Question 1

______________________________ is a process that employs mathematical algorithms and encryption keys to encode data (i.e. ,change un-encoded data,called plaintext,to a coded text form,called ciphertext)so that it is unintelligible.

Accepted Answer

The answer of ______________________________ is a process that employs mathematical...

Question 2

Protecting resources against environmental hazards might include all of the following control plans except:
A) fire alarms and smoke detectors
B) waterproof ceilings
C) voltage regulators
D) rotation of duties

Accepted Answer

Rotation of duties is a control plan primarily used for reducing fraud and errors in processes, not for protecting resources against environmental hazards. Fire alarms, waterproof ceilings, and voltage regulators are all direct measures to protect against specific environmental risks such as fire, water damage, and electrical surges, respectively.

Question 3

______________________________ is a process that ensures that the enterprise's IT sustains and extends the organization's strategies and objectives.

Accepted Answer

The answer of ______________________________ is a process that ensures that...

Question 4

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls,commonly called ______________________________.

Accepted Answer

The answer of A small organization that does not have...

Question 5

Management should establish a(n)______________________________ plan and implement related activities,including reviews,audits,and inspections,to ensure the attainment of IT customer requirements.

Accepted Answer

The answer of Management should establish a(n)______________________________ plan and implement...

Question 6

______________________________ in an internal control system means assessment by management to determine whether the control plans in place are continuing to function appropriately over time.

Accepted Answer

The answer of ______________________________ in an internal control system means...

Question 7

______________________________ controls provide assurance that all modifications to programs are authorized and documented,and that the changes are completed,tested,and properly implemented.

Accepted Answer

The answer of ______________________________ controls provide assurance that all modifications...

Question 8

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as ______________________________.

Accepted Answer

The answer of Combining the functions of authorizing and executing...

Question 9

Segregation of duties consists of separating the four functions of authorizing events,______________________________ events,______________________________ events,and safeguarding the resources resulting from consummating the events.

Accepted Answer

The answer of Segregation of duties consists of separating the...

Question 10

The ______________________________ group is responsible for routing all work in to and out of the data center,correcting errors,and monitoring all error correction.

Accepted Answer

The answer of The ______________________________ group is responsible for routing...

Question 11

One method for circumventing segregation of duties is ______________________________ between one or more persons (or departments)to exploit a system and conceal an abuse such as fraud.

Accepted Answer

The answer of One method for circumventing segregation of duties...

Question 12

The trust service principle of processing ______________________________ determines whether processing is complete,accurate,timely and authorized.

Accepted Answer

The answer of The trust service principle of processing ______________________________...

Question 13

Searching through rubbish for system information such as passwords is called:
A) scavenging
B) phishing
C) smoozing
D) shoulder surfing

Accepted Answer

Scavenging involves going through rubbish or discarded material to find valuable information. Phishing is the act of tricking someone into revealing their sensitive information such as passwords through fraudulent communication. Smoozing is a social tactic of getting on someone's good side to gain their favor or cooperation. Shoulder surfing is the act of looking over someone's shoulder to obtain sensitive information.

Question 14

The ______________________________ is charged with safeguarding the IT organization.

Accepted Answer

The answer of The ______________________________ is charged with safeguarding the...

Question 15

The functions of the ______________________________ commonly include assigning passwords and making sure the IT organization is secure from physical threats.

Accepted Answer

The answer of The functions of the ______________________________ commonly include...

Question 16

The ______________________________ maintains custody of and controls access to programs,files,and documentation.

Accepted Answer

The answer of The ______________________________ maintains custody of and controls...

Question 17

______________________________ are particularly important because they operate across all business processes and affect a company's capability to meet a multitude of control goals.

Accepted Answer

The answer of ______________________________ are particularly important because they operate...

Question 18

The ______________________________ function provides efficient and effective operation of the computer equipment by performing tasks such as mounting tapes,disks,and other media and monitoring equipment operation.

Accepted Answer

The answer of The ______________________________ function provides efficient and effective...

Question 19

The ______________________________ coordinates the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Accepted Answer

The answer of The ______________________________ coordinates the organizational and IT...

Question 20

The function composed of people,procedures,and equipment and is typically called the information systems department,IS department,or IT department is the ______________________________.

Accepted Answer

The answer of The function composed of people,procedures,and equipment and...

Quiz 8: Controlling Information Systems: Introduction to Pervasive Controls