ACC 564 FINAL EXAM PART 1 LATEST THREE VERSIONS POSTED MAKING TOTAL OF 150 QUESTIONS
olufunmilola
Question 1
The transaction cycle that includes the events of hiring employees and paying them is known as the
Answer
[removed] | revenue cycle. | |
[removed] | expenditure cycle. | |
[removed] | human resources cycle. | |
[removed] | financing cycle. |
Question 2
Data must be converted into information to be considered useful and meaningful for decision-making. There are six characteristics that make information both useful and meaningful. If information is free from error or bias and accurately represents the events or activities of the organization, it is representative of the characteristic of
Answer
[removed] | relevancy. | |
[removed] | timeliness. | |
[removed] | understandability. | |
[removed] | reliability. |
Question 3
The primary objective of accounting is to
Answer
[removed] | implement strong internal controls. | |
[removed] | provide useful information to decision makers. | |
[removed] | prepare financial statements. | |
[removed] | ensure the profitability of an organization |
Question 4
The business owners obtain financing from outside investors, which results in an inflow of cash into the company. This transaction is considered to be part of which cycle?
Answer
[removed] | the revenue cycle | |
[removed] | the payroll cycle | |
[removed] | the production cycle | |
[removed] | the financing cycle |
Question 5
Information that is free from error or bias and accurately represents the events or activities of the organization is
Answer
[removed] | relevant. | |
[removed] | reliable. | |
[removed] | verifiable. | |
[removed] | timely |
Question 6
Hector Sanchez works in the accounting department of a multinational manufacturing company. His job includes updating accounts receivable based on sales orders and remittance advices. His responsibilities are part of the company's
Answer
[removed] | revenue cycle. | |
[removed] | expenditure cycle. | |
[removed] | financing cycle. | |
[removed] | production cycle |
Question 7
An audit trail
Answer
[removed] | provides the means to check the accuracy and validity of ledger postings. | |
[removed] | begins with the general journal. | |
[removed] | is automatically created in every computer-based information system. | |
[removed] | is a summary of recorded transactions |
Question 8
What usually initiates data input into a system?
Answer
[removed] | The transaction system automatically checks each hour to see if any new data is available for input and processing. | |
[removed] | The performance of some business activity generally serves as the trigger for data input. | |
[removed] | A general ledger program is queried to produce a trial balance at the end of an accounting period. | |
[removed] | Data is only input when a source document is submitted to the accounting department |
Question 9
The general ledger account that corresponds to a subsidiary ledger account is known as a
Answer
[removed] | dependent account. | |
[removed] | attribute account. | |
[removed] | entity account. | |
[removed] | control account. |
Question 10
The efficiency of recording numerous business transactions can be best improved by the use of
Answer
[removed] | prenumbered source documents. | |
[removed] | specialized journals. | |
[removed] | posting references. | |
[removed] | subsidiary ledgers |
Question 11
Chas Mulligan has been hired by Yardley Security as an assistant to the internal auditor. He has been asked to document the existing accounting information system, and focus on the activities and flow of data between activities. He decides to begin with a summary description of the sources and uses of data in the organization and how they are processed by the system. The documentation tool that he should employ for this purpose is a
Answer
[removed] | data flow diagram. | |
[removed] | document flowchart. | |
[removed] | system flowchart. | |
[removed] | program flowchart. |
Question 12
In general, a data destination will be shown by
Answer
[removed] | an arrow pointing away. | |
[removed] | an arrow pointing in. | |
[removed] | arrows pointing both ways. | |
[removed] | no arrows, only two horizontal lines. |
Question 13
A data flow diagram
Answer
[removed] | is a graphical description of the source and destination of data that shows how data flow within an organization. | |
[removed] | is a graphical description of the flow of documents and information between departments or areas of responsibility. | |
[removed] | is a graphical description of the relationship among the input, processing, and output in an information system. | |
[removed] | is a graphical description of the sequence of logical operations that a computer performs as it executes a program |
Question 14
A flowchart that depicts the relationships among the input, processing, and output of an AIS is
Answer
[removed] | an internal control flowchart. | |
[removed] | a document flowchart. | |
[removed] | a system flowchart. | |
[removed] | a program flowchart. |
Question 15
Chuck and Jill Scruggs travel in their motor home six months of the year and buy unique artifacts. Within hours after the Scruggs make a purchase, they have photographed it, written a description of it, and posted it for sale on eBay with a reservation price. Anything that does not sell within a week is shipped back to Austin, Texas, for display in The House of Curiosities, a retail business that the Scruggs operate during the balance of the year. Which symbol should be used to represent the transfer of data to eBay in a context diagram of this process?
Answer
[removed] |
| |
[removed] |
| |
[removed] |
| |
[removed] |
|
Question 16
The ________ handles the link between the way data are physically stored and each user's logical view of that data.
