Question 1

Within the data center, the data control group is responsible for routing all work into and out of the data center, correcting errors, and monitoring error correction.

Accepted Answer

A) True 
 B)False

Question 2

As an IT resource, information includes data in all their forms that are input, processed and output by information systems.

Accepted Answer

A) True 
 B)False

Question 3

The ___________________________________logs and monitors who is on or is trying to access the network.

Accepted Answer

The answer of The ___________________________________logs and monitors who is on...

Question 4

______________________________ is the intentional unauthorized access of an organization's computer system, accomplished by bypassing the system's access security controls.

Accepted Answer

The answer of ______________________________ is the intentional unauthorized access of...

Question 5

The ___________________________________ coordinates the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Accepted Answer

The answer of The ___________________________________ coordinates the organizational and IT...

Question 6

Systems documentation provides an overall description of the application, including the system's purpose; an overview of system procedures; and sample source documents, outputs, and reports.

Accepted Answer

A) True 
 B)False

Question 7

The system of controls used in this text consists of the control environment, pervasive control plans, IT general controls, and business process (and application) control plans.

Accepted Answer

A) True 
 B)False

Question 8

Application controls restrict access to data, programs, and documentation.

Accepted Answer

A) True 
 B)False

Question 9

Within the data center, the data librarian function grants access to programs, data, and documentation to authorized personnel only.

Accepted Answer

A) True 
 B)False

Question 10

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

Accepted Answer

A) True 
 B)False

Question 11

Business continuity planning is the process that identifies events that may threaten an organization and provide a framework whereby the organization will continue to operate or resume operations with a minimum of disruption.

Accepted Answer

A) True 
 B)False

Question 12

The function composed of people, procedures, and equipment that is typically called the information systems department, IS department, or the IT department is the information systems organization.

Accepted Answer

A) True 
 B)False

Question 13

In a logic bomb attack, a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages, making it impossible for the attacked site to engage in its normal activities.

Accepted Answer

A) True 
 B)False

Question 14

Which of the following statements related to denial of service attacks is false?

Accepted Answer

A) Insurance is available to offset the losses suffered by denial of service attacks. 
B) A denial of service attack is designed to overwhelm a web site, making it incapable of performing normal functions. 
C) Web sites can employ filters to sense multiple messages from a single site. 
D) The most effective attacks originate from a small cluster of computers in a remote geographic region.

Question 15

Continuity is the process of using backup measures to restore lost data and resume operations.

Accepted Answer

A) True 
 B)False

Question 16

Program documentation provides a description of an application computer program and usually includes the program's purpose, program flowcharts, and source code listings.

Accepted Answer

A) True 
 B)False

Question 17

The ______________________________ maintains custody of and controls access to programs,
files, and documentation.

Accepted Answer

The answer of The ______________________________ maintains custody of and controls...

Question 18

A warehouse clerk manually completing an order document and forwarding it to purchasing for approval is an example of:

Accepted Answer

A) authorizing events 
B) executing events 
C) recording events 
D) safeguarding resources

Question 19

Access control software ensures that only authorized users gain access to a system through a process
of identification and authentication.

Accepted Answer

A) True 
 B)False

Question 20

The _________________________ describes user procedures for an application and assists the user in preparing inputs and using outputs.

Accepted Answer

The answer of The _________________________ describes user procedures for an...

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

Within the data center, the data control group is responsible for routing all work into and out of the data center, correcting errors, and monitoring error correction.

As an IT resource, information includes data in all their forms that are input, processed and output by information systems.

The ___________________________________logs and monitors who is on or is trying to access the network.

______________________________ is the intentional unauthorized access of an organization's computer system, accomplished by bypassing the system's access security controls.

The ___________________________________ coordinates the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Systems documentation provides an overall description of the application, including the system's purpose; an overview of system procedures; and sample source documents, outputs, and reports.

The system of controls used in this text consists of the control environment, pervasive control plans, IT general controls, and business process (and application) control plans.

Application controls restrict access to data, programs, and documentation.

Within the data center, the data librarian function grants access to programs, data, and documentation to authorized personnel only.

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

Business continuity planning is the process that identifies events that may threaten an organization and provide a framework whereby the organization will continue to operate or resume operations with a minimum of disruption.

The function composed of people, procedures, and equipment that is typically called the information systems department, IS department, or the IT department is the information systems organization.

In a logic bomb attack, a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages, making it impossible for the attacked site to engage in its normal activities.

Which of the following statements related to denial of service attacks is false?

Continuity is the process of using backup measures to restore lost data and resume operations.

Program documentation provides a description of an application computer program and usually includes the program's purpose, program flowcharts, and source code listings.

The ______________________________ maintains custody of and controls access to programs, files, and documentation.

A warehouse clerk manually completing an order document and forwarding it to purchasing for approval is an example of:

Access control software ensures that only authorized users gain access to a system through a process of identification and authentication.

The _________________________ describes user procedures for an application and assists the user in preparing inputs and using outputs.