Question 1

The difference between "error" and "information manipulation" as business risks associated with information technology is:
A)The person's intent
B)The kind of information involved
C)The potential dollar amount of the loss
D)The classification on Carter's taxonomy

Accepted Answer

The main difference between "error" and "information manipulation" is the person's intent. "Error" is an unintentional mistake made by a person or a system, while "information manipulation" involves intentional actions to modify or use information for personal gain or to harm others. Therefore, the person's intent is the best choice to distinguish between these two risks.

Question 2

George received an e-mail that threatened to release his personal financial data unless he paid a fee.That situation is an example of:
A)Extortion
B)Intrusion
C)Information manipulation
D)Error

Accepted Answer

Extortion is the use of threats or intimidation to obtain something from someone, usually money. In this case, George is being threatened with the release of sensitive financial information in exchange for money, which constitutes extortion. Intrusion refers to unauthorized access to someone's private information, while information manipulation involves changing or distorting data for one's own gain. Error is a mistake or inaccuracy in data, which does not apply to this situation.

Question 3

The terms target, instrumentality, incidental and associated from Carter's taxonomy are most closely associated with which form of risk from Brown's taxonomy?
A)Human error
B)Liquidity
C)Systems
D)Market

Accepted Answer

Carter's taxonomy refers to aspects of operational risk, specifically related to the management and control of processes and systems. Brown's taxonomy categorizes operational risk into four main types: human error, systems, market, and liquidity. Therefore, the terms from Carter's taxonomy are most closely associated with the Systems form of risk from Brown's taxonomy.

Question 4

According to Carter's taxonomy, use of a computer to further a criminal end refers to which of the following categories?
A)Target
B)Instrumentality
C)Incidental
D)Associated

Accepted Answer

Use of a computer as a tool or means to commit a crime falls under the instrumentality category according to Carter's taxonomy. This means that the computer is an essential part of committing the criminal act.

Question 5

Consider the following examples of computer crime as you answer the question:
i.Social Security numbers are stolen from a company's database.ii.A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more.iii.A supervisor receives threats from a worker via e-mail; the worker demands promotion as a condition of not exposing the supervisor's illegal acts.iv.An unhappy customer launches a denial-of-service attack.Which two items represent the same category of risk from the list discussed in the chapter?
A)I and II
B)I and III
C)II and IV
D)None of these

Accepted Answer

The examples provided represent different categories of computer crime: data theft, fraud, extortion, and cyber attack. None of the pairs listed represent the same category of risk.

Question 6

Business risks and threats to information systems include all of the following except:
A)Error
B)Intrusions
C)Malicious software
D)Instrumentality

Accepted Answer

The other options - error, intrusions, and malicious software - are all common risks and threats to information systems. However, "instrumentality" is not typically considered a threat to information systems. It is unclear what is meant by "instrumentality" in this context, but it is not a common term used in relation to information system security.

Question 7

Consider the following examples of computer crime as you answer the question:
i.Social Security numbers are stolen from a company's database.ii.A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more.iii.A supervisor receives threats from a worker via e-mail; the worker demands promotion as a condition of not exposing the supervisor's illegal acts.iv.An unhappy customer launches a denial-of-service attack.Which of the following pairs an item from the list with an appropriate description of a business risk?
A)Extortion, i
B)Service interruption, ii
C)Extortion, iii
D)None of these

Accepted Answer

Extortion is correctly described in iii, where a worker demands a promotion by threatening to expose the supervisor's illegal acts.

Question 8

George received an e-mail that threatened to release his personal financial data unless he paid a fee.Which category of computer crime best describes that situation?
A)Target
B)Instrumentality
C)Incidental
D)Associated

Accepted Answer

The answer of George received an e-mail that threatened to...

Question 9

According to COBIT's principles, information technology governance and management should meet ___ needs.
A)stakeholder
B)the AICPA Core Competency framework
C)International Accounting Standards Board
D)holistic

Accepted Answer

COBIT emphasizes that IT governance and management should align with stakeholder needs, which includes the needs of customers, shareholders, employees, and regulators. The other options listed are not directly related to COBIT's principles.

Question 10

Consider the following examples of computer crime as you answer the question:
i.Social Security numbers are stolen from a company's database.ii.A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more.iii.An employee receives threats from a co-worker via e-mail.iv.An unhappy customer launches a denial-of-service attack.Carter's taxonomy of computer crime comprises four categories.Which of the following statements is most true?
A)The list includes examples of all four categories.
B)The list includes examples of all categories except associated.
C)The list includes examples of all categories except target.
D)The list includes examples of all categories except incidental.

Accepted Answer

The answer of Consider the following examples of computer crime...

Question 11

Computer crimes that fall under Carter's "target" category are most closely associated with which generic element of an accounting information system?
A)Processing
B)Storage
C)Both processing and storage
D)Neither processing nor storage

Accepted Answer

The answer of Computer crimes that fall under Carter's "target"...

