Question 1

In an online environment, ______________________________ ensures that only authorized users gain access to a system through a process of identification (e.g., a unique account number for each user) and authentication.

Accepted Answer

The answer of In an online environment, ______________________________ ensures that...

Question 2

Listed below are several pervasive control plans discussed in Chapter 8. On the blank line to the left of each control plan, insert a "P" (preventive), "D" (detective), or "C" (corrective) to best classify that control. If applicable, more than one code may be inserted for each plan.

Accepted Answer

The answer of Listed below are several pervasive control plans...

Question 3

______________________________ is the intentional unauthorized access of an organization's computer system, accomplished by bypassing the system's access security controls.

Accepted Answer

The answer of ______________________________ is the intentional unauthorized access of...

Question 4

A(n) ______________________________ uses many computers, called zombies, that unwittingly cooperate in a denial-of-service attack by sending messages to the target Web site.

Accepted Answer

The answer of A(n) ______________________________ uses many computers, called zombies,...

Question 5

Copies of important stored data, programs, and documentation made periodically are called ______________________________.

Accepted Answer

The answer of Copies of important stored data, programs, and...

Question 6

______________________________ is when a hacker calls and requests a password based on some pretext.

Accepted Answer

The answer of ______________________________ is when a hacker calls and...

Question 7

The site that maintains copies of a primary computing site's programs and data is a(n) ______________________________ site.

Accepted Answer

The answer of The site that maintains copies of a...

Question 8

______________________________ is when an e-mail is sent pretending to be a legitimate business asking for information about your account.

Accepted Answer

The answer of ______________________________ is when an e-mail is sent...

Question 9

Periodic cleaning, testing, and adjusting of computer equipment is referred to as ______________________________.

Accepted Answer

The answer of Periodic cleaning, testing, and adjusting of computer...

Question 10

COBIT 5 has two main components: five _____________ and seven ________________.

Accepted Answer

The answer of COBIT 5 has two main components: five...

Question 11

The ______________________________ logs and monitors who is on or is trying to access the network.

Accepted Answer

The answer of The ______________________________ logs and monitors who is...

Question 12

The first list below contains 10 control plans discussed in Chapter 8. The second list describes 10 system failures that have control implications.
Required:
On the answer line to the left of each system failure, insert the capital letter from the first list of the best control plan to prevent the system failure from occurring. (If you can't find a control that will prevent the failure, then choose a detective or corrective control plan). A letter should be used only once.

Accepted Answer

The answer of The first list below contains 10 control...

Question 13

______________________________ helps to solve the problem posed by single key cryptography by employing a pair of matched keys for each system user, one private (i.e., known only to the party who possesses it) and one public.

Accepted Answer

The answer of ______________________________ helps to solve the problem posed...

Question 14

The process whereby lost data is restored and operations are continued is called ______________________________.

Accepted Answer

The answer of The process whereby lost data is restored...

Question 15

The four events-processing functions that constitute the segregation of duties control plan are:
  Required:
Below is a list of ten events-processing activities, five relating to the cycle of activities involved in processing a sales event and seven relating to the cycle for a purchase event. Classify each of the twelve activities into one of the four functional categories listed above by placing the letter A, B, C, or D on the answer line to the left of each number. You should use only one letter for each of the answers.

Accepted Answer

The answer of The four events-processing functions that constitute the...

Question 16

Watching a user type in passwords or user IDs or listening as they give account information over the phone is called ______________________________.

Accepted Answer

The answer of Watching a user type in passwords or...

Question 17

The ______________________________ actively blocks unauthorized traffic using rules specified by an organization.

Accepted Answer

The answer of The ______________________________ actively blocks unauthorized traffic using...

Question 18

The first list below contains 10 control plans discussed in Chapter 8. The second list describes 10 system failures that have control implications.
Required:
On the answer line to the left of each system failure, insert the capital letter from the first list of the best control plan to prevent the system failure from occurring. If you can't find a control that will prevent the failure, then choose a detective or a corrective plan. A letter should be used only once.

Accepted Answer

The answer of The first list below contains 10 control...

Question 19

Match between columns
                        Premises: Issues programs, data, and documentation to authorized users...
Manages physical security and logical security...
Delivers cost-effective, bug-free applications..
Prioritizes and selects IT projects and resources.
Routes all work into and out of the data center, correct errors, and monitor all error correction...
Manages functional units such as networks, CAD/CAM and systems programming...
Prepares input for computer processing...
Modifies and adapts systems software including operating systems and various utility routines...
Plans IT acquisition and development...
Conducts reviews to determine adherence to IT standards and procedures and achievement of IT objectives...

Accepted Answer

The Answer of Data control. and Systems programming and Security is...

Quiz 8: Controlling Information Systems: Introduction to Pervasive Controls

In an online environment, ______________________________ ensures that only authorized users gain access to a system through a process of identification (e.g., a unique account number for each user) and authentication.

Listed below are several pervasive control plans discussed in Chapter 8. On the blank line to the left of each control plan, insert a "P" (preventive), "D" (detective), or "C" (corrective) to best classify that control. If applicable, more than one code may be inserted for each plan.

______________________________ is the intentional unauthorized access of an organization's computer system, accomplished by bypassing the system's access security controls.

A(n) ______________________________ uses many computers, called zombies, that unwittingly cooperate in a denial-of-service attack by sending messages to the target Web site.

Copies of important stored data, programs, and documentation made periodically are called ______________________________.

______________________________ is when a hacker calls and requests a password based on some pretext.

The site that maintains copies of a primary computing site's programs and data is a(n) ______________________________ site.

______________________________ is when an e-mail is sent pretending to be a legitimate business asking for information about your account.

Periodic cleaning, testing, and adjusting of computer equipment is referred to as ______________________________.

COBIT 5 has two main components: five _ and seven ____.

The ______________________________ logs and monitors who is on or is trying to access the network.

______________________________ helps to solve the problem posed by single key cryptography by employing a pair of matched keys for each system user, one private (i.e., known only to the party who possesses it) and one public.

The process whereby lost data is restored and operations are continued is called ______________________________.

Watching a user type in passwords or user IDs or listening as they give account information over the phone is called ______________________________.

The ______________________________ actively blocks unauthorized traffic using rules specified by an organization.

place the capital letter of the functional title that best matches the duties and responsibilities described. Do not use a letter more than once.