Question 1

The disaster recovery strategy known as a(n) ______________________________ is a fully equipped data center that is made available on a standby basis to client companies for a monthly subscriber's fee.

Accepted Answer

The answer of The disaster recovery strategy known as a(n)...

Question 2

______________________________ is a policy of requiring an employee to take leave from the job and substituting another employee in his or her place.

Accepted Answer

The answer of ______________________________ is a policy of requiring an...

Question 3

The most common biometric devices read ______________________________.

Accepted Answer

The answer of The most common biometric devices read ______________________________....

Question 4

A facility usually comprised of air-conditioned space with a raised floor, telephone connections, and computer ports, into which a subscriber can move equipment, is called a hot site.

Accepted Answer

A) True 
 B)False

Question 5

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as ______________________________.

Accepted Answer

The answer of Combining the functions of authorizing and executing...

Question 6

The ______________________________ coordinates the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Accepted Answer

The answer of The ______________________________ coordinates the organizational and IT...

Question 7

______________________________ controls provide assurance that all modifications to programs are authorized and documented, and that the changes are completed, tested, and properly implemented.

Accepted Answer

The answer of ______________________________ controls provide assurance that all modifications...

Question 8

A key control concern is that certain people within an organization have easy access to applications programs and data files. The people are:

Accepted Answer

A)  data librarians 
B)  systems programmers 
C)  systems development 
D)  data center managers

Question 9

The IS function with the principal responsibilities of ensuring the security of all IT resources is data control.

Accepted Answer

A) True 
 B)False

Question 10

A control plan that is designed to detect a fraud by having one employee periodically do the job of another employee is called:

Accepted Answer

A)  segregation of duties 
B)  forced vacations 
C)  periodic audits 
D)  management control

Question 11

In an online environment, ______________________________ ensures that only authorized users gain access to a system through a process of identification (e.g., a unique account number for each user) and authentication.

Accepted Answer

The answer of In an online environment, ______________________________ ensures that...

Question 12

Which of the following controls restrict access to programs, data, and documentation?

Accepted Answer

A)  library controls 
B)  password controls 
C)  authentication controls 
D)  program change controls

Question 13

Top security concerns reported by IT security professionals include all the following except:

Accepted Answer

A)  data breaches 
B)  cyber crimes and cyber attacks 
C)  data backup 
D)  workforce mobility

Question 14

______________________________ controls restrict access to data, programs and documentation.

Accepted Answer

The answer of ______________________________ controls restrict access to data, programs...

Question 15

______________________________ are particularly important because they operate across all business processes and affect a company's capability to meet a multitude of control goals.

Accepted Answer

The answer of ______________________________ are particularly important because they operate...

Question 16

______________________________ are documents that help users learn their jobs and perform consistently in those jobs.

Accepted Answer

The answer of ______________________________ are documents that help users learn...

Question 17

Application documentation that describes the application and contains instructions for preparing inputs and using outputs is a(n):

Accepted Answer

A)  operations run manual 
B)  user manual 
C)  program documentation 
D)  systems documentation

Question 18

The use of IT resources for enterprise systems and e-business:

Accepted Answer

A)  magnifies the importance of protecting the resources both within and outside of the organization from risks 
B)  magnifies the importance of protecting the resources both within but not outside the of the organization from risks 
C)  makes it easier to provide internal control risk when IT resources are interlinked 
D)  none of the above

Question 19

______________________________ in an internal control system means assessment by management to determine whether the control plans in place are continuing to function appropriately over time.

Accepted Answer

The answer of ______________________________ in an internal control system means...

Question 20

Top 10 management concerns about IT's capability to support an organization's vision and strategy include all except the following:

Accepted Answer

A)  decline in IT investments during recession 
B)  overall security of IT assets 
C)  the Internet 
D)  need for project management leadership

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls