (maintenance)function.

Discuss the advantages and disadvantages of the second site backup options.

Systems development is separated from data processing activities because failure to do so

Explain vendor exploitation.

. Why is poor-quality systems documentation a prevalent problem?

Adequate backups will protect against all of the following except

Which of the following disaster recovery techniques may be least optimal in the case of a disaster?

What are the objectives of IT Governance?

All of the following are issues of computer security except

What are commodity IT assets?

Which of the following is true?

What are the three primary CBIS functions that must be separated?

Briefly explain the core-competency theory.

Which of the following is not true?

Why should the tasks of systems development and maintenance be segregated from operations?

Which of the following is not an essential feature of a disaster recovery plan?

Auditing and Internal Control

Security Part I: Auditing Operating Systems and Networks

IT Security Part II: Auditing Database Systems

Systems Development and Program Change Activities

Overview of Transaction Processing and Financial Reporting Systems

Computer-Assisted Audit Tools and Techniques

Data Structures and CAATTs for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Business Ethics, Fraud, and Fraud Detection

Enterprise Resource Planning Systems

Filters

Exam 2: Auditing IT Governance Controls

Some systems professionals have unrestricted access to the organization's programs and data.

What is RAID?

Which of the following would strengthen organizational control over a large-scale data processing center?

Why should new systems development activities be segregated from the program change (maintenance)function.

Discuss the advantages and disadvantages of the second site backup options.

Systems development is separated from data processing activities because failure to do so

Explain vendor exploitation.

. Why is poor-quality systems documentation a prevalent problem?

Adequate backups will protect against all of the following except

Which of the following disaster recovery techniques may be least optimal in the case of a disaster?

What are the objectives of IT Governance?

All of the following are issues of computer security except

What are commodity IT assets?

Which of the following is true?

What are the three primary CBIS functions that must be separated?

Briefly explain the core-competency theory.

Which of the following is not true?

Why should the tasks of systems development and maintenance be segregated from operations?

Which of the following is not an essential feature of a disaster recovery plan?

Auditing and Internal Control

Security Part I: Auditing Operating Systems and Networks

IT Security Part II: Auditing Database Systems

Systems Development and Program Change Activities

Overview of Transaction Processing and Financial Reporting Systems

Computer-Assisted Audit Tools and Techniques

Data Structures and CAATTs for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Business Ethics, Fraud, and Fraud Detection

Enterprise Resource Planning Systems

Filters