Question 1

A database is often less open to unauthorized access than the physical, paper records, because the database has fewer access points.

Accepted Answer

A database can have multiple access points and may be more vulnerable to unauthorized access if not properly secured, unlike physical records which require physical presence to access.

Question 2

The workstations and the network cabling and connections represent spots were an intruder could tap into the network for unauthorized access.

Accepted Answer

Workstations and network cabling and connections are vulnerable points where intruders can exploit to gain unauthorized access to a network. Hence, the statement is true.

Question 3

Many IT systems do not use source documents; the input is automatic.

Accepted Answer

Many IT systems, such as sensors or automated data collection tools, gather data automatically and do not require source documents as input.

Question 4

Access to the operating system will not allow hackers access to the application software or the database.

Accepted Answer

If a hacker gains access to the operating system, they may be able to access the application software and database as well, depending on how the system is configured and secured.

Question 5

If no source documents are used by the IT system, then the general controls, such as computer logging of transactions, become less important.

Accepted Answer

Even if source documents are not used, general controls such as computer logging of transactions are still important for ensuring the accuracy and integrity of data in the system. Source documents are not the only factor to consider when implementing general controls.

Question 6

The only risk related to the entry points of telecommuting workers is the interaction risk.

Accepted Answer

The entry points of telecommuting workers can also pose a security risk if their devices or networks are not properly secured, making them vulnerable to hacking or data breaches.

Question 7

Telecommuting workers cause two sources of risk exposures for their organizations - the network equipment and cabling in addition to the teleworker's computer - with only "entry-point" being teleworker's computer.

Accepted Answer

The statement is incorrect because the network equipment and cabling also serve as potential entry points for risk exposures, not just the teleworker's computer.

Question 8

If an employee's personal smart phone or tablet is lost or stolen, the company has the right to apply a remote wipe, to remove any company data.

Accepted Answer

The answer of If an employee's personal smart phone or...

Question 9

One of the advantages of private cloud computing is expanded access.

Accepted Answer

Private cloud computing allows for increased access to resources within an organization, as users can access the cloud from anywhere with an internet connection. This can lead to greater efficiency and productivity.

Question 10

Controlling access to the operating system is critical because that access opens access to any data or program within the system.

Accepted Answer

Access to the operating system allows access to all data and programs within the system, making it critical to control who has access to prevent unauthorized access and potential security breaches.

Question 11

A computer network coving a small geographic area is referred to as a LAN.

Accepted Answer

LAN stands for Local Area Network and covers a small geographic area, typically within a building or campus.

Question 12

The closer the source document matches the input screen, the easier it will be for the data entry employee to complete the input screen without errors.

Accepted Answer

When the source document matches the input screen closely, it reduces the chances of errors as the data entry employee can easily locate and input the relevant information in the correct fields. Therefore, the statement is true.

Question 13

The use of dual firewalls - one between the internet and the web server and one between the web server and the organization's network - can help prevent unauthorized from accessing the organization's internal network of computers.

Accepted Answer

This statement is true. Dual firewalls can provide an added layer of security by creating a barrier between the internet and the organization's network, as well as between the web server and the network. This can prevent unauthorized access to the internal network from outside sources and limit the potential damage from any successful attacks.

Question 14

The form authorization and control includes the requirement that source documents should be prenumbered and are to be used in sequence.

Accepted Answer

The requirement for prenumbering and using source documents in sequence is a key aspect of authorization and control to ensure accuracy and prevent fraud or errors.

Question 15

Scalability, related to public cloud computing, refers to the fact that as a company can easily purchase new capacity from the cloud provider.

Accepted Answer

Scalability in public cloud computing allows companies to easily scale up or down their resources and capacity as needed and purchase new capacity from the cloud provider.

Question 16

Public and Private cloud computing both have the benefits of reduced infrastructure and reduced costs.

Accepted Answer

The answer of Public and Private cloud computing both have...

Question 17

The group of controls referred to as Source Document Controls does not include form design.

Accepted Answer

Source Document Controls often include form design as it ensures that documents are created in a way that minimizes errors and facilitates accurate data entry.

Question 18

One of the sources of risk exposure related to telecommuting workers is that the company's network equipment and cabling becomes an entry point for hackers and unauthorized users.

Accepted Answer

Telecommuting workers may not have the same level of security measures on their personal devices and networks as the company's office network, making them more vulnerable to hacking attempts. If a telecommuting worker's device is compromised, it can become a gateway for hackers to access the company's network and sensitive data. Therefore, the company's network equipment and cabling can be exposed to risk due to telecommuting workers.

Question 19

Many companies use a public cloud computing model for storage only.

Accepted Answer

Many companies use a public cloud computing model for various services, including storage, computing power, and applications, not just for storage.

Question 20

In a wireless network, signals are transmitted through the air rather than over cables.Anyone who wants to gain access to the network would need to know the password to access these "air-borne" signals.

Accepted Answer

While a password is often required to access a secured wireless network, signals can still be intercepted by unauthorized users using various techniques, such as packet sniffing, if the network is not properly secured.

Quiz 4: Internal Controls and Risks in IT Systems