Answer
[removed] | data warehouse | |
[removed] | data dictionary | |
[removed] | database management (DBMS) software | |
[removed] | schema |
Question 17
The logical structure of a database is described by the
Answer
[removed] | data dictionary. | |
[removed] | schema. | |
[removed] | database management system. | |
[removed] | internal level. |
Question 18
The database requirement that foreign keys must be null or have a value corresponding to the value of a primary key in another table is formally called the
Answer
[removed] | entity integrity rule. | |
[removed] | referential integrity rule. | |
[removed] | rule of keys. | |
[removed] | foreign key rule |
Question 19
A set of individual user views of the database is called the
Answer
[removed] | conceptual-level schema. | |
[removed] | internal-level schema. | |
[removed] | external-level schema. | |
[removed] | meta-schema. |
Question 20
Inability to add new data to a database without violating the basic integrity of the database is referred to as the
Answer
[removed] | update anomaly. | |
[removed] | insert anomaly. | |
[removed] | integrity anomaly. | |
[removed] | delete anomaly. |
Question 21
The US Justice Department defines computer fraud as
Answer
[removed] | any crime in which a computer is used. | |
[removed] | an illegal act in which knowledge of computer technology is essential. | |
[removed] | any act in which cash is stolen using a computer. | |
[removed] | an illegal act in which a computer is an integral part of the crime |
Question 22
Which of the following is the greatest risk to information systems and causes the greatest dollar losses?
Answer
[removed] | human errors and omissions | |
[removed] | physical threats such as natural disasters | |
[removed] | dishonest employees | |
[removed] | fraud and embezzlement |
Question 23
The most efficient way to conceal asset misappropriation is to
Answer
[removed] | write-off a customer receivable as bad debt. | |
[removed] | alter monthly bank statements before reconciliation. | |
[removed] | alter monthly physical inventory counts to reconcile to perpetual inventory records. | |
[removed] | record phony payments to vendors. |
Question 24
Most fraud perpetrators are insiders because
Answer
[removed] | insiders are more dishonest than outsiders. | |
[removed] | insiders know more about the system and its weaknesses than outsiders. | |
[removed] | outsiders are more likely to get caught than insiders. | |
[removed] | insiders have more need for money than outsiders |
Question 25
The simplest and most common way to commit a computer fraud is to
Answer
[removed] | alter computer input. | |
[removed] | alter computer output. | |
[removed] | modify the processing. | |
[removed] | corrupt the database |
Question 26
Telefarm Industries is a telemarketing firm that operates in the Midwest. The turnover rate among employees is quite high. Recently, the information technology manager discovered that an unknown employee had used a Bluetooth-enabled mobile phone to access the firm's database and copy a list of customers from the past three years that included credit card information. Telefarm was a victim of
Answer
[removed] | Bluesnarfing. | |
[removed] | splogging. | |
[removed] | vishing. | |
[removed] | typosquatting. |
Question 27
Illegally obtaining and using confidential information about a person for economic gain is known as
Answer
[removed] | eavesdropping. | |
[removed] | identity theft. | |
[removed] | packet sniffing. | |
[removed] | piggybacking. |
Question 28
A fraud technique that slices off tiny amounts from many projects is called the ________ technique.
Answer
[removed] | Trojan horse | |
[removed] | round down | |
[removed] | salami | |
[removed] | trap door |
Question 29
Computer fraud perpetrators that modify programs during systems development, allowing access into the system that bypasses normal system controls are using
Answer
[removed] | a Trojan horse. | |
[removed] | a trap door. | |
[removed] | the salami technique. | |
[removed] | superzapping. |
Question 30
Which of the following is the easiest method for a computer criminal to steal output without ever being on the premises?
Answer
[removed] | dumpster diving | |
[removed] | by use of a Trojan horse | |
[removed] | using a telescope to peer at paper reports | |
[removed] | electronic eavesdropping on computer monitors |
Question 31
What is one reason why AIS threats are increasing?
Answer
[removed] | LANs and client/server systems are easier to control than centralized, mainframe systems. | |
[removed] | Many companies do not realize that data security is crucial to their survival. | |
[removed] | Computer control problems are often overestimated and overly emphasized by management. | |
[removed] | Many companies believe that protecting information is a strategic requirement. |
Question 32
The SEC and FASB are best described as external influences that directly affect an organization's
Answer
[removed] | hiring practices. | |
[removed] | philosophy and operating style. | |
[removed] | internal environment. | |
[removed] | methods of assigning authority |
Question 33
According to the ERM, these objectives help ensure the accuracy, completeness and reliability of internal and external company reports.
Answer
[removed] | Compliance objectives | |
[removed] | Operations objectives | |
[removed] | Reporting objectives | |
[removed] | Strategic objectives |
Question 34
According to the ERM, these deal with the effectiveness and efficiency of company operations, such as performance and profitability goals.
Answer
[removed] | Compliance objectives | |
[removed] | Operations objectives | |
[removed] | Reporting objectives | |
[removed] | Strategic objectives |
Question 35
When undertaking risk assessment, the expected loss is calculated like this.
Answer
[removed] | Impact times expected loss | |
[removed] | Impact times likelihood | |
[removed] | Inherent risk times likelihood | |
[removed] | Residual risk times likelihood |
Question 36
Compatibility tests utilize a(n) ________, which is a list of authorized users, programs, and data files the users are authorized to access or manipulate.
Answer
[removed] | validity test | |
[removed] | biometric matrix | |
[removed] | logical control matrix | |
[removed] | access control matrix |
Question 37
In 2007, a major U.S. financial institution hired a security firm to attempt to compromise its computer network. A week later, the firm reported that it had successfully entered the system without apparent detection and presented an analysis of the vulnerabilities that had been found. This is an example of a
Answer
[removed] | preventive control. | |
[removed] | detective control. | |
[removed] | corrective control. | |
[removed] | standard control |
Question 38
The process that allows a firewall to be more effective by examining the data in the body of an IP packet, instead of just the header, is known as
Answer
[removed] | deep packet inspection. | |
[removed] | stateful packet filtering. | |
[removed] | static packet filtering. | |
[removed] | an intrusion prevention system |
Question 39
This protocol specifies the procedures for dividing files and documents into packets to be sent over the Internet.
Answer
[removed] | Access control list | |
[removed] | Internet protocol | |
[removed] | Packet switching protocol | |
[removed] | Transmission control protocol |
Question 40
A special purpose hardware device or software running on a general purpose computer, which filters information that is allowed to enter and leave the organization's information system, is known as a(n)
Answer
[removed] | demilitarized zone. | |
[removed] | intrusion detection system. | |
[removed] | intrusion prevention system. | |
[removed] | firewall. |
Question 41
Jeff Davis took a call from a client. "Jeff, I need to interact online and real time with our affiliate in India, and I want to make sure that our communications aren't intercepted. What do you suggest?" Jeff responded "The best solution will be to implement
Answer
[removed] | a virtual private network." | |
[removed] | a private cloud environment." | |
[removed] | an asymmetric encryption system with digital signatures." | |
[removed] | multifactor authentication |
Question 42
On March 3, 2008, a laptop computer belonging to Folding Squid Technology was stolen from the trunk of Jiao Jan's car while he was attending a conference in Cleveland, Ohio. After reporting the theft, Jiao considered the implications of the theft for the company's network security and concluded there was nothing to worry about because
Answer
[removed] | the computer was protected by a password. | |
[removed] | the computer was insured against theft. | |
[removed] | it was unlikely that the thief would know how to access the company data stored on the computer. | |
[removed] | the data stored on the computer was encrypted |
Question 43
One way to circumvent the counterfeiting of public keys is by using
Answer
[removed] | a digital certificate. | |
[removed] | digital authority. | |
[removed] | encryption. | |
[removed] | cryptography |
Question 44
An electronic document that certifies the identity of the owner of a particular public key.
Answer
[removed] | Asymmetric encryption | |
[removed] | Digital certificate | |
[removed] | Digital signature | |
[removed] | Public key |
Question 45
Which of the following descriptions is not associated with symmetric encryption?
Answer
[removed] | A shared secret key | |
[removed] | Faster encryption | |
[removed] | Lack of authentication | |
[removed] | Separate keys for each communication party |
Question 46
This tests a numerical amount to ensure that it does not exceed a predetermined value.
Answer
[removed] | Completeness check | |
[removed] | Limit check | |
[removed] | Range check | |
[removed] | Sign check |
Question 47
User reviews are an example of a(n)
Answer
[removed] | data entry control. | |
[removed] | data transmission control. | |
[removed] | output control. | |
[removed] | processing control |
Question 48
A copy of a database, master file, or software that will be retained indefinitely as a historical record is known as a(n)
Answer
[removed] | archive. | |
[removed] | cloud computing. | |
[removed] | differential backup. | |
[removed] | incremental backup |
Question 49
This determines the correctness of the logical relationship between two data items.
Answer
[removed] | Range check | |
[removed] | Reasonableness test | |
[removed] | Sign check | |
[removed] | Size check |
Question 50
When I enter a correct customer number, the data entry screen displays the customer name and address. This is an example of
Answer
[removed] | prompting. | |
[removed] | preformatting. | |
[removed] | closed-loop verification. | |
[removed] | error checking. |
Version 2
Question 1
Refer to the chart above. At what point, measured in terms of the net cost of information, does information overload begin?
Answer
[removed] | 0 | |
[removed] | 5 | |
[removed] | 10 | |
[removed] | 12 |
Question 2
Which of the following statements below shows the contrast between data and information?
Answer
[removed] | Data is the output of an AIS. | |
[removed] | Information is the primary output of an AIS. | |
[removed] | Data is more useful in decision-making than information. | |
[removed] | Data and information are the same |
Question 3
The primary objective of accounting is to
Answer
[removed] | implement strong internal controls. | |
[removed] | provide useful information to decision makers. | |
[removed] | prepare financial statements. | |
[removed] | ensure the profitability of an organization |
Question 4
Transaction cycles can be summarized on a high level as "give-get" transactions. An example of "give-get" in the revenue cycle would be
Answer
[removed] | give cash, get goods. | |
[removed] | give goods, get cash. | |
[removed] | give cash, get labor. | |
[removed] | give cash, get cash. |
Question 5
An example of inbound logistics would consist of
Answer
[removed] | the activities that transform inputs into final products or services. | |
[removed] | the activities that help customers to buy the organization's products or services. | |
[removed] | the activities that provide post-sale support to customers. | |
[removed] | the activities that consist of receiving, storing, and distributing the materials used as inputs by the organization to create goods and/or services it sells |
Question 6
Which of the following is an example of source data automation?
