Question 1

A policy:

Accepted Answer

A)  is a plan or process put in place to guide actions and achieve goals. 
B)  can compel behavior and enforce penalties for failure to follow. 
C)  can be used to prevent fraud in an organization. 
D)  all of the above.

Question 2

The first list below contains 10 control plans discussed in Chapter 8.The second list describes 10 system failures that have control implications.
Required:
On the answer line to the left of each system failure,insert the capital letter from the first list of the best control plan to prevent the system failure from occurring.(If you can't find a control that will prevent the failure,then choose a detective or corrective control plan).A letter should be used only once.

Accepted Answer

The answer of The first list below contains 10 control...

Question 3

Specifications for availability,reliability,performance,capacity for growth,levels of user support,disaster recovery,security,minimal system functionality,and service charges are included in:

Accepted Answer

A)  application documentation 
B)  service-level requirements 
C)  business continuity plan 
D)  security plan

Question 4

An intrusion-detection systems (IDS)logs and monitors who is on or trying to access the network.

Accepted Answer

A) True 
 B)False

Question 5

Listed below are several pervasive control plans discussed in Chapter 8.On the blank line to the left of each control plan,insert a "P" (preventive),"D" (detective),or "C" (corrective)to best classify that control.If applicable,more than one code may be inserted for each plan.

Accepted Answer

The answer of Listed below are several pervasive control plans...

Question 6

Which of the following statements related to denial of service attacks is false?

Accepted Answer

A)  Insurance is available to offset the losses suffered by denial of service attacks. 
B)  A denial of service attack is designed to overwhelm a Web site,making it incapable of performing normal functions. 
C)  Web sites can employ filters to sense multiple messages from a single site. 
D)  The most effective attacks originate from a small cluster of computers in a remote geographic region.

Question 7

Program change controls provide assurance that all modifications to programs are authorized and documented,and that the changes are completed,tested,and properly implemented.

Accepted Answer

A) True 
 B)False

Question 8

According to COBIT,IT resources must be managed by IT control processes to ensure that an organization has the information it needs to achieve its objectives.

Accepted Answer

A) True 
 B)False

Question 9

______________________________ is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

Accepted Answer

The answer of ______________________________ is a service whereby data changes...

Question 10

A mechanism by which a company is reimbursed for any loss that occurs when an employee commits fraud is called a:

Accepted Answer

A)  segregation of duties 
B)  fidelity bond 
C)  personnel planning control 
D)  termination control plan

Question 11

The control concern that there will be a high risk of data conversion errors relates primarily to which of the following information systems functions?

Accepted Answer

A)  data control 
B)  data entry 
C)  data librarian 
D)  database administration

Question 12

______________________________ is a policy of requiring an employee to take leave from the job and substituting another employee in his or her place.

Accepted Answer

The answer of ______________________________ is a policy of requiring an...

Question 13

A facility usually comprised of air-conditioned space with a raised floor,telephone connections,and computer ports,into which a subscriber can move equipment,is called a(n)______________________________.

Accepted Answer

The answer of A facility usually comprised of air-conditioned space...

Question 14

The department or function that develops and operates an organization's information systems is often called the:

Accepted Answer

A)  information systems organization 
B)  computer operations department 
C)  controller's office 
D)  computer technology branch

Question 15

The functions of the security officer commonly include assigning passwords and working with human resources to ensure proper interview practices are conducted during the hiring process.

Accepted Answer

A) True 
 B)False

Question 16

Which of the following has the major duties of prioritizing and selecting IT projects and resources?

Accepted Answer

A)  steering committee 
B)  security officer 
C)  CIO 
D)  systems development manager

Question 17

In an information systems organizational structure,the function of ____ is the central point from which to control data and is a central point of vulnerability.

Accepted Answer

A)  data control 
B)  data entry 
C)  data librarian 
D)  database administration

Question 18

The function composed of people,procedures,and equipment and is typically called the information systems department,IS department,or the IT department is the information systems organization.

Accepted Answer

A) True 
 B)False

Question 19

Periodic cleaning,testing,and adjusting of computer equipment is referred to as ______________________________.

Accepted Answer

The answer of Periodic cleaning,testing,and adjusting of computer equipment is...

Question 20

Top security concerns reported by IT security professionals include all the following except:

Accepted Answer

A)  data breaches 
B)  cyber crimes and cyber attacks 
C)  data backup 
D)  workforce mobility

Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

A policy:

Specifications for availability,reliability,performance,capacity for growth,levels of user support,disaster recovery,security,minimal system functionality,and service charges are included in:

An intrusion-detection systems (IDS)logs and monitors who is on or trying to access the network.

Listed below are several pervasive control plans discussed in Chapter 8.On the blank line to the left of each control plan,insert a "P" (preventive),"D" (detective),or "C" (corrective)to best classify that control.If applicable,more than one code may be inserted for each plan.

Which of the following statements related to denial of service attacks is false?

Program change controls provide assurance that all modifications to programs are authorized and documented,and that the changes are completed,tested,and properly implemented.

According to COBIT,IT resources must be managed by IT control processes to ensure that an organization has the information it needs to achieve its objectives.

______________________________ is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

A mechanism by which a company is reimbursed for any loss that occurs when an employee commits fraud is called a:

The control concern that there will be a high risk of data conversion errors relates primarily to which of the following information systems functions?

______________________________ is a policy of requiring an employee to take leave from the job and substituting another employee in his or her place.

A facility usually comprised of air-conditioned space with a raised floor,telephone connections,and computer ports,into which a subscriber can move equipment,is called a(n)______________________________.

The department or function that develops and operates an organization's information systems is often called the:

The functions of the security officer commonly include assigning passwords and working with human resources to ensure proper interview practices are conducted during the hiring process.

Which of the following has the major duties of prioritizing and selecting IT projects and resources?

In an information systems organizational structure,the function of ____ is the central point from which to control data and is a central point of vulnerability.

The function composed of people,procedures,and equipment and is typically called the information systems department,IS department,or the IT department is the information systems organization.

Periodic cleaning,testing,and adjusting of computer equipment is referred to as ______________________________.

Top security concerns reported by IT security professionals include all the following except: