Question 1

Certain duties that are deemed incompatible in a manual system may be combined in a computer-based information system environment.

Accepted Answer

In a computer-based information system, certain duties that were previously deemed incompatible in a manual system can be combined. This is because the system can automate tasks and distribute work more efficiently among employees, reducing the risk of conflicts or errors that may have occurred in a manual system. However, it is still important to consider factors such as segregation of duties and access controls to ensure proper security and prevent fraud.

Question 2

Transaction cost economics (TCE) theory suggests that firms should outsource specific noncore IT assets

Accepted Answer

Transaction cost economics (TCE) theory suggests that firms should make rather than buy (i.e., internally develop or maintain) when the transaction costs of outsourcing are high, which often applies to specific core IT assets rather than non-core IT assets.

Question 3

Specific IT assets support an organization's strategic objectives.

Accepted Answer

IT assets, such as hardware, software, and networks, can be leveraged to support an organization's strategic objectives, whether it's improving operational efficiency, enhancing customer experience, or expanding into new markets. These assets help organizations to achieve their goals by optimizing business processes, providing useful insights from data, and enabling innovation and flexibility. Therefore, it's essential to manage and maintain IT assets effectively to ensure they align with the organization's strategy and contribute to its success.

Question 4

RAID is the use of parallel disks that contain redundant elements of data and applications.

Accepted Answer

RAID (Redundant Array of Independent Disks) uses parallel disks that contain redundant elements of data and applications to ensure data availability, fault tolerance, and improved performance.

Question 5

A generally accepted advantage of IT outsourcing is improved security.

Accepted Answer

IT outsourcing does not necessarily guarantee improved security. Outsourcing can involve sharing sensitive data with third-party service providers who may not have the same level of security measures as the company, increasing the risk of data breaches and cyber attacks. Therefore, proper vetting and monitoring of outsourcing providers are crucial to ensure security standards are met.

Question 6

An often-cited benefit of IT outsourcing is improved core business performance.

Accepted Answer

IT outsourcing allows companies to focus on their core competencies and strategic initiatives, while leaving non-core functions such as IT management to an external provider. This can lead to improved efficiency, productivity, and profitability, ultimately enhancing the overall performance of the business.

Question 7

Distributed data processing places the control IT recourses under end users.

Accepted Answer

The answer of Distributed data processing places the control IT...

Question 8

Distributed data processing reduces the risk of operational inefficiencies.

Accepted Answer

The answer of Distributed data processing reduces the risk of...

Question 9

To ensure sound internal control, program coding and program processing should be separated.

Accepted Answer

Separating program coding and program processing helps to prevent errors and fraud, as it ensures that the individuals responsible for developing the program are different from those responsible for executing it.

Question 10

Commodity IT assets include such things are network management.

Accepted Answer

Network management is a commodity IT asset, as it is a commonly used technology used for managing and monitoring a network's performance and security.

Question 11

The database administrator should be separated from systems development.

Accepted Answer

Separation between database administration and systems development ensures that each role is performed by personnel with specialized skills and knowledge. It also helps to ensure objectivity and reduces the risk of conflicts of interest.

Question 12

To improve control and efficiency, new systems development and program maintenance should be performed by the same individual or group.

Accepted Answer

New systems development and program maintenance require different skill sets and expertise. It is beneficial to have different individuals or groups handle each task to ensure a fresh perspective and a thorough evaluation of the system's performance. This also allows for better quality control as errors or issues can be caught by a different set of eyes.

Question 13

Some systems professionals have unrestricted access to the organization's programs and data.

Accepted Answer

Some systems professionals, such as network administrators and database administrators, may require unrestricted access to the organization's programs and data in order to effectively perform their job duties. However, access should always be granted based on a need-to-know basis and should be monitored and controlled to minimize the risk of unauthorized access or data breaches.

Question 14

A database administrator is responsible for the receipt, storage, retrieval, and custody of data files.

Accepted Answer

The answer of A database administrator is responsible for the...

Question 15

Virtualization is the technology that unleased cloud computing.

Accepted Answer

Virtualization is the concept of creating a virtual environment or instance of something, such as a virtual machine or virtual server, that operates independently of the physical hardware. Cloud computing utilizes virtualization technology to deliver computing resources over the internet as a service. So, virtualization is a key aspect of cloud computing, making option A true.

Question 16

Commodity IT assets easily acquired in the marketplace and should be outsourced under the core competency theory.

Accepted Answer

The answer of Commodity IT assets easily acquired in the...

Question 17

To fulfill the segregation of duties control objective, computer processing functions (like authorization of credit and billing) are separated.

Accepted Answer

The answer of To fulfill the segregation of duties control...

Question 18

Fault tolerance is the ability of the system to continue operation when part of the system fails due to hardware failure, application program error, or operator error.

Accepted Answer

Fault tolerance is the ability of the system to keep functioning even if one or multiple components of the system fail due to any reason. It is an essential feature of many critical systems like aviation, healthcare, and financial services.

Question 19

An advantage of distributed data processing is that redundant tasks are greatly eliminated

Accepted Answer

Distributed data processing can actually lead to more redundancy in tasks and data storage, as data and processing tasks are often replicated across multiple nodes for reliability and fault tolerance.

Question 20

A disaster recovery plan is a comprehensive statement of all actions to be taken after a disaster.

Accepted Answer

A disaster recovery plan is a documented and detailed plan for responding to and recovering from a variety of potential disasters, including natural disasters, cyber attacks, and other disruptive events. It outlines the steps that must be taken to ensure the continuity of critical operations, the safety of personnel, and the preservation of vital data and resources.

Quiz 2: Auditing IT Governance Controls