Answer
[removed] | a utility bill | |
[removed] | POS (point-of-sale) scanners in retail stores | |
[removed] | a bill of lading | |
[removed] | a subsidiary ledger |
Question 7
A general journal
Answer
[removed] | would be used to record monthly depreciation entries. | |
[removed] | simplifies the process of recording large numbers of repetitive transactions. | |
[removed] | records all detailed data for any general ledger account that has individual sub-accounts. | |
[removed] | contains summary-level data for every account of the organization |
Question 8
Hector Sanchez works in the accounting department of a multinational manufacturing company. His job includes updating accounts payable based on purchase orders and checks. His responsibilities are part of the company's
Answer
[removed] | revenue cycle. | |
[removed] | expenditure cycle. | |
[removed] | financing cycle. | |
[removed] | production cycle |
Question 9
The efficiency of recording numerous business transactions can be best improved by the use of
Answer
[removed] | prenumbered source documents. | |
[removed] | specialized journals. | |
[removed] | posting references. | |
[removed] | subsidiary ledgers. |
Question 10
To be effective, the chart of accounts must
Answer
[removed] | be as concise as possible. | |
[removed] | begin with account 001. | |
[removed] | utilize only one coding technique. | |
[removed] | contain sufficient detail to meet the information needs of the organization. |
Question 11
The Union Soup Kitchen is a non-profit organization that collects, stores, prepares and provides food to the homeless in Erie, Pennsylvania. Donations of food are recorded in a database and a receipt is provided to the donor. When food is used, the database is updated so that it always reflects the amounts and types of food that are available. In a data flow diagram, which type of symbol would be used to represent the flow of data from the donor into the system?
Answer
[removed] |
| |
[removed] |
| |
[removed] |
| |
[removed] |
|
Question 12
In a document flowchart of a manual payroll processing system, "update employee file" will be shown by a(n) ________ symbol, and "prepare payroll check" will be shown by a(n) ________ symbol.
Answer
[removed] | input; output | |
[removed] | input; manual operation | |
[removed] | manual operation; output | |
[removed] | manual operation; manual operation |
Question 13
When preparing a document flowchart, the names of organizational departments or job functions should appear in the
Answer
[removed] | column headings. | |
[removed] | right-hand margin. | |
[removed] | written narrative accompanying the flowchart. | |
[removed] | title of the flowchart. |
Question 14
Chas Mulligan has been hired by Yardley Security as an assistant to the internal auditor. He has been asked to thoroughly document the existing accounting information system in preparation for making recommendations for improvements to internal controls. He decides to begin with a description of the information stored in paper records, their sources, and their destinations. The documentation tool that he should employ for this purpose is a
Answer
[removed] | data flow diagram. | |
[removed] | document flowchart. | |
[removed] | system flowchart. | |
[removed] | program flowchart |
Question 15
A DFD created at the highest-level or summary view is referred to as a
Answer
[removed] | process diagram. | |
[removed] | overview diagram. | |
[removed] | content diagram. | |
[removed] | context diagram |
Question 16
The ________ acts as an interface between the database and the various application programs.
Answer
[removed] | data warehouse | |
[removed] | database administrator | |
[removed] | database management system | |
[removed] | database system |
Question 17
The problem of changes (or updates) to data values in a database being incorrectly recorded is known as
Answer
[removed] | an update anomaly. | |
[removed] | an insert anomaly. | |
[removed] | a delete anomaly. | |
[removed] | a memory anomaly |
Question 18
The update anomaly in file-based systems or unnormalized database tables
Answer
[removed] | occurs because of data redundancy. | |
[removed] | restricts addition of new fields or attributes. | |
[removed] | results in records that cannot be updated. | |
[removed] | is usually easily detected by users. |
Question 19
When the human resources manager wants to gather data about vacation and personal day usage by employees and by departments, the manager would use which language?
Answer
[removed] | Data Query Language | |
[removed] | Data Manipulation Language | |
[removed] | Data Report Language | |
[removed] | Data Definition Language |
Question 20
In a well-structured database, the constraint that ensures the consistency of the data is known as the
Answer
[removed] | entity integrity rule. | |
[removed] | referential integrity rule. | |
[removed] | logical view. | |
[removed] | consistency integrity rule |
Question 21
In a ________ scheme, customer receipts are stolen and then subsequent payments by other customers are misapplied to cover the theft of the original receipts.
Answer
[removed] | kiting | |
[removed] | laundering | |
[removed] | bogus expense | |
[removed] | lapping |
Question 22
Opportunity to commit fraud is comprised of three stages. The stage that often takes most time and effort would include
Answer
[removed] | stealing inventory from the warehouse. | |
[removed] | selling stolen inventory to get cash. | |
[removed] | lapping accounts receivable. | |
[removed] | creating false journal entries to overstate revenue |
Question 23
Which characteristic of the fraud triangle often stems from a lack of internal controls within an organization?
Answer
[removed] | pressure | |
[removed] | opportunity | |
[removed] | rationalization | |
[removed] | concealment |
Question 24
Intentional or reckless conduct that results in materially misleading financial statements is called
Answer
[removed] | financial fraud. | |
[removed] | misstatement fraud. | |
[removed] | fraudulent financial reporting. | |
[removed] | audit failure fraud |
Question 25
Why is computer fraud often more difficult to detect than other types of fraud?
