Question 1

Approving a customer credit purchase would be an example of which basic events processing function?

Accepted Answer

A)   authorizing events
B)   executing events
C)   recording events
D)   safeguarding resources A

Question 2

The segregation of duties control plan consists of separating all of the following event-processing functions except:

Accepted Answer

A)   planning events
B)   authorizing events
C)   executing events
D)   recording events A

Question 3

A warehouse clerk manually completing an order document and forwarding it to purchasing for approval is an example of:

Accepted Answer

A)   authorizing events
B)   executing events
C)   recording events
D)   safeguarding resources B

Question 4

The ______________________________ covers the progression of information systems through the systems development process, from birth, through implementation, to ongoing use and modification.

Accepted Answer

The answer of The ______________________________ covers the progression of information...

Question 5

The site that maintains copies of a primary computing site's programs and data is a(n) ______________________________ site.

Accepted Answer

The answer of The site that maintains copies of a...

Question 6

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as segregation of duties.

Accepted Answer

A) True 
 B)False

Question 7

Biometric identification systems identify authorized personnel through some unique physical trait such as fingers, hands, voice, eyes, face, or writing dynamics.

Accepted Answer

A) True 
 B)False

Question 8

Threat monitoring is a technique to protect one network from another "untrusted" network.

Accepted Answer

A) True 
 B)False

Question 9

From the standpoint of achieving the operations system control goal of security of resources, which of the following segregation of duties possibilities is least important?

Accepted Answer

A)   between systems programming and computer operations
B)   between data control and data preparation personnel
C)   between systems development and computer operators
D)   between technical services and data center

Question 10

The function composed of people, procedures, and equipment and is typically called the information systems department, IS department, or IT department is the ______________________________.

Accepted Answer

The answer of The function composed of people, procedures, and...

Question 11

The policy of requiring an employee to alternate jobs periodically is known as forced vacations.

Accepted Answer

A) True 
 B)False

Question 12

Management should establish a(n) ______________________________ plan and implement related activities, including reviews, audits, and inspections, to ensure the attainment of IT customer requirements.

Accepted Answer

The answer of Management should establish a(n) ______________________________ plan and...

Question 13

Sending out an e-mail pretending to be a legitimate business asking for information about a person's account is called:

Accepted Answer

A)   dumpster diving
B)   phishing
C)   smoozing
D)   shoulder surfing

Question 14

A warehouse supervisor prepares a sales order listing items to be shipped to a customer and then signs it approving the removal of the items from the warehouse. The supervisor is performing which functions?

Accepted Answer

A)   authorizing events and safeguarding of resources
B)   executing and recording events
C)   authorizing and executing events
D)   authorizing and recording events

Question 15

A policy:

Accepted Answer

A)   is a plan or process put in place to guide actions and achieve goals.
B)   can compel behavior and enforce penalties for failure to follow.
C)   can be used to prevent fraud in an organization.
D)   all of the above.

Question 16

Instructions for computer setup, required data, restart procedures, and error messages are typically contained in a(n):

Accepted Answer

A)   systems development standards manual
B)   program documentation manual
C)   operations run manual
D)   application documentation manual

Question 17

______________________________ is a process that ensures that the enterprise's IT sustains and extends the organization's strategies and objectives.

Accepted Answer

The answer of ______________________________ is a process that ensures that...

Question 18

Which of the following has the major duties of prioritizing and selecting IT projects and resources?

Accepted Answer

A)   steering committee
B)   security officer
C)   CIO
D)   systems development manager

Question 19

The disaster backup and recovery technique known as electronic vaulting is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

Accepted Answer

A) True 
 B)False

Question 20

Match between columns
                        Premises: Issues programs, data, and documentation to authorized users...
Manages physical security and logical security...
Delivers cost-effective, bug-free applications..
Prioritizes and selects IT projects and resources.
Routes all work into and out of the data center, correct errors, and monitor all error correction...
Manages functional units such as networks, CAD/CAM and systems programming...
Prepares input for computer processing...
Modifies and adapts systems software including operating systems and various utility routines...
Plans IT acquisition and development...
Conducts reviews to determine adherence to IT standards and procedures and achievement of IT objectives...

Accepted Answer

The Answer of Data control. and Systems programming and Security is...

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

Approving a customer credit purchase would be an example of which basic events processing function?

The segregation of duties control plan consists of separating all of the following event-processing functions except:

A warehouse clerk manually completing an order document and forwarding it to purchasing for approval is an example of:

The ______________________________ covers the progression of information systems through the systems development process, from birth, through implementation, to ongoing use and modification.

The site that maintains copies of a primary computing site's programs and data is a(n) ______________________________ site.

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as segregation of duties.

Biometric identification systems identify authorized personnel through some unique physical trait such as fingers, hands, voice, eyes, face, or writing dynamics.

Threat monitoring is a technique to protect one network from another "untrusted" network.

From the standpoint of achieving the operations system control goal of security of resources, which of the following segregation of duties possibilities is least important?

The function composed of people, procedures, and equipment and is typically called the information systems department, IS department, or IT department is the ______________________________.

The policy of requiring an employee to alternate jobs periodically is known as forced vacations.

Management should establish a(n) ______________________________ plan and implement related activities, including reviews, audits, and inspections, to ensure the attainment of IT customer requirements.

Sending out an e-mail pretending to be a legitimate business asking for information about a person's account is called:

A warehouse supervisor prepares a sales order listing items to be shipped to a customer and then signs it approving the removal of the items from the warehouse. The supervisor is performing which functions?

A policy:

Instructions for computer setup, required data, restart procedures, and error messages are typically contained in a(n) :

______________________________ is a process that ensures that the enterprise's IT sustains and extends the organization's strategies and objectives.

Which of the following has the major duties of prioritizing and selecting IT projects and resources?

The disaster backup and recovery technique known as electronic vaulting is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

place the capital letter of the functional title that best matches the duties and responsibilities described. Do not use a letter more than once.