Question 12

Which category of computer crime in Carter's taxonomy recognizes that the presence of computers has generated new versions of traditional crimes?
A)Target
B)Instrumentality
C)Incidental
D)Associated

Accepted Answer

The answer of Which category of computer crime in Carter's...

Question 13

An information systems development company routinely creates a password that they do not disclose to their clients.In that way, the development company can bypass any security the client adds on later if the system needs maintenance.The client's information system is therefore at greatest risk for:
A)Error
B)Intrusion
C)Web site defacement
D)Extortion

Accepted Answer

By creating a password that is not disclosed to the client, the development company potentially has access to the client's system without the client's knowledge or authorization. This puts the system at risk for intrusion by the development company or anyone who might obtain the password.

Question 14

A bank's information system was hacked in an effort to obtain clients' personal financial information.Which category of computer crime best describes that situation?
A)Target
B)Instrumentality
C)Incidental
D)Associated

Accepted Answer

The situation described is an example of a Target computer crime, where the hacker specifically targeted the bank's information system in order to obtain personal financial information from its clients.

Question 15

The risk of disclosure of confidential information is most closely related to which category in Carter's taxonomy?
A)Target
B)Instrumentality
C)Both target and instrumentality
D)Neither target nor instrumentality

Accepted Answer

The risk of disclosure of confidential information involves the potential harm to a specific target, which falls under the category of "target" in Carter's taxonomy.

Question 16

Consider the following examples of computer crime as you answer the question:
i.Social Security numbers are stolen from a company's database.ii.A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more.iii.An employee receives threats from a co-worker via e-mail.iv.An unhappy customer launches a denial-of-service attack.Carter's taxonomy of computer crime comprises four categories.Which of the following pairs includes two items from the same category?
A)I and II
B)II and III
C)II and IV
D)I and IV

Accepted Answer

Both examples involve unauthorized access to a computer system or network. Stealing Social Security numbers from a company's database and launching a denial-of-service attack both fall under the category of "computer-related offenses" in Carter's taxonomy. The other options involve different categories: II is "computer-assisted offenses" and III is "computer content offenses."

Question 17

Consider the following examples of computer crime as you answer the question:
i.Social Security numbers are stolen from a company's database.ii.A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more.iii.An employee receives threats from a co-worker via e-mail.iv.An unhappy customer launches a denial-of-service attack.Carter's taxonomy of computer crime comprises four categories.Which of the following pairs includes items from different categories?
A)I and IV
B)II and III
C)Both I and IV and II and III
D)Neither I and IV nor II and III

Accepted Answer

The answer of Consider the following examples of computer crime...

Question 18

Malicious software, such as a logic bomb, is most closely related to which generic element of the accounting information system?
A)Inputs
B)Processing
C)Outputs
D)Storage

Accepted Answer

The answer of Malicious software, such as a logic bomb,...

Question 19

According to COBIT's principles, information technology governance and management should cover the enterprise:
A)from governance to management.
B)end to end.
C)inside the information systems and accounting departments only.
D)outside the information systems and accounting departments only.

Accepted Answer

COBIT's principles state that information technology governance and management should cover the enterprise end to end, meaning it should encompass all aspects of the organization's operations, not just limited to certain departments or areas.

Question 20

Disclosure of confidential information is one risk associated with information technology.Which of the following would be considered confidential information?
A)The stock price of Microsoft
B)The book value of Disney Corporation's fixed assets
C)The social security numbers of GE's board of directors
D)All of these are examples of confidential information.

Accepted Answer

Social security numbers are considered confidential information and should not be disclosed without permission. The stock price and book value of assets are public information that can be found in financial statements and are not considered confidential.

Quiz 10: Computer Crime and Information Technology Security

The difference between "error" and "information manipulation" as business risks associated with information technology is:

George received an e-mail that threatened to release his personal financial data unless he paid a fee.That situation is an example of:

The terms target, instrumentality, incidental and associated from Carter's taxonomy are most closely associated with which form of risk from Brown's taxonomy?

According to Carter's taxonomy, use of a computer to further a criminal end refers to which of the following categories?

Business risks and threats to information systems include all of the following except:

George received an e-mail that threatened to release his personal financial data unless he paid a fee.Which category of computer crime best describes that situation?

According to COBIT's principles, information technology governance and management should meet ___ needs.

Computer crimes that fall under Carter's "target" category are most closely associated with which generic element of an accounting information system?

Which category of computer crime in Carter's taxonomy recognizes that the presence of computers has generated new versions of traditional crimes?

An information systems development company routinely creates a password that they do not disclose to their clients.In that way, the development company can bypass any security the client adds on later if the system needs maintenance.The client's information system is therefore at greatest risk for:

A bank's information system was hacked in an effort to obtain clients' personal financial information.Which category of computer crime best describes that situation?

The risk of disclosure of confidential information is most closely related to which category in Carter's taxonomy?

Malicious software, such as a logic bomb, is most closely related to which generic element of the accounting information system?

According to COBIT's principles, information technology governance and management should cover the enterprise:

Disclosure of confidential information is one risk associated with information technology.Which of the following would be considered confidential information?