Answer
[removed] | Rarely is cash stolen in computer fraud. | |
[removed] | The fraud may leave little or no evidence it ever happened. | |
[removed] | Computers provide more opportunities for fraud. | |
[removed] | Computer fraud perpetrators are just more clever than other types of criminals |
Question 26
In the 1960s, techniques were developed that allowed individuals to fool the phone system into providing free access to long distance phone calls. The people who use these methods are referred to as
Answer
[removed] | phreakers. | |
[removed] | hackers. | |
[removed] | hijackers. | |
[removed] | superzappers |
Question 27
The call to tech support was fairly routine. A first-time computer user had purchased a brand new PC two months ago and it was now operating much more slowly and sluggishly than it had at first. Had he been accessing the Internet? Yes. Had he installed any "free" software? Yes. The problem is likely to be a(an)
Answer
[removed] | virus. | |
[removed] | zero-day attack. | |
[removed] | denial of service attack. | |
[removed] | dictionary attack. |
Question 28
Developers of computer systems often include a user name and password that is hidden in the system, just in case they need to get into the system and correct problems in the future. This is referred to as a
Answer
[removed] | Trojan horse. | |
[removed] | key logger. | |
[removed] | spoof. | |
[removed] | back door |
Question 29
I work in the information technology department of a company I'll call CMV. On Wednesday morning, I arrived at work, scanned in my identity card and punched in my code. This guy in a delivery uniform came up behind me carrying a bunch of boxes. I opened the door for him, he nodded and went on in. I didn't think anything of it until later. Then I wondered if he might have been
Answer
[removed] | pretexting. | |
[removed] | piggybacking. | |
[removed] | posing. | |
[removed] | spoofing |
Question 30
When a computer criminal gains access to a system by searching records or the trash of the target company, this is referred to as
Answer
[removed] | data diddling. | |
[removed] | dumpster diving. | |
[removed] | eavesdropping. | |
[removed] | piggybacking |
Question 31
Go-Go Corporation, a publicly traded company, has three brothers who serve as President, Vice President of Finance and CEO. This situation
Answer
[removed] | increases the risk associated with an audit. | |
[removed] | must be changed before your audit firm could accept the audit engagement. | |
[removed] | is a violation of the Sarbanes-Oxley Act. | |
[removed] | violates the Securities and Exchange Act |
Question 32
A(n) ________ helps top-level managers with high-level activities that demand frequent and regular attention.
Answer
[removed] | boundary system | |
[removed] | diagnostic control system | |
[removed] | interactive control system | |
[removed] | internal control system |
Question 33
When undertaking risk assessment, the expected loss is calculated like this.
Answer
[removed] | Impact times expected loss | |
[removed] | Impact times likelihood | |
[removed] | Inherent risk times likelihood | |
[removed] | Residual risk times likelihood |
Question 34
Generally in a risk assessment process, the first step is to
Answer
[removed] | identify the threats that the company currently faces. | |
[removed] | estimate the risk probability of negative events occurring. | |
[removed] | estimate the exposure from negative events. | |
[removed] | identify controls to reduce all risk to zero. |
Question 35
The primary purpose of the Foreign Corrupt Practices Act of 1977 was
Answer
[removed] | to require corporations to maintain a good system of internal control. | |
[removed] | to prevent the bribery of foreign officials by American companies. | |
[removed] | to require the reporting of any material fraud by a business. | |
[removed] | All of the above are required by the act |
Question 36
A special purpose hardware device or software running on a general purpose computer, which filters information that is allowed to enter and leave the organization's information system, is known as a(n)
Answer
[removed] | demilitarized zone. | |
[removed] | intrusion detection system. | |
[removed] | intrusion prevention system. | |
[removed] | firewall. |
Question 37
Multi-factor authentication
Answer
[removed] | involves the use of two or more basic authentication methods. | |
[removed] | is a table specifying which portions of the systems users are permitted to access. | |
[removed] | provides weaker authentication than the use of effective passwords. | |
[removed] | requires the use of more than one effective password. |
Question 38
Which of the following is an example of a corrective control?
Answer
[removed] | Physical access controls | |
[removed] | Encryption | |
[removed] | Intrusion detection | |
[removed] | Incident response teams |
Question 39
The Trust Services Framework reliability principle that states that users must be able to enter, update, and retrieve data during agreed-upon times is known as
Answer
[removed] | availability. | |
[removed] | security. | |
[removed] | maintainability. | |
[removed] | integrity |
Question 40
In 2007, a major U.S. financial institution hired a security firm to attempt to compromise its computer network. A week later, the firm reported that it had successfully entered the system without apparent detection and presented an analysis of the vulnerabilities that had been found. This is an example of a
Answer
[removed] | preventive control. | |
[removed] | detective control. | |
[removed] | corrective control. | |
[removed] | standard control |
Question 41
Which of the following is not one of the three important factors determining the strength of any encryption system?
Answer
[removed] | Key length | |
[removed] | Key management policies | |
[removed] | Encryption algorithm | |
[removed] | Privacy |
Question 42
Jeff Davis took a call from a client. "Jeff, I need for my customers to make payments online using credit cards, but I want to make sure that the credit card data isn't intercepted. What do you suggest?" Jeff responded "The best solution will be to implement
Answer
[removed] | a virtual private network." | |
[removed] | a private cloud environment." | |
[removed] | an encryption system with digital signatures." | |
[removed] | a data masking program |
Question 43
These are used to create digital signatures.
