Question 1

Which phase of the system development life cycle includes determining user needs of the IT system?
A)Systems planning
B)Systems analysis
C)Systems design
D)Systems implementation

Accepted Answer

Systems analysis

Question 2

Which of the following steps within the systems implementation phase could not occur concurrently with other steps, but would occur at the end?
A)Employee training
B)Data conversion
C)Software programming
D)Post-implementation review

Accepted Answer

Post-implementation review

Question 3

A structure of relationships and processes to direct and control the enterprise in order to achieve the enterprise's goals by adding value while balancing risk versus return over IT and its processes is called:
A)IT Governance
B)Strategic Governance
C)Strategic Management
D)IT Management

Accepted Answer

IT Governance

Question 4

Within the systems analysis phase of the SDLC, which of the following data collection methods does not involve any feedback from users of the IT system?
A)Documentation review
B)Interviews using structured questions
C)Interviews using unstructured questions
D)Questionnaires

Accepted Answer

Documentation review

Question 5

Each of the following are methods for implementing a new application system except:
A)Direct cutover
B)Parallel
C)Pilot
D)Test

Accepted Answer

Test

Question 6

A request for proposal RFP) is used during the
A)Phase-in period
B)Purchase of software
C)Feasibility study
D)In-house design

Accepted Answer

Purchase of software C.D.

Question 7

The IT governance committee is made up of many different individuals within the organization.Which of the following would not be one of those individuals?
A)Chief Information Officer
B)Chief External Auditor
C)Chief Executive Officer
D)Top Managers from User Departments

Accepted Answer

Chief External Auditor

Question 8

The use of the SDLC for IT system changes is important for several reasons.Which of the following is not part of the purposes of the SDLC processes?
A)As a part of strategic management of the organization
B)As part of the internal control structure of the organization
C)As part of the audit of an IT system
D)As partial fulfillment of management's ethical obligations

Accepted Answer

As part of the audit of an IT system

Question 9

Which of the following feasibility aspects is an evaluation of whether the technology exists to meet the need identified in the proposed change to the IT system?
A)Technical feasibility
B)Operational feasibility
C)Economic feasibility
D)Schedule feasibility

Accepted Answer

Technical feasibility

Question 10

A retail store chain is developing a new integrated computer system for sales and inventories in its store locations.Which of the following implementation methods would involve the most risk?
A)Direct cutover
B)Phased-in implementation
C)Parallel running
D)Pilot testing

Accepted Answer

Direct cutover

Question 11

To fulfill the management obligations that are an integral part of IT governance, management need not focus on:
A)Aligning IT strategy with the business strategy
B)Hiring an acceptable IT manager
C)Measuring IT's performance
D)Insisting that an IT control framework be adopted and implemented

Accepted Answer

Hiring an acceptable IT manager

Question 12

IT governance includes all but which of the following responsibilities?
A)Aligning IT strategy with the business strategy
B)Writing programming code for IT systems
C)Insisting that an IT control framework be adopted and implemented
D)Measuring IT's performance

Accepted Answer

Writing programming code for IT systems

Question 13

Confidentiality of information is an ethical consideration for which of the following party or parties?
A)Management
B)Employees
C)Consultants
D)All of the above
TEST BANK - CHAPTER 5 - MULTIPLE CHOICE

Accepted Answer

All of the above

Question 14

Which of the following is not part of the system design phase of the SDLC?
A)Conceptual design
B)Evaluation and selection
C)Parallel operation
D)Detailed design

Accepted Answer

Parallel operation

Question 15

Which of the following is not one of the approaches used to achieve the management of an IT control framework?
A)Information Systems Audit and Control Association control objectives for IT
B)The International Organization for Standardization 17799, Code of Practice for Information Security Management
C)The Information Technology Infrastructure Library
D)Sarbanes-Oxley Act section on IT Controls

Accepted Answer

Sarbanes-Oxley Act section on IT Controls

Question 16

The process of determining the strategic vision for the organization, developing the long-term objectives, creating the strategies that will achieve the vision and objections, and implementing those strategies is referred to as:
A)IT Governance
B)Strategic Governance
C)Strategic Management
D)IT Management

Accepted Answer

Strategic Management

Question 17

The formal process that many organizations use to select, design, and implement IT systems is the:
A)Systems Development Life Cycle
B)Control Objectives for IT
C)Practice for Security Management
D)Information Technology Development

Accepted Answer

Systems Development Life Cycle

Question 18

OBIT is an acronym for which of the following?
A)Control Objectives for Business and Information Technology
B)Control Objectives for Information and related Technology
C)Center of Business and Informative Technology
D)Control Operations for Information Technology

Accepted Answer

Control Objectives for Business and Information Technology

Question 19

A group of senior managers selected to oversee the strategic management of IT is called:
A)IT Strategic Committee
B)IT Governance Committee
C)Chief Information Officer CIO)
D)IT Management

Accepted Answer

IT Governance Committee

Question 20

The purpose of the feasibility study is to assist in
A)Selecting software
B)Designing internal controls
C)Designing reports for the IT system
D)Prioritizing IT requested changes

Accepted Answer

Prioritizing IT requested changes

Quiz 5: IT Governance

Which phase of the system development life cycle includes determining user needs of the IT system?

Which of the following steps within the systems implementation phase could not occur concurrently with other steps, but would occur at the end?

A structure of relationships and processes to direct and control the enterprise in order to achieve the enterprise's goals by adding value while balancing risk versus return over IT and its processes is called:

Within the systems analysis phase of the SDLC, which of the following data collection methods does not involve any feedback from users of the IT system?

Each of the following are methods for implementing a new application system except:

A request for proposal RFP) is used during the

The IT governance committee is made up of many different individuals within the organization.Which of the following would not be one of those individuals?

The use of the SDLC for IT system changes is important for several reasons.Which of the following is not part of the purposes of the SDLC processes?

Which of the following feasibility aspects is an evaluation of whether the technology exists to meet the need identified in the proposed change to the IT system?

A retail store chain is developing a new integrated computer system for sales and inventories in its store locations.Which of the following implementation methods would involve the most risk?

To fulfill the management obligations that are an integral part of IT governance, management need not focus on:

IT governance includes all but which of the following responsibilities?

Confidentiality of information is an ethical consideration for which of the following party or parties?

Which of the following is not part of the system design phase of the SDLC?

Which of the following is not one of the approaches used to achieve the management of an IT control framework?

The process of determining the strategic vision for the organization, developing the long-term objectives, creating the strategies that will achieve the vision and objections, and implementing those strategies is referred to as:

The formal process that many organizations use to select, design, and implement IT systems is the:

OBIT is an acronym for which of the following?

A group of senior managers selected to oversee the strategic management of IT is called:

The purpose of the feasibility study is to assist in