Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as segregation of duties.

The segregation of duties control plan consists of separating all of the following event-processing functions except:

Sending out an e-mail pretending to be a legitimate business asking for information about a person's account is called:

Computer hacking and cracking is the intentional,unauthorized access to an organization's computer system,accomplished by bypassing the system's access security controls.

The trust service principle of processing ______________________________ determines whether processing is complete,accurate,timely and authorized.

The ______________________________ logs and monitors who is on or is trying to access the network.

Which of the following is not a strategic planning process?

The IS function with the principal responsibilities of ensuring the security of all IT resources is data control.

IT governance is a process that ensures that the organization's IT sustains and extends the organization's strategies and objectives.

COBIT 5:

The controlled access to data,programs,and documentation is a principal responsibility of which of the following functions?

Program documentation provides a description of an application program and usually includes the program's purpose,program flowcharts,and source code listings.

Which of the following has the responsibility to ensure the security of all IT resources?

______________________________ is when an e-mail is sent pretending to be a legitimate business asking for information about your account.

COBIT was developed by:

In an information systems organization,all of the following functions might logically report to the data center manager except:

______________________________ helps to solve the problem posed by single key cryptography by employing a pair of matched keys for each system user,one private (i.e. ,known only to the party who possesses it)and one public.

Which of the following has the responsibility of efficient and effective operation of IT?

The ______________________________ covers the progression of information systems through the systems development process,from birth,through implementation,to ongoing use and modification.

In a logic bomb attack,a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages,making it impossible for the attacked site to engage in its normal activities.