Answer
[removed] | Asymmetric encryption and hashing | |
[removed] | Hashing and packet filtering | |
[removed] | Packet filtering and encryption | |
[removed] | Symmetric encryption and hashing |
Question 44
Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information?
Answer
[removed] | Providing free credit report monitoring for customers | |
[removed] | Inform customers of the option to opt-out of data collection and use of their personal information | |
[removed] | Allow customers' browsers to decline to accept cookies | |
[removed] | Utilize controls to prevent unauthorized access to, and disclosure of, customers' information |
Question 45
Jeff Davis took a call from a client. "Jeff, I need to interact online and real time with our affiliate in India, and I want to make sure that our communications aren't intercepted. What do you suggest?" Jeff responded "The best solution will be to implement
Answer
[removed] | a virtual private network." | |
[removed] | a private cloud environment." | |
[removed] | an asymmetric encryption system with digital signatures." | |
[removed] | multifactor authentication |
Question 46
Sequentially prenumbered forms is an example of a(n)
Answer
[removed] | data entry control. | |
[removed] | data transmission control. | |
[removed] | processing control. | |
[removed] | input control. |
Question 47
Error logs and review are an example of
Answer
[removed] | data entry controls. | |
[removed] | data transmission controls. | |
[removed] | output controls. | |
[removed] | processing controls |
Question 48
This determines if all required data items have been entered.
Answer
[removed] | Completeness check | |
[removed] | Field check | |
[removed] | Limit check | |
[removed] | Range check |
Question 49
A facility that is pre-wired for necessary telecommunications and computer equipment, but doesn't have equipment installed, is known as a
Answer
[removed] | cold site. | |
[removed] | hot site. | |
[removed] | remote site. | |
[removed] | subsidiary location |
Question 50
User reviews are an example of a(n)
Answer
[removed] | data entry control. | |
[removed] | data transmission control. | |
[removed] | output control. | |
[removed] | processing control |
VERSION 3 LATEST
Question 1
The process of creating value for customers is the result of nine activities that form a
[removed] | value chain. | |
[removed] | profitable operation. | |
[removed] | successful business. | |
[removed] | support system. |
Question 2
When two knowledgeable people acting independently each produce the same information, this information is said to be
[removed] | complete. | |
[removed] | relevant. | |
[removed] | reliable. | |
[removed] | verifiable. |
Question 3
Refer to the chart above. At what point, measured in terms of the net cost of information, does information overload begin?
[removed] | 0 | |
[removed] | 5 | |
[removed] | 10 | |
[removed] |
Question 4
The value chain concept is composed of two types of activities known as
[removed] | primary and support. | |
[removed] | primary and secondary. | |
[removed] | support and value. | |
[removed] | technology and support. |
Question 5
Transaction cycles can be summarized on a high level as "give-get" transactions. An example of "give-get" in the expenditure cycle would be
[removed] | give cash, get cash. | |
[removed] | give cash, get goods. | |
[removed] | give cash, get labor. | |
[removed] | give goods, get cash. |
Question 6
The data processing method used by FedEx to track packages is an example of
[removed] | real-time processing. | |
[removed] | batch processing. | |
[removed] | online batch processing. | |
[removed] | real-time batch processing. |
Question 7
Changing an employee's hourly wage rate would be recorded in which file?
[removed] | Employee master file | |
[removed] | Employee transaction file | |
[removed] | Payroll master file | |
[removed] | Payroll transaction file |
Question 8
An audit trail
[removed] | provides the means to check the accuracy and validity of ledger postings. | |
[removed] | begins with the general journal. | |
[removed] | is automatically created in every computer-based information system. | |
[removed] | is a summary of recorded transactions. |
Question 9
In an ERP system, the module used to record data about transactions in the revenue cycle is called
[removed] | order to cash. | |
[removed] | purchase to pay. | |
[removed] | financial. | |
[removed] | customer relationship management. |
Question 10
When the sum of all entries in the subsidiary ledger equals the balance in the corresponding general ledger account, it is assumed that
[removed] | the recording processes were accurate. | |
[removed] | all source documents were recorded. | |
[removed] | adjusting entries are not required. | |
[removed] | no errors exist in the subsidiary ledger. |
Question 11
Chuck and Jill Scruggs travel in their motor home six months of the year and buy unique artifacts. Within hours after the Scruggs make a purchase, they have photographed it, written a description of it, and posted it for sale on eBay with a reservation price. Anything that does not sell is shipped back to Austin, Texas, for display in The House of Curiosities, a retail business that the Scruggs operate during the balance of the year. Which symbol should be used to represent the remote server that is used to store data while the Scruggs are traveling?
[removed] |
| |
[removed] |
| |
[removed] |
| |
[removed] |
|
Question 12
In a document flowchart of a manual payroll processing system, "update employee file" will be shown by a(n) ________ symbol, and "prepare payroll check" will be shown by a(n) ________ symbol.
