Question 1

Which of the following statements is true?

Accepted Answer

A)  Management has a legal responsibility to protect an organization's informational assets. 
B)  Proper protection of organizational information from unauthorized use required both physical and logical controls. 
C)  The unauthorized disclosure of financial information is a violation of federal securities laws. 
D)  All of the above. 
A)  Management has a legal responsibility to protect an organization's informational assets. 
B)  Proper protection of organizational information from unauthorized use required both physical and logical controls. 
C)  The unauthorized disclosure of financial information is a violation of federal securities laws. 
D)  All of the above. D

Question 2

This IT function's key control concern is that organization and IT strategic objectives are misaligned:

Accepted Answer

A)  CIO 
B)  quality assurance 
C)  IT steering committee 
D)  systems development manager 
A)  CIO 
B)  quality assurance 
C)  IT steering committee 
D)  systems development manager C

Question 3

An outside auditing firm annually supervises a physical count of the items in a retail store's shelf inventory.This is an example of:

Accepted Answer

A)  authorizing events 
B)  executing events 
C)  recording events 
D)  safeguarding resources 
A)  authorizing events 
B)  executing events 
C)  recording events 
D)  safeguarding resources D

Question 4

Application controls restrict access to data,programs,and documentation.

Accepted Answer

A) True 
 B)False

Question 5

Instructions for computer setup,required data,restart procedures,and error messages are typically contained in a(n):

Accepted Answer

A)  systems development standards manual 
B)  program documentation manual 
C)  operations run manual 
D)  application documentation manual 
A)  systems development standards manual 
B)  program documentation manual 
C)  operations run manual 
D)  application documentation manual

Question 6

The ______________________________ group is responsible for routing all work in to and out of the data center,correcting errors,and monitoring all error correction.

Accepted Answer

The answer of The ______________________________ group is responsible for routing...

Question 7

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls,commonly called resource controls.

Accepted Answer

A) True 
 B)False

Question 8

Personnel termination control plans might include all of the following except:

Accepted Answer

A)  require immediate separation 
B)  identify the employee's reasons for leaving 
C)  establish a policy of forced vacations 
D)  collect the employee's keys,badges,etc. 
A)  require immediate separation 
B)  identify the employee's reasons for leaving 
C)  establish a policy of forced vacations 
D)  collect the employee's keys,badges,etc.

Question 9

Management should establish a(n)______________________________ plan and implement related activities,including reviews,audits,and inspections,to ensure the attainment of IT customer requirements.

Accepted Answer

quality as

Question 10

______________________________ is a process that ensures that the enterprise's IT sustains and extends the organization's strategies and objectives.

Accepted Answer

The answer of ______________________________ is a process that ensures that...

Question 11

Antivirus is a technique to protect one network from another "untrusted" network.

Accepted Answer

A) True 
 B)False

Question 12

COBIT 5 has two main components: five _____________ and seven ________________.

Accepted Answer

GEIT principles,enab

Question 13

______________________________ is the intentional unauthorized access of an organization's computer system,accomplished by bypassing the system's access security controls.

Accepted Answer

Computer hacking and

Question 14

Alternative names for contingency planning include all of the following except:

Accepted Answer

A)  disaster recovery planning 
B)  business interruption planning 
C)  business disaster planning 
D)  business continuity planning 
A)  disaster recovery planning 
B)  business interruption planning 
C)  business disaster planning 
D)  business continuity planning

Question 15

The ______________________________ actively blocks unauthorized traffic using rules specified by an organization.

Accepted Answer

intrusion-prevention

Question 16

The WebTrust family of services offers best practices and e-business solutions related exclusively to B2B electronic commerce.

Accepted Answer

A) True 
 B)False

Question 17

Application documentation that describes the application and contains instructions for preparing inputs and using outputs is a(n):

Accepted Answer

A)  operations run manual 
B)  user manual 
C)  program documentation 
D)  systems documentation 
A)  operations run manual 
B)  user manual 
C)  program documentation 
D)  systems documentation

Question 18

A(n)______________________________ indemnifies a company in case it suffers losses from defalcations committed by its employees.

Accepted Answer

The answer of A(n)______________________________ indemnifies a company in case it...

Question 19

Training materials help users learn their jobs and perform consistently in those jobs.

Accepted Answer

A) True 
 B)False

Question 20

Which of the following controls restrict access to programs,data,and documentation?

