Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

The operations run manual describes user procedures for an application and assists the user in preparing inputs and using outputs.

(True/False)

4.7/5

(77)

Question 41

In a(n)______________________________ a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages,making it impossible for the attacked site to engage in its normal activities.

(Essay)

4.8/5

(87)

Question 42

The ______________________________ gives detailed instructions to computer operators and to data control about a particular application.

(Essay)

4.8/5

(81)

Question 43

Within the data center,the data control group is responsible for routing all work into and out of the data center,correcting errors,and monitoring error correction.

(True/False)

4.8/5

(90)

Question 44

Segregation of duties consists of separating the four functions of authorizing events, events, events,and safeguarding the resources resulting from consummating the events.

(Essay)

4.8/5

(76)

Question 45

The first list below contains 10 control plans discussed in Chapter 8.The second list describes 10 system failures that have control implications. Required: On the answer line to the left of each system failure,insert the capital letter from the first list of the best control plan to prevent the system failure from occurring.If you can't find a control that will prevent the failure,then choose a detective or a corrective plan.A letter should be used only once.

(Essay)

4.8/5

(98)

Question 46

Which of the following personnel security control plans is corrective in nature as opposed to being a preventive or detective control plan?

(Multiple Choice)

4.9/5

(89)

Question 47

Personnel development control plans consist of each of the following except:

(Multiple Choice)

4.8/5

(78)

Question 48

____ can consist of many computers and related equipment connected together via a network.

(Multiple Choice)

4.9/5

(85)

Question 49

Threat monitoring is a technique to protect one network from another "untrusted" network.

(True/False)

4.9/5

(85)

Question 50

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

(True/False)

4.8/5

(81)

Question 51

The policy of requiring an employee to alternate jobs periodically is known as forced vacations.

(True/False)

4.8/5

(73)

Question 52

Intrusion-prevention systems (IPS)actively block unauthorized traffic using rules specified by the organization.

(True/False)

4.7/5

(84)

Question 53

COBIT 5 is more procedure-based than COBIT 4.1

(True/False)

4.7/5

(77)

Question 54

A(n)______________________________ uses many computers,called zombies,that unwittingly cooperate in a denial-of-service attack by sending messages to the target Web site.

(Essay)

4.9/5

(81)

Question 55

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as ______________________________.

(Essay)

4.8/5

(79)

Question 56

Access control software ensures that only authorized users gain access to a system through a process of identification and authentication.

(True/False)

4.8/5

(74)

Question 57

The chief information officer (CIO)prioritizes and selects IT projects and resources.

(True/False)

4.8/5

(84)

Question 58

The policy of requiring an employee to alternate jobs periodically is known as ______________________________.

(Essay)

4.8/5

(78)

Question 59

The ______________________________ coordinates the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

(Essay)

4.8/5

(86)

Question 60

Showing 41 - 60 of 159

The operations run manual describes user procedures for an application and assists the user in preparing inputs and using outputs.

In a(n)______________________________ a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages,making it impossible for the attacked site to engage in its normal activities.

The ______________________________ gives detailed instructions to computer operators and to data control about a particular application.

Within the data center,the data control group is responsible for routing all work into and out of the data center,correcting errors,and monitoring error correction.

Segregation of duties consists of separating the four functions of authorizing events, events, events,and safeguarding the resources resulting from consummating the events.

Which of the following personnel security control plans is corrective in nature as opposed to being a preventive or detective control plan?

Personnel development control plans consist of each of the following except:

____ can consist of many computers and related equipment connected together via a network.

Threat monitoring is a technique to protect one network from another "untrusted" network.

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

The policy of requiring an employee to alternate jobs periodically is known as forced vacations.

Intrusion-prevention systems (IPS)actively block unauthorized traffic using rules specified by the organization.

COBIT 5 is more procedure-based than COBIT 4.1

A(n)______________________________ uses many computers,called zombies,that unwittingly cooperate in a denial-of-service attack by sending messages to the target Web site.

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as ______________________________.

Access control software ensures that only authorized users gain access to a system through a process of identification and authentication.

The chief information officer (CIO)prioritizes and selects IT projects and resources.

The policy of requiring an employee to alternate jobs periodically is known as ______________________________.

The ______________________________ coordinates the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Introduction to Accounting Information Systems

Enterprise Systems

Electronic Business E-Business-Systems

Documenting Information Systems

Database Management Systems

Relational Databases and SQL

Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

Controlling Information Systems: Business Process and Application Controls

The Order Entrysales Oesprocess

The Billingaccounts Receivablecash Receipts Barcrprocess

The Purchasing Process

The Accounts Payablecash Disbursements Apcdprocess

The Human Resources Process Hrmanagement and Payroll Processes

Integrated Production Processes IPP

The General Ledger and Business Reporting Glbrprocess

Acquiring and Implementing Accounting Information Systems

Filters

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

The operations run manual describes user procedures for an application and assists the user in preparing inputs and using outputs.

In a(n)______________________________ a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages,making it impossible for the attacked site to engage in its normal activities.

The ______________________________ gives detailed instructions to computer operators and to data control about a particular application.

Within the data center,the data control group is responsible for routing all work into and out of the data center,correcting errors,and monitoring error correction.

Segregation of duties consists of separating the four functions of authorizing events,______________________________ events,______________________________ events,and safeguarding the resources resulting from consummating the events.

Which of the following personnel security control plans is corrective in nature as opposed to being a preventive or detective control plan?

Personnel development control plans consist of each of the following except:

____ can consist of many computers and related equipment connected together via a network.

Threat monitoring is a technique to protect one network from another "untrusted" network.

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

The policy of requiring an employee to alternate jobs periodically is known as forced vacations.

Intrusion-prevention systems (IPS)actively block unauthorized traffic using rules specified by the organization.

COBIT 5 is more procedure-based than COBIT 4.1

A(n)______________________________ uses many computers,called zombies,that unwittingly cooperate in a denial-of-service attack by sending messages to the target Web site.

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as ______________________________.

Access control software ensures that only authorized users gain access to a system through a process of identification and authentication.

The chief information officer (CIO)prioritizes and selects IT projects and resources.

The policy of requiring an employee to alternate jobs periodically is known as ______________________________.

The ______________________________ coordinates the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Introduction to Accounting Information Systems

Enterprise Systems

Electronic Business E-Business-Systems

Documenting Information Systems

Database Management Systems

Relational Databases and SQL

Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

Controlling Information Systems: Business Process and Application Controls

The Order Entrysales Oesprocess

The Billingaccounts Receivablecash Receipts Barcrprocess

The Purchasing Process

The Accounts Payablecash Disbursements Apcdprocess

The Human Resources Process Hrmanagement and Payroll Processes

Integrated Production Processes IPP

The General Ledger and Business Reporting Glbrprocess

Acquiring and Implementing Accounting Information Systems

Filters

Segregation of duties consists of separating the four functions of authorizing events, events, events,and safeguarding the resources resulting from consummating the events.