[removed] | input; output | |
[removed] | input; manual operation | |
[removed] | manual operation; output | |
[removed] | manual operation; manual operation |
Question 13
The Union Soup Kitchen is a non-profit organization that collects, stores, prepares and provides food to the homeless in Erie, Pennsylvania. Donations of food are recorded in a database and a receipt is provided to the donor. When food is used, the database is updated so that it always reflects the amounts and types of food that are available. In a data flow diagram, which type of symbol would be used to represent the flow of data from the donor into the system?
[removed] |
| |
[removed] |
| |
[removed] |
| |
[removed] |
|
Question 14
Chas Mulligan has been hired by Yardley Security as an assistant to the internal auditor. He has been asked to thoroughly document the existing accounting information system in preparation for making recommendations for improvements to internal controls. He decides to begin with a description of the information stored in paper records, their sources, and their destinations. The documentation tool that he should employ for this purpose is a
[removed] | data flow diagram. | |
[removed] | document flowchart. | |
[removed] | system flowchart. | |
[removed] | program flowchart. |
Question 15
The Union Soup Kitchen is a non-profit organization that collects, stores, prepares and provides food to the homeless in Erie, Pennsylvania. Donations of food are recorded in a database and a receipt is provided to the donor. When food is used, the database is updated so that it always reflects the amounts and types of food that are available. In a data flow diagram, which type of symbol would be used to represent the storage location of data in the system?
[removed] |
| |
[removed] |
| |
[removed] |
| |
[removed] |
|
Question 16
The ________ acts as an interface between the database and the various application programs.
[removed] | data warehouse | |
[removed] | database administrator | |
[removed] | database management system | |
[removed] | database system |
Question 17
Using a file-oriented approach to data and information, data is maintained in
[removed] | a centralized database. | |
[removed] | many interconnected files. | |
[removed] | many separate files. | |
[removed] | a decentralized database |
Question 18
The logical structure of a database is described by the
[removed] | data dictionary. | |
[removed] | schema. | |
[removed] | database management system. | |
[removed] | internal level. |
Question 19
If a national sales tax were implemented, which language would be used to add a new field in the sales table to track the sales tax due?
[removed] | Data Definition Language | |
[removed] | Data Manipulation Language | |
[removed] | Data Query Language | |
[removed] | Data Update Language |
Question 20
The update anomaly in file-based systems or unnormalized database tables
[removed] | occurs because of data redundancy. | |
[removed] | restricts addition of new fields or attributes. | |
[removed] | results in records that cannot be updated. | |
[removed] | is usually easily detected by users. |
Question 21
Which characteristic of the fraud triangle relates to excuses that perpetrators use to justify their illegal behavior?
[removed] | pressure | |
[removed] | opportunity | |
[removed] | rationalization | |
[removed] | concealment |
Question 22
Opportunity to commit fraud is comprised of three stages. The stage that often takes most time and effort would include
[removed] | stealing inventory from the warehouse. | |
[removed] | selling stolen inventory to get cash. | |
[removed] | lapping accounts receivable. | |
[removed] | creating false journal entries to overstate revenue. |
Question 23
Which characteristic of the fraud triangle often stems from a lack of internal controls within an organization?
[removed] | pressure | |
[removed] | opportunity | |
[removed] | rationalization | |
[removed] | concealment |
Question 24
The simplest and most common way to commit a computer fraud is to
[removed] | alter computer input. | |
[removed] | alter computer output. | |
[removed] | modify the processing. | |
[removed] | corrupt the database. |
Question 25
Which of the following is the greatest risk to information systems and causes the greatest dollar losses?
[removed] | human errors and omissions | |
[removed] | physical threats such as natural disasters | |
[removed] | dishonest employees | |
[removed] | fraud and embezzlement |
Question 26
A fraud technique that slices off tiny amounts from many projects is called the ________ technique.
[removed] | Trojan horse | |
[removed] | round down | |
[removed] | salami | |
[removed] | trap door |
Question 27
When a computer criminal gains access to a system by searching records or the trash of the target company, this is referred to as
[removed] | data diddling. | |
[removed] | dumpster diving. | |
[removed] | eavesdropping. | |
[removed] | piggybacking. |
Question 28
During a routine audit, a review of cash receipts and related accounting entries revealed discrepancies. Upon further analysis, it was found that figures had been entered correctly and then subsequently changed, with the difference diverted to a fictitious customer account. This is an example of
[removed] | kiting. | |
[removed] | data diddling. | |
[removed] | data leakage. | |
[removed] | phreaking. |
Question 29
The unauthorized access to, and use of, computer systems is known as
[removed] | hacking. | |
[removed] | hijacking. | |
[removed] | phreaking. | |
[removed] | sniffing |
Question 30
Telefarm Industries is a telemarketing firm that operates in the Midwest. The turnover rate among employees is quite high. Recently, the information technology manager discovered that an unknown employee had used a Bluetooth-enabled mobile phone to access the firm's database and copy a list of customers from the past three years that included credit card information. Telefarm was a victim of
[removed] | Bluesnarfing. | |
[removed] | splogging. | |
[removed] | vishing. | |
[removed] | typosquatting. |
Question 31
According to the ERM, high level goals that are aligned with and support the company's mission are
[removed] | compliance objectives. | |
[removed] | operations objectives. | |
[removed] | reporting objectives. | |
[removed] | strategic objectives. |
Question 32
A ________ is created to guide and oversee systems development and acquisition.
