Question 1

______________________________ is a policy of requiring an employee to take leave from the job and substituting another employee in his or her place.

Accepted Answer

The answer of ______________________________ is a policy of requiring an...

Question 2

Top 10 management concerns about IT's capability to support an organization's vision and strategy include all except the following:

Accepted Answer

A) IT and business alignment 
B) security and privacy 
C) the Internet 
D) retaining IT professionals

Question 3

The ___________________________________ actively blocks unauthorized traffic using rules specified by an organization.

Accepted Answer

The answer of The ___________________________________ actively blocks unauthorized traffic using...

Question 4

The control concern that there will be a high risk of data conversion errors relates primarily to which of the following information systems functions?

Accepted Answer

A) data control 
B) data entry 
C) data librarian 
D) database administration

Question 5

The IS function with the principal responsibilities of insuring the security of all information systems function resources is data control.

Accepted Answer

A) True 
 B)False

Question 6

In an online environment, ________________________ ensures that only authorized users gain access to a system through a process of identification (e.g., a unique account number for each user) and authentication.

Accepted Answer

The answer of In an online environment, ________________________ ensures that...

Question 7

Personnel development control plans consist of each of the following except:

Accepted Answer

A) checking employment references 
B) providing sufficient and timely training 
C) supporting employee educational interests and pursuits 
D) performing scheduled evaluations

Question 8

Copies of important stored data, programs, and documentation made periodically are called ____________________.

Accepted Answer

The answer of Copies of important stored data, programs, and...

Question 9

From the standpoint of achieving the operations system control goal of security of resources, which of the following segregation of duties possibilities is least important?

Accepted Answer

A) between systems programming and computer operations 
B) between data control and data preparation personnel 
C) between systems development and computer operators 
D) between technical services and data center

Question 10

A clerk receives checks and customer receipts in the mail.He endorses the checks, fills out the deposit slip, and posts the checks to the cash receipts events data.The clerk is exercising which functions?

Accepted Answer

A) recording and executing events 
B) authorizing and executing events 
C) recording and authorizing events 
D) safeguarding of resources and authorizing events

Question 11

The disaster backup and recovery technique known as electronic vaulting is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

Accepted Answer

A) True 
 B)False

Question 12

Computer software that is used to facilitate the execution of a given business process is called ___________________________________.

Accepted Answer

The answer of Computer software that is used to facilitate...

Question 13

Data in all their forms that are input, processed, and output by information system are called this IT resource:

Accepted Answer

A) Information 
B) Applications 
C) Infrastructure 
D) People

Question 14

With continuous data protection (CDP) all data changes are data stamped and saved to secondary systems as the changes are happening.

Accepted Answer

A) True 
 B)False

Question 15

The functions of the ______________________________ commonly include assigning passwords and making sure the IT organization is secure from physical threats.

Accepted Answer

The answer of The functions of the ______________________________ commonly include...

Question 16

A facility usually comprised of air-conditioned space with a raised floor, telephone connections, and computer ports, into which a subscriber can move equipment, is called a hot site.

Accepted Answer

A) True 
 B)False

Question 17

A control plan that is designed to detect a fraud by having one employee periodically do the job of another employee is called :

Accepted Answer

A) segregation of duties 
B) forced vacations 
C) periodic audits 
D) management control

Question 18

Instructions for computer setup, required data, restart procedures, and error messages are typically contained in a(n):

Accepted Answer

A) systems development standards manual 
B) program documentation manual 
C) operations run manual 
D) application documentation manual

Question 19

The ______________________ is charged with safeguarding the IT organization.

Accepted Answer

The answer of The ______________________ is charged with safeguarding the...

Question 20

A facility usually comprised of air-conditioned space with a raised floor, telephone connections, and computer ports, into which a subscriber can move equipment, is called a(n) ____________________.

Accepted Answer

The answer of A facility usually comprised of air-conditioned space...

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

______________________________ is a policy of requiring an employee to take leave from the job and substituting another employee in his or her place.

Top 10 management concerns about IT's capability to support an organization's vision and strategy include all except the following:

The ___________________________________ actively blocks unauthorized traffic using rules specified by an organization.

The control concern that there will be a high risk of data conversion errors relates primarily to which of the following information systems functions?

The IS function with the principal responsibilities of insuring the security of all information systems function resources is data control.

In an online environment, ________________________ ensures that only authorized users gain access to a system through a process of identification (e.g., a unique account number for each user) and authentication.

Personnel development control plans consist of each of the following except:

Copies of important stored data, programs, and documentation made periodically are called ____________________.

From the standpoint of achieving the operations system control goal of security of resources, which of the following segregation of duties possibilities is least important?

A clerk receives checks and customer receipts in the mail.He endorses the checks, fills out the deposit slip, and posts the checks to the cash receipts events data.The clerk is exercising which functions?

The disaster backup and recovery technique known as electronic vaulting is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

Computer software that is used to facilitate the execution of a given business process is called ___________________________________.

Data in all their forms that are input, processed, and output by information system are called this IT resource:

With continuous data protection (CDP) all data changes are data stamped and saved to secondary systems as the changes are happening.

The functions of the ______________________________ commonly include assigning passwords and making sure the IT organization is secure from physical threats.

A facility usually comprised of air-conditioned space with a raised floor, telephone connections, and computer ports, into which a subscriber can move equipment, is called a hot site.

A control plan that is designed to detect a fraud by having one employee periodically do the job of another employee is called :

Instructions for computer setup, required data, restart procedures, and error messages are typically contained in a(n) :

The ______________________ is charged with safeguarding the IT organization.

A facility usually comprised of air-conditioned space with a raised floor, telephone connections, and computer ports, into which a subscriber can move equipment, is called a(n) ____________________.