Question 1

The systematic steps undertaken to plan, prioritize, authorize, oversee, test, and implement large-scale changes to the IT system are called:

Accepted Answer

A) IT Governance System 
B) Operations Governance 
C) System Development Life Cycle 
D) Systems Analysis

Question 2

General controls in IT systems are divided into five broad categories.Which of the following is NOT one of those categories?

Accepted Answer

A) Authentication of uses and limiting unauthorized access 
B) Output controls 
C) Organization structure 
D) Physical environment and physical security of the system.

Question 3

The longer the encryption key is bits, the more difficult it will be to break the code.

Accepted Answer

A) True 
 B)False

Question 4

An extra digit added to a coded identification number, determined by a mathematical algorithm is called a:

Accepted Answer

A) Coded Digit Check 
B) Self-Checking Digit Check 
C) Sequence Check 
D) Run to Run Check

Question 5

Once an organization has set up an effective system to prevent unauthorized access to the IT system, it is not necessary to continually monitor the vulnerability of that system.

Accepted Answer

A) True 
 B)False

Question 6

Risks associated with public cloud computing include all of the following, except:

Accepted Answer

A) Security 
B) Availability 
C) Processing Integrity 
D) Scalability

Question 7

This type of control is intended to help ensure the accuracy, completeness, and security of outputs that result from application processing:

Accepted Answer

A) Input Controls 
B) Internal Controls 
C) Processing Controls 
D) Output Controls

Question 8

An IT governance committee has several responsibilities.Which of the following is least likely to be a responsibility of the IT governance committee?

Accepted Answer

A) Develop and maintain the database and ensure adequate controls over the database. 
B) Develop, monitor, and review security policies. 
C) Oversee and prioritize changes to IT systems. 
D) Align IT investments to business strategy.

Question 9

A database is often less open to unauthorized access than the physical, paper records, because the database has fewer access points.

Accepted Answer

A) True 
 B)False

Question 10

Discussing the strength of encryption refers to how difficult it would be to break the code.

Accepted Answer

A) True 
 B)False

Question 11

Public and Private cloud computing both have the benefits of reduced infrastructure and reduced costs.

Accepted Answer

A) True 
 B)False

Question 12

This type of software should be used to avoid destruction of data programs and to maintain operation of the IT system.It continually scans the system for viruses and worms and either deletes or quarantines them.

Accepted Answer

A) Penicillin Software 
B) Antivirus Software 
C) Infection Software 
D) Internet Software

Question 13

Encryption is more important for dial-up networks than for wireless networks.

Accepted Answer

A) True 
 B)False

Question 14

The software that controls the basic input and output activities of the computer are called:

Accepted Answer

A) Operating System 
B) Application Software 
C) Data Base Management System 
D) Electronic Data Interchange

Question 15

The group of controls referred to as Source Document Controls does not include form design.

Accepted Answer

A) True 
 B)False

Question 16

It is important for accountants to consider possible threats to the IT system and to know how to implement controls to try to prevent those threats from becoming reality.

Accepted Answer

A) True 
 B)False

Question 17

A group of LANs connected to each other to cover a wider geographic area is called a:

Accepted Answer

A) Connected local network 
B) Wide area network 
C) Connected wide area 
D) Wide geographic network

Question 18

It is proper that the database administrator develop and write programs.

Accepted Answer

A) True 
 B)False

Question 19

This encryption method, used with wireless network equipment, is symmetric in that both the sending and receiving network nodes must use the same encryption key.It has been proven to be susceptible to hacking.

Accepted Answer

A) Wired Equivalency Privacy WEP) 
B) Wired Encryption Policy WEP) 
C) Wireless Protection Access WP
A)  
D) Wired Privacy Authentication WP
A)

Question 20

A validity check is an example of an input application control.

Accepted Answer

A) True 
 B)False

Exam 4: Internal Controls and Risks in IT Systems

The systematic steps undertaken to plan, prioritize, authorize, oversee, test, and implement large-scale changes to the IT system are called:

General controls in IT systems are divided into five broad categories.Which of the following is NOT one of those categories?

The longer the encryption key is bits, the more difficult it will be to break the code.

An extra digit added to a coded identification number, determined by a mathematical algorithm is called a:

Once an organization has set up an effective system to prevent unauthorized access to the IT system, it is not necessary to continually monitor the vulnerability of that system.

Risks associated with public cloud computing include all of the following, except:

This type of control is intended to help ensure the accuracy, completeness, and security of outputs that result from application processing:

An IT governance committee has several responsibilities.Which of the following is least likely to be a responsibility of the IT governance committee?

A database is often less open to unauthorized access than the physical, paper records, because the database has fewer access points.

Discussing the strength of encryption refers to how difficult it would be to break the code.

Public and Private cloud computing both have the benefits of reduced infrastructure and reduced costs.

This type of software should be used to avoid destruction of data programs and to maintain operation of the IT system.It continually scans the system for viruses and worms and either deletes or quarantines them.

Encryption is more important for dial-up networks than for wireless networks.

The software that controls the basic input and output activities of the computer are called:

The group of controls referred to as Source Document Controls does not include form design.

It is important for accountants to consider possible threats to the IT system and to know how to implement controls to try to prevent those threats from becoming reality.

A group of LANs connected to each other to cover a wider geographic area is called a:

It is proper that the database administrator develop and write programs.

This encryption method, used with wireless network equipment, is symmetric in that both the sending and receiving network nodes must use the same encryption key.It has been proven to be susceptible to hacking.

A validity check is an example of an input application control.