Question 1

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as segregation of duties.

Accepted Answer

A) True 
 B)False

Question 2

The segregation of duties control plan consists of separating all of the following event-processing functions except:

Accepted Answer

A)  planning events 
B)  authorizing events 
C)  executing events 
D)  recording events

Question 3

Sending out an e-mail pretending to be a legitimate business asking for information about a person's account is called:

Accepted Answer

A)  dumpster diving 
B)  phishing 
C)  smoozing 
D)  shoulder surfing

Question 4

Computer hacking and cracking is the intentional,unauthorized access to an organization's computer system,accomplished by bypassing the system's access security controls.

Accepted Answer

A) True 
 B)False

Question 5

The trust service principle of processing ______________________________ determines whether processing is complete,accurate,timely and authorized.

Accepted Answer

The answer of The trust service principle of processing ______________________________...

Question 6

The ______________________________ logs and monitors who is on or is trying to access the network.

Accepted Answer

The answer of The ______________________________ logs and monitors who is...

Question 7

Which of the following is not a strategic planning process?

Accepted Answer

A)  IT-related requirements to comply with industry,regulatory,legal,and contractual obligations,including privacy,transborder data flows,e-business,and insurance contracts. 
B)  Acquisition and development schedules for hardware,software,and application systems and for personnel and financial requirements. 
C)  Systems development life cycle adoption to ensure that comprehensive documentation is developed for each application. 
D)  An inventory of current IT capabilities.

Question 8

The IS function with the principal responsibilities of ensuring the security of all IT resources is data control.

Accepted Answer

A) True 
 B)False

Question 9

IT governance is a process that ensures that the organization's IT sustains and extends the organization's strategies and objectives.

Accepted Answer

A) True 
 B)False

Question 10

COBIT 5:

Accepted Answer

A)  shifts the center of attention from IT to governance. 
B)  can be implemented by updating from COBIT 4.1. 
C)  does not have the enablers used in COBIT 4.1 
D)  all of the above.

Question 11

The controlled access to data,programs,and documentation is a principal responsibility of which of the following functions?

Accepted Answer

A)  data control 
B)  data preparation (data entry) 
C)  data librarian 
D)  computer operator

Question 12

Program documentation provides a description of an application program and usually includes the program's purpose,program flowcharts,and source code listings.

Accepted Answer

A) True 
 B)False

Question 13

Which of the following has the responsibility to ensure the security of all IT resources?

Accepted Answer

A)  steering committee 
B)  security officer 
C)  CIO 
D)  systems development manager

Question 14

______________________________ is when an e-mail is sent pretending to be a legitimate business asking for information about your account.

Accepted Answer

The answer of ______________________________ is when an e-mail is sent...

Question 15

COBIT was developed by:

Accepted Answer

A)  COSO 
B)  IT Governance Institute 
C)  PCAOB 
D)  AICPA

Question 16

In an information systems organization,all of the following functions might logically report to the data center manager except:

Accepted Answer

A)  data control 
B)  computer operations 
C)  data librarian 
D)  quality assurance

Question 17

______________________________ helps to solve the problem posed by single key cryptography by employing a pair of matched keys for each system user,one private (i.e. ,known only to the party who possesses it)and one public.

Accepted Answer

The answer of ______________________________ helps to solve the problem posed...

Question 18

Which of the following has the responsibility of efficient and effective operation of IT?

Accepted Answer

A)  steering committee 
B)  security officer 
C)  CIO 
D)  systems development manager

Question 19

The ______________________________ covers the progression of information systems through the systems development process,from birth,through implementation,to ongoing use and modification.

Accepted Answer

The answer of The ______________________________ covers the progression of information...

Question 20

In a logic bomb attack,a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages,making it impossible for the attacked site to engage in its normal activities.

Accepted Answer

A) True 
 B)False

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as segregation of duties.

The segregation of duties control plan consists of separating all of the following event-processing functions except:

Sending out an e-mail pretending to be a legitimate business asking for information about a person's account is called:

Computer hacking and cracking is the intentional,unauthorized access to an organization's computer system,accomplished by bypassing the system's access security controls.

The trust service principle of processing ______________________________ determines whether processing is complete,accurate,timely and authorized.

The ______________________________ logs and monitors who is on or is trying to access the network.

Which of the following is not a strategic planning process?

The IS function with the principal responsibilities of ensuring the security of all IT resources is data control.

IT governance is a process that ensures that the organization's IT sustains and extends the organization's strategies and objectives.

COBIT 5:

The controlled access to data,programs,and documentation is a principal responsibility of which of the following functions?

Program documentation provides a description of an application program and usually includes the program's purpose,program flowcharts,and source code listings.

Which of the following has the responsibility to ensure the security of all IT resources?

______________________________ is when an e-mail is sent pretending to be a legitimate business asking for information about your account.

COBIT was developed by:

In an information systems organization,all of the following functions might logically report to the data center manager except:

______________________________ helps to solve the problem posed by single key cryptography by employing a pair of matched keys for each system user,one private (i.e. ,known only to the party who possesses it)and one public.

Which of the following has the responsibility of efficient and effective operation of IT?

The ______________________________ covers the progression of information systems through the systems development process,from birth,through implementation,to ongoing use and modification.

In a logic bomb attack,a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages,making it impossible for the attacked site to engage in its normal activities.