Question 1

General controls for an IT system include:

Accepted Answer

Controls over the physical environment and over the physical access.

Question 2

Examples of Business Continuity include all of the following except:

Accepted Answer

Environmental Backup Recovery Plan

Question 3

The AICPA Trust Services Principles categorizes IT controls and risks into categories.Which of the following is not one of those categories?

Accepted Answer

Recovery

Question 4

A computer network covering a small geographic area, which, in most cases, are within a single building or a local group of buildings is called a:

Accepted Answer

Local area network

Question 5

A large disk storage for accounting and operating data is referred to as an):

Accepted Answer

Database

Question 6

Availability risks, related to the authentication of users would include:

Accepted Answer

Shutting down the system and shutting down programs

Question 7

Many companies use a public cloud computing model for software, data storage or both.Which of the following is an advantage to the public cloud computing model?

Accepted Answer

All of the above are advantages

Question 8

A proactive program for considering risks to the business continuation and the development of plans and procedures to reduce those risks is referred to as:

Accepted Answer

Business continuity planning

Question 9

The establishment of log-in procedures can help prevent or lessen security risks and are referred to as:

Accepted Answer

Preventive controls

Question 10

Unauthorized access to the operating system would allow the unauthorized user to:

Accepted Answer

All of the above

Question 11

The accuracy, completeness, and timeliness of the process in IT systems is referred to as:

Accepted Answer

Processing Integrity Risks

Question 12

Large-scale IT systems should be protected by physical access controls.Which of the following is not listed as one of those controls?

Accepted Answer

Encryption of passwords.

Question 13

The company-to-company transfer of standard business documents in electronic form is called:

Accepted Answer

Electronic Data Interchange

Question 14

Companies who provide mobile devices for employees, normally has a policy that allows the company's IT professional to remove company data and applications from the mobile device.This process is referred to as:

Accepted Answer

Remove wipe

Question 15

The work arrangement where employees work from home using some type of network connection to the office is referred to as:

Accepted Answer

Telecommuting

Question 16

Two or more computer network or data servers that can run identical processes or maintain the same data are called:

Accepted Answer

Redundant servers

Question 17

The software that controls the basic input and output activities of the computer are called:

Accepted Answer

Operating S ystem

Question 18

An alternative power supply that provides electrical power in the event that a main source is lost is called:

Accepted Answer

Emergency power supply

Question 19

A group of LANs connected to each other to cover a wider geographic area is called a:

Accepted Answer

Wide area network

Question 20

A software system that manages the interface between many users and the database is called:

Accepted Answer

Database management system

Quiz 4: Internal Controls and Risks in IT Systems