Question 1

An incremental backup backs up all files whose archive bit is set to 0 before termination of the session.

Accepted Answer

A) True 
 B)False

Question 2

The ERM process is part of the information security management system.

Accepted Answer

A) True 
 B)False

Question 3

COBIT is a framework that defines a set,or code,of best practices.Discuss the 4 domains within the COBIT standard.

Accepted Answer

1.Plan and organize - focuses on IT or

Question 4

Examples of social engineering include

Accepted Answer

A)  pretexting and phishing. 
B)  pretexting and direct observation. 
C)  phishing and direct observation. 
D)  pretexting, phishing, and direct observation. 
A)  pretexting and phishing. 
B)  pretexting and direct observation. 
C)  phishing and direct observation. 
D)  pretexting, phishing, and direct observation.

Question 5

One of the duties of the CSO is to present reports to the board of directors for approval.

Accepted Answer

A) True 
 B)False

Question 6

The distribution of ________ should be controlled by a formal,secure delivery system.

Accepted Answer

The answer of The distribution of ________ should be controlled...

Question 7

When the qualitative approach to risk assessment is used,costs might be estimated using

Accepted Answer

A)  replacement costs. 
B)  service denial costs. 
C)  business interruption costs. 
D)  All of these answers are correct. 
A)  replacement costs. 
B)  service denial costs. 
C)  business interruption costs. 
D)  All of these answers are correct.

Question 8

Implementing security measures and contingency plans help to control computer information threats.

Accepted Answer

A) True 
 B)False

Question 9

________ computing involves clusters of interlinked computers that share common workloads.

Accepted Answer

A)  Grid 
B)  Cloud 
C)  Networked 
D)  Malware 
A)  Grid 
B)  Cloud 
C)  Networked 
D)  Malware

Question 10

Disk shadowing is an example of a fault tolerance applied at what level?

Accepted Answer

A)  Network communications 
B)  DASD 
C)  Transaction 
D)  CPU processor 
A)  Network communications 
B)  DASD 
C)  Transaction 
D)  CPU processor

Question 11

The method of risk assessment for computer systems where system vulnerabilities and threats are listed and subjectively ranked is known as the ________ approach.

Accepted Answer

The answer of The method of risk assessment for computer...

Question 12

________ can be digitally signed in the same way that electronic messages are signed to authenticate the identity of the source of the program.

Accepted Answer

The answer of ________ can be digitally signed in the...

Question 13

System faults represent component equipment failures such as disk failures and power outages.

Accepted Answer

A) True 
 B)False

Question 14

Pretexting and phishing are forms of social engineering.

Accepted Answer

A) True 
 B)False

Question 15

Escalation procedures state the conditions under which a disaster should be declared,who should declare it,and whom that person should notify when executing the declaration.

Accepted Answer

A) True 
 B)False

Question 16

A defrauder substitutes his own version of a company's master file for the real one.This method of computer fraud is known as

Accepted Answer

A)  direct file alteration. 
B)  data theft. 
C)  misappropriation of information resources. 
D)  Answers B and C above are both correct. 
A)  direct file alteration. 
B)  data theft. 
C)  misappropriation of information resources. 
D)  Answers B and C above are both correct.

Question 17

Backing up files is not the same thing as ________ them.

Accepted Answer

The answer of Backing up files is not the same...

Question 18

The most sophisticated type of wire tapping is called ________.

Accepted Answer

The answer of The most sophisticated type of wire tapping...

Question 19

Logic bombs are dormant pieces of code placed in programs for activation at a later date by a specific event.

Accepted Answer

A) True 
 B)False

Question 20

Black hat hackers formally probe systems for legitimate purposes in order to help with security control procedures.

Accepted Answer

A) True 
 B)False

An incremental backup backs up all files whose archive bit is set to 0 before termination of the session.

The ERM process is part of the information security management system.

COBIT is a framework that defines a set,or code,of best practices.Discuss the 4 domains within the COBIT standard.

Examples of social engineering include

One of the duties of the CSO is to present reports to the board of directors for approval.

The distribution of ________ should be controlled by a formal,secure delivery system.

When the qualitative approach to risk assessment is used,costs might be estimated using

Implementing security measures and contingency plans help to control computer information threats.

________ computing involves clusters of interlinked computers that share common workloads.

Disk shadowing is an example of a fault tolerance applied at what level?

The method of risk assessment for computer systems where system vulnerabilities and threats are listed and subjectively ranked is known as the ________ approach.

________ can be digitally signed in the same way that electronic messages are signed to authenticate the identity of the source of the program.

System faults represent component equipment failures such as disk failures and power outages.

Pretexting and phishing are forms of social engineering.

Escalation procedures state the conditions under which a disaster should be declared,who should declare it,and whom that person should notify when executing the declaration.

A defrauder substitutes his own version of a company's master file for the real one.This method of computer fraud is known as

Backing up files is not the same thing as ________ them.

The most sophisticated type of wire tapping is called ________.

Logic bombs are dormant pieces of code placed in programs for activation at a later date by a specific event.

Black hat hackers formally probe systems for legitimate purposes in order to help with security control procedures.

Accounting Information Systems: An Overview

Systems Techniques and Documentation

Ebusiness and Ecommerce

Transaction Processing and the Internal Control Process

Fraud Examination and Fraud Management

Electronic Data Processing Systems

Revenue Cycle Processes

Procurement and Human Resources Business Processes

The Production Business Process

Systems Planning, analysis, and Design

Systems Project Management, implementation, operation, control

Data Management Concepts

Auditing Information Technology

Filters

Exam 6: Information Systems Security

An incremental backup backs up all files whose archive bit is set to 0 before termination of the session.

The ERM process is part of the information security management system.

COBIT is a framework that defines a set,or code,of best practices.Discuss the 4 domains within the COBIT standard.

Examples of social engineering include

One of the duties of the CSO is to present reports to the board of directors for approval.

The distribution of ________ should be controlled by a formal,secure delivery system.

When the qualitative approach to risk assessment is used,costs might be estimated using

Implementing security measures and contingency plans help to control computer information threats.

________ computing involves clusters of interlinked computers that share common workloads.

Disk shadowing is an example of a fault tolerance applied at what level?

The method of risk assessment for computer systems where system vulnerabilities and threats are listed and subjectively ranked is known as the ________ approach.

________ can be digitally signed in the same way that electronic messages are signed to authenticate the identity of the source of the program.

System faults represent component equipment failures such as disk failures and power outages.

Pretexting and phishing are forms of social engineering.

Escalation procedures state the conditions under which a disaster should be declared,who should declare it,and whom that person should notify when executing the declaration.

A defrauder substitutes his own version of a company's master file for the real one.This method of computer fraud is known as

Backing up files is not the same thing as ________ them.

The most sophisticated type of wire tapping is called ________.

Logic bombs are dormant pieces of code placed in programs for activation at a later date by a specific event.

Black hat hackers formally probe systems for legitimate purposes in order to help with security control procedures.

Accounting Information Systems: An Overview

Systems Techniques and Documentation

Ebusiness and Ecommerce

Transaction Processing and the Internal Control Process

Fraud Examination and Fraud Management

Electronic Data Processing Systems

Revenue Cycle Processes

Procurement and Human Resources Business Processes

The Production Business Process

Systems Planning, analysis, and Design

Systems Project Management, implementation, operation, control

Data Management Concepts

Auditing Information Technology

Filters