[removed] | performance evaluation | |
[removed] | project development plan | |
[removed] | steering committee | |
[removed] | strategic master plan |
Question 33
The amount of risk a company is willing to accept in order to achieve its goals and objectives is
[removed] | Inherent risk | |
[removed] | Residual risk | |
[removed] | Risk appetite | |
[removed] | Risk assessment |
Question 34
________ controls prevent, detect and correct transaction errors and fraud.
[removed] | Application | |
[removed] | Detective | |
[removed] | General | |
[removed] | Preventive |
Question 35
The process that a business uses to safeguard assets, provide accurate and reliable information, and promote and improve operational efficiency is known as
[removed] | a phenomenon. | |
[removed] | internal control. | |
[removed] | an AIS threat. | |
[removed] | a preventive control. |
Question 36
When new employees are hired by Folding Squid Technologies, they are assigned user names and appropriate permissions are entered into the information system's access control matrix. This is an example of a(an)
[removed] | authentication control. | |
[removed] | biometric device. | |
[removed] | remote access control. | |
[removed] | authorization control. |
Question 37
According to the Trust Services Framework, the reliability principle of integrity is achieved when the system produces data that
[removed] | is available for operation and use at times set forth by agreement. | |
[removed] | is protected against unauthorized physical and logical access. | |
[removed] | can be maintained as required without affecting system availability, security, and integrity. | |
[removed] | is complete, accurate, and valid. |
Question 38
Meaningful Discussions is a social networking site that boasts over a million registered users and a quarterly membership growth rate in the double digits. As a consequence, the size of the information technology department has been growing very rapidly, with many new hires. Each employee is provided with a name badge with a photo and embedded computer chip that is used to gain entry to the facility. This is an example of a(an)
[removed] | authentication control. | |
[removed] | biometric device. | |
[removed] | remote access control. | |
[removed] | authorization control. |
Question 39
The ________ disseminates information about fraud, errors, breaches and other improper system uses and their consequences.
[removed] | chief information officer | |
[removed] | chief operations officer | |
[removed] | chief security officer | |
[removed] | computer emergency response team |
Question 40
When new employees are hired by Folding Squid Technologies, they are assigned user names and passwords and provided with laptop computers that have an integrated fingerprint reader. In order to log in, the user's fingerprint must be recognized by the reader. This is an example of a(an)
[removed] | authorization control. | |
[removed] | biometric device. | |
[removed] | remote access control. | |
[removed] | defense in depth |
Question 41
In a private key system the sender and the receiver have ________, and in the public key system they have ________.
[removed] | different keys; the same key | |
[removed] | a decrypting algorithm; an encrypting algorithm | |
[removed] | the same key; two separate keys | |
[removed] | an encrypting algorithm; a decrypting algorithm |
Question 42
Encryption has a remarkably long and varied history. The invention of writing was apparently soon followed by a desire to conceal messages. One of the earliest methods, attributed to an ancient Roman emperor, was the simple substitution of numbers for letters, for example A = 1, B = 2, etc. This is an example of
[removed] | a hashing algorithm. | |
[removed] | symmetric key encryption. | |
[removed] | asymmetric key encryption. | |
[removed] | a public key. |
Question 43
The system and processes used to issue and manage asymmetric keys and digital certificates are known as
[removed] | asymmetric encryption. | |
[removed] | certificate authority. | |
[removed] | digital signature. | |
[removed] | public key infrastructure. |
Question 44
Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information?
[removed] | Providing free credit report monitoring for customers | |
[removed] | Inform customers of the option to opt-out of data collection and use of their personal information | |
[removed] | Allow customers' browsers to decline to accept cookies | |
[removed] | Utilize controls to prevent unauthorized access to, and disclosure of, customers' information |
Question 45
Which of the following is not one of the three important factors determining the strength of any encryption system?
[removed] | Key length | |
[removed] | Key management policies | |
[removed] | Encryption algorithm | |
[removed] | Privacy |
Question 46
A data entry input control in which the application software sums the first four digits of a customer number to calculate the value of the fifth digit and then compares the calculated number to the number typed in during data entry is an example of a
[removed] | check digit verification. | |
[removed] | validity check. | |
[removed] | closed-loop verification. | |
[removed] | duplicate data check. |
Question 47
A facility that contains all the computing equipment the organization needs to perform its essential business activities is known as a
[removed] | cold site. | |
[removed] | hot site. | |
[removed] | remote site. | |
[removed] | subsidiary location. |
Question 48
A validity check is an example of a(n)
[removed] | data entry control. | |
[removed] | data transmission control. | |
[removed] | output control. | |
[removed] | input control. |
Question 49
This ensures that the input data will fit into the assigned field.
[removed] | Limit check | |
[removed] | Range check | |
[removed] | Size check | |
[removed] | Validity check |
Question 50
When a computer system's files are automatically duplicated on a second data storage system as they are changed, the process is referred to as
[removed] | real-time mirroring. | |
[removed] | batch updating. | |
[removed] | consistency control. | |
[removed] | double-secure storage. |
10 years ago
Purchase the answer to view it

- final_exam_part_1_answer.docx