Question 1

Discuss three sources of exposure (threats)to the operating system.

Accepted Answer

1.Privileged personnel who abuse their a...

Question 2

Describe two ways that passwords are used to authorize and validate messages in the electronic data interchange environment.

Accepted Answer

Value-added networks use passwords to de...

Question 3

Audit trails in computerized systems are comprised of two types of audit logs: detailed logs of individual keystrokes and event-oriented logs.

Accepted Answer

A) True 
 B)False

Question 4

A firewall is a hardware partition designed to protect networks from power surges.

Accepted Answer

A) True 
 B)False

Question 5

Explain how SYN flood attacks can be controlled.

Accepted Answer

Two things can be done:
First,Internet h...

Question 6

What are biometric devices?

Accepted Answer

Biometric devices measure various person...

Question 7

In an electronic data interchange (EDI) environment,when the auditor compares the terms of the trading partner agreement against the access privileges stated in the database authority table,the auditor is testing which audit objective?

Accepted Answer

A)  all EDI transactions are authorized
B)  unauthorized trading partners cannot gain access to database records
C)  authorized trading partners have access only to approved data
D)  a complete audit trail is maintained

Question 8

A software program that allows access to a system without going through the normal log-on procedures is called a

Accepted Answer

A)  logic bomb
B)  Trojan horse
C)  worm
D)  back door

Question 9

An integrated group of programs that supports the applications and facilitates their access to specified resources is called a(n)

Accepted Answer

A)  operating system
B)  database management system
C)  utility system
D)  facility system

Question 10

Which control will not reduce the likelihood of data loss due to a line error?

Accepted Answer

A)  echo check
B)  encryption
C)  vertical parity bit
D)  horizontal parity bit

Question 11

Audit objectives for the database management system include all of the following except

Accepted Answer

A)  verifying that the security group monitors and reports on fault tolerance violations
B)  confirming that backup procedures are adequate
C)  ensuring that authorized users access only those files they need to perform their duties
D)  verifying that unauthorized users cannot access data files

Question 12

Audit objectives in the electronic data interchange (EDI) environment include all of the following except

Accepted Answer

A)  all EDI transactions are authorized
B)  unauthorized trading partners cannot gain access to database records
C)  a complete audit trail of EDI transactions is maintained
D)  backup procedures are in place and functioning properly

Question 13

Which of the following is not an access control in a database system?

Accepted Answer

A)  antivirus software
B)  database authorization table
C)  passwords
D)  voice prints

Question 14

Computer viruses usually spread throughout the system before being detected.

Accepted Answer

A) True 
 B)False

Question 15

List three methods of controlling unauthorized access to telecommunication messages.

Accepted Answer

call-back devices,data encrypt...

Question 16

Malicious and destructive programs cause millions of dollars of loss to corporations annually.

Accepted Answer

A) True 
 B)False

Question 17

The request-response technique should detect if a data communication transmission has been diverted.

Accepted Answer

A) True 
 B)False

Question 18

Transaction logs are permanent records of transactions created to preserve audit trails in a computerized environment.

Accepted Answer

A) True 
 B)False

Question 19

Hackers can disguise their message packets to look as if they came from an authorized user and gain access to the host's network using a technique called

Accepted Answer

A)  spoofing
B)  spooling
C)  dual-homing
D)  screening

Question 20

A formal log-on procedure is the operating system's first line of defense.Explain how this works.

Accepted Answer

When the user logs on,he or she is prese...

Exam 15: Auditing It Controls Part II: Security and Access

Transaction logs are permanent records of transactions created to preserve audit trails in a computerized environment.

Correct AnswerverifiedShow Answer

Audit trails in computerized systems are comprised of two types of audit logs: detailed logs of individual keystrokes and event-oriented logs.

Correct AnswerverifiedShow Answer

Malicious and destructive programs cause millions of dollars of loss to corporations annually.

Correct AnswerverifiedShow Answer

Audit objectives in the electronic data interchange (EDI) environment include all of the following except

Correct AnswerverifiedShow Answer

Computer viruses usually spread throughout the system before being detected.

Correct AnswerverifiedShow Answer

A firewall is a hardware partition designed to protect networks from power surges.

Correct AnswerverifiedShow Answer

A formal log-on procedure is the operating system's first line of defense.Explain how this works.

Correct AnswerverifiedWhen the user logs on,he or she is prese...View AnswerShow Answer

Which of the following is not an access control in a database system?

Correct AnswerverifiedShow Answer

List three methods of controlling unauthorized access to telecommunication messages.

Correct Answerverifiedcall-back devices,data encrypt...View AnswerShow Answer

Describe two ways that passwords are used to authorize and validate messages in the electronic data interchange environment.

Correct AnswerverifiedValue-added networks use passwords to de...View AnswerShow Answer

The request-response technique should detect if a data communication transmission has been diverted.

Correct AnswerverifiedShow Answer

Hackers can disguise their message packets to look as if they came from an authorized user and gain access to the host's network using a technique called

Correct AnswerverifiedShow Answer

Discuss three sources of exposure (threats)to the operating system.

Correct Answerverified1.Privileged personnel who abuse their a...View AnswerShow Answer

In an electronic data interchange (EDI) environment,when the auditor compares the terms of the trading partner agreement against the access privileges stated in the database authority table,the auditor is testing which audit objective?

Correct AnswerverifiedShow Answer

Explain how SYN flood attacks can be controlled.

Correct AnswerverifiedTwo things can be done:First,Internet h...View AnswerShow Answer

What are biometric devices?

Correct AnswerverifiedBiometric devices measure various person...View AnswerShow Answer

Audit objectives for the database management system include all of the following except

Correct AnswerverifiedShow Answer

Which control will not reduce the likelihood of data loss due to a line error?

Correct AnswerverifiedShow Answer

A software program that allows access to a system without going through the normal log-on procedures is called a

Correct AnswerverifiedShow Answer

An integrated group of programs that supports the applications and facilitates their access to specified resources is called a(n)

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
When the user logs on,he or she is prese...
View Answer

Correct Answer
verified

Correct Answer
verified
call-back devices,data encrypt...
View Answer

Correct Answer
verified
Value-added networks use passwords to de...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
1.Privileged personnel who abuse their a...
View Answer

Correct Answer
verified

Correct Answer
verified
Two things can be done:
First,Internet h...
View Answer

Correct Answer
verified
Biometric devices measure various person...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified