Question 1

This type of input validation check assesses the critical fields in an input screen to make sure that a value is in those fields.

Accepted Answer

A) Field Check 
B) Completeness Check 
C) Range Check 
D) Limit Check

Question 2

There are a number of methods described that are intended to limit log-ins exclusively to authorized users.The only method that is foolproof is the biometric devices.

Accepted Answer

A) True 
 B)False

Question 3

The risk of an unauthorized user gaining access is likely to be a risk for which of the following areas?

Accepted Answer

A) Telecommuting workers 
B) Internet 
C) Wireless networks 
D) All of the above

Question 4

The responsibility of management to safeguard assets and funds entrusted to them by the owners of an organization is referred to as:

Accepted Answer

A) Stewardship Responsibility 
B) IT System Controls 
C) Application Controls 
D) Internal Controls

Question 5

It is necessary for students and accountants to understand the types of threats that may affect an accounting system, so that the threats can be avoided.

Accepted Answer

A) True 
 B)False

Question 6

AICPA Trust Principles describe five categories of IT risks and controls.Which of these five categories would be described by the statement, "The system is protected against unauthorized access"?

Accepted Answer

A) Security 
B) Confidentiality 
C) Processing integrity 
D) Availability

Question 7

Biometric devises use unique physical characteristics to identify users.The most common method used is retina scans.

Accepted Answer

A) True 
 B)False

Question 8

Which programmed input validation check determines whether the appropriate type of data, either alphabetic or numeric, was entered?

Accepted Answer

A) Completeness check 
B) Validity check 
C) Reasonableness check 
D) Field check

Question 9

Which programmed input validation makes sure that a value was entered in all of the critical fields?

Accepted Answer

A) Completeness check 
B) Validity check 
C) Reasonableness check 
D) Field check

Question 10

A software system that manages the interface between many users and the database is called:

Accepted Answer

A) Database security system 
B) Database management system 
C) Database binary monetary system 
D) Database assessment

Question 11

To the extent possible, IT systems should be installed in locations away from any location likely to be affected by natural disasters.

Accepted Answer

A) True 
 B)False

Question 12

The most popular type of type of unauthorized access is probably by a person known to the organization.

Accepted Answer

A) True 
 B)False

Question 13

The workstations and the network cabling and connections represent spots were an intruder could tap into the network for unauthorized access.

Accepted Answer

A) True 
 B)False

Question 14

The use of passwords to allow only authorized users to log into an IT system is an example of an application control.

Accepted Answer

A) True 
 B)False

Question 15

One of the sources of risk exposure related to telecommuting workers is that the company's network equipment and cabling becomes an entry point for hackers and unauthorized users.

Accepted Answer

A) True 
 B)False

Question 16

To avoid the risks associated with a public cloud, many companies establish their own computing cloud structure.The cloud is developed, owned, maintained, and used by the user company.This cloud is referred to as:

Accepted Answer

A) Company cloud 
B) User cloud 
C) Private cloud 
D) Internal cloud

Question 17

This should be established for every authorized user and determines each user's access level to hardware, software, and data according to the individual's job responsibilities.

Accepted Answer

A) User profile 
B) User password 
C) User ID 
D) User log

Question 18

Telecommuting workers cause two sources of risk exposures for their organizations - the network equipment and cabling in addition to the teleworker's computer - with only "entry-point" being teleworker's computer.

Accepted Answer

A) True 
 B)False

Question 19

Companies who provide mobile devices for employees, normally has a policy that allows the company's IT professional to remove company data and applications from the mobile device.This process is referred to as:

Accepted Answer

A) Cloud exchange 
B) Operations removal 
C) Data integrity 
D) Remove wipe

Question 20

To increase the effectiveness of login restrictions, passwords must be unique for each user.

Accepted Answer

A) True 
 B)False

Exam 4: Internal Controls and Risks in IT Systems

This type of input validation check assesses the critical fields in an input screen to make sure that a value is in those fields.

There are a number of methods described that are intended to limit log-ins exclusively to authorized users.The only method that is foolproof is the biometric devices.

The risk of an unauthorized user gaining access is likely to be a risk for which of the following areas?

The responsibility of management to safeguard assets and funds entrusted to them by the owners of an organization is referred to as:

It is necessary for students and accountants to understand the types of threats that may affect an accounting system, so that the threats can be avoided.

AICPA Trust Principles describe five categories of IT risks and controls.Which of these five categories would be described by the statement, "The system is protected against unauthorized access"?

Biometric devises use unique physical characteristics to identify users.The most common method used is retina scans.

Which programmed input validation check determines whether the appropriate type of data, either alphabetic or numeric, was entered?

Which programmed input validation makes sure that a value was entered in all of the critical fields?

A software system that manages the interface between many users and the database is called:

To the extent possible, IT systems should be installed in locations away from any location likely to be affected by natural disasters.

The most popular type of type of unauthorized access is probably by a person known to the organization.

The workstations and the network cabling and connections represent spots were an intruder could tap into the network for unauthorized access.

The use of passwords to allow only authorized users to log into an IT system is an example of an application control.

One of the sources of risk exposure related to telecommuting workers is that the company's network equipment and cabling becomes an entry point for hackers and unauthorized users.

To avoid the risks associated with a public cloud, many companies establish their own computing cloud structure.The cloud is developed, owned, maintained, and used by the user company.This cloud is referred to as:

This should be established for every authorized user and determines each user's access level to hardware, software, and data according to the individual's job responsibilities.

Telecommuting workers cause two sources of risk exposures for their organizations - the network equipment and cabling in addition to the teleworker's computer - with only "entry-point" being teleworker's computer.

Companies who provide mobile devices for employees, normally has a policy that allows the company's IT professional to remove company data and applications from the mobile device.This process is referred to as:

To increase the effectiveness of login restrictions, passwords must be unique for each user.