Accepted Answer

A)  library controls 
B)  password controls 
C)  authentication controls 
D)  program change controls 
A)  library controls 
B)  password controls 
C)  authentication controls 
D)  program change controls

Which of the following statements is true?

This IT function's key control concern is that organization and IT strategic objectives are misaligned:

An outside auditing firm annually supervises a physical count of the items in a retail store's shelf inventory.This is an example of:

Application controls restrict access to data,programs,and documentation.

Instructions for computer setup,required data,restart procedures,and error messages are typically contained in a(n):

The ______________________________ group is responsible for routing all work in to and out of the data center,correcting errors,and monitoring all error correction.

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls,commonly called resource controls.

Personnel termination control plans might include all of the following except:

Management should establish a(n)______________________________ plan and implement related activities,including reviews,audits,and inspections,to ensure the attainment of IT customer requirements.

______________________________ is a process that ensures that the enterprise's IT sustains and extends the organization's strategies and objectives.

Antivirus is a technique to protect one network from another "untrusted" network.

COBIT 5 has two main components: five _ and seven ____.

______________________________ is the intentional unauthorized access of an organization's computer system,accomplished by bypassing the system's access security controls.

Alternative names for contingency planning include all of the following except:

The ______________________________ actively blocks unauthorized traffic using rules specified by an organization.

The WebTrust family of services offers best practices and e-business solutions related exclusively to B2B electronic commerce.

Application documentation that describes the application and contains instructions for preparing inputs and using outputs is a(n):

A(n)______________________________ indemnifies a company in case it suffers losses from defalcations committed by its employees.

Training materials help users learn their jobs and perform consistently in those jobs.

Which of the following controls restrict access to programs,data,and documentation?

Introduction to Accounting Information Systems

Enterprise Systems

Electronic Business E-Business-Systems

Documenting Information Systems

Database Management Systems

Relational Databases and SQL

Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

Controlling Information Systems: Business Process and Application Controls

The Order Entrysales Oesprocess

The Billingaccounts Receivablecash Receipts Barcrprocess

The Purchasing Process

The Accounts Payablecash Disbursements Apcdprocess

The Human Resources Process Hrmanagement and Payroll Processes

Integrated Production Processes IPP

The General Ledger and Business Reporting Glbrprocess

Acquiring and Implementing Accounting Information Systems

Filters

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

Which of the following statements is true?

This IT function's key control concern is that organization and IT strategic objectives are misaligned:

An outside auditing firm annually supervises a physical count of the items in a retail store's shelf inventory.This is an example of:

Application controls restrict access to data,programs,and documentation.

Instructions for computer setup,required data,restart procedures,and error messages are typically contained in a(n):

The ______________________________ group is responsible for routing all work in to and out of the data center,correcting errors,and monitoring all error correction.

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls,commonly called resource controls.

Personnel termination control plans might include all of the following except:

Management should establish a(n)______________________________ plan and implement related activities,including reviews,audits,and inspections,to ensure the attainment of IT customer requirements.

______________________________ is a process that ensures that the enterprise's IT sustains and extends the organization's strategies and objectives.

Antivirus is a technique to protect one network from another "untrusted" network.

COBIT 5 has two main components: five _____________ and seven ________________.

______________________________ is the intentional unauthorized access of an organization's computer system,accomplished by bypassing the system's access security controls.

Alternative names for contingency planning include all of the following except:

The ______________________________ actively blocks unauthorized traffic using rules specified by an organization.

The WebTrust family of services offers best practices and e-business solutions related exclusively to B2B electronic commerce.

Application documentation that describes the application and contains instructions for preparing inputs and using outputs is a(n):

A(n)______________________________ indemnifies a company in case it suffers losses from defalcations committed by its employees.

Training materials help users learn their jobs and perform consistently in those jobs.

Which of the following controls restrict access to programs,data,and documentation?

Introduction to Accounting Information Systems

Enterprise Systems

Electronic Business E-Business-Systems

Documenting Information Systems

Database Management Systems

Relational Databases and SQL

Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

Controlling Information Systems: Business Process and Application Controls

The Order Entrysales Oesprocess

The Billingaccounts Receivablecash Receipts Barcrprocess

The Purchasing Process

The Accounts Payablecash Disbursements Apcdprocess

The Human Resources Process Hrmanagement and Payroll Processes

Integrated Production Processes IPP

The General Ledger and Business Reporting Glbrprocess

Acquiring and Implementing Accounting Information Systems

Filters

COBIT 5 has two main components: five _ and seven ____.