Question 1

Computer-assisted audit techniques (CAAT)are often used when auditing a company's IT infrastructure.

Accepted Answer

A) True 
 B)False

Question 2

Which of the following is not a use of generalized audit software (GAS) ?

Accepted Answer

A)  Substantive testing.
B)  Security testing.
C)  Control testing.
D)  Transaction data analysis.

Question 3

Which of the following is a key reason an operating system is the most important system software?

Accepted Answer

A)  It is the centralized collection of firmwide data.
B)  It manages computer-assisted audit techniques (CAATs) .
C)  It manages interfaces with the computer.
D)  None of the choices are correct.

Question 4

A data warehouse is for daily operations and often includes data for the current fiscal year only.

Accepted Answer

A) True 
 B)False

Question 5

Which of the following is least likely to be considered a component of a computer network?

Accepted Answer

A)  Application programs.
B)  Computers.
C)  Servers.
D)  Routers.

Question 6

Parallel simulation attempts to simulate the firm's key features or processes.

Accepted Answer

A) True 
 B)False

Question 7

Which statements are incorrect about virtual private network (VPN) ?

Accepted Answer

A)  It is a way to use the public telecommunication infrastructure in providing secure access to an organization's network.
B)  It enables the employees to work remotely by accessing their firm's network securely using the Internet.
C)  The packets sent through VPN are encrypted and with authentication technology.
D)  The VPN model requires leased lines.

Question 8

IT governance over operating systems includes establishing proper policies and procedures.These policies and procedures over operating systems should cover all of the following except:

Accepted Answer

A)  Which computing hardware to use.
B)  Who can access the operating system.
C)  Which actions users can take.
D)  Which resources users can use.

Question 9

Which of the following is not considered one of the primary CAAT approaches?

Accepted Answer

A)  The black-box approach.
B)  Encryption testing.
C)  Auditing through the computer.
D)  The white-box approach.

Question 10

Which of the following statements about firewalls is wrong?

Accepted Answer

A)  A firewall is a security system comprised of hardware and software that is built using routers,servers,and a variety of software.
B)  A firewall allows individuals on the corporate network to send and receive data packets from the Internet.
C)  A firewall can filter through packets coming from outside networks to prevent unauthorized access.
D)  A firewall connects different LANs,software-based intelligent devices,and examines IP addresses.

Question 11

Categorize the following scenario below as management,operational,or technical controls for wireless networks' security controls. "Configuring all access points with encryption."

Accepted Answer

A)  Operational controls
B)  Technical Controls
C)  Management Controls B

Question 12

The results of a generalized audit software simulation of the aging of accounts receivable revealed substantial differences in the aging contribution,even though grand totals reconciled.Which of the following should the IS auditor do first to resolve the discrepancy?

Accepted Answer

A)  Recreate the test,using different software.
B)  List a sample of actual data to verify the accuracy of the test program.
C)  Ignore the discrepancy because the grand totals reconcile and instruct the controller to correct the program.
D)  Create test transactions and run test data on both the production and simulation program.

Question 13

Which of the following is not one of the reasons auditors should consider the use of CAATs?

Accepted Answer

A)  ISACA standards require IS auditors to obtain sufficient,reliable,and relevant evidence,and should perform appropriate analysis of this evidence.
B)  GAAP stipulates that audits should be performed using tools and techniques appropriate to the evidence being reviewed.
C)  The IIA professional practices state that auditor must consider the use of technology-based auditing tools when conducting audits.
D)  GAAS requires auditors to gather sufficient and appropriate evidence in the course of audit field work. B

Question 14

What are the differences between LANs and WANs? Have you ever used any LANs and WANS?

Accepted Answer

WANs are much more expensive t...

Question 15

Which of the following is not a benefit of using wireless technology?

Accepted Answer

A)  Mobility.
B)  Rapid deployment.
C)  Flexibility and Scalability.
D)  Security.

Question 16

The purpose of a company's firewall is to:

Accepted Answer

A)  Guard against spoofing.
B)  What-if simulations.
C)  Deny computer hackers access to sensitive data.
D)  All of the choices are correct. D

Question 17

Identify which fundamental control objective belongs with the following statement: "No module should be allowed to destroy or corrupt another module."

Accepted Answer

A)  Protect the operating system from users.
B)  The operating system must protect users from each other.
C)  The operating system must be protected from itself.
D)  The operating system must be protected from its environment.
E)  The operating system must protect users from themselves.

Question 18

Which of the following is not one of the benefits of using a wireless network?

Accepted Answer

A)  Flexibility and scalability.
B)  Mobility.
C)  Greater security.
D)  Rapid deployment.

Question 19

CAATs are commonly used in all of the following situations except:

Accepted Answer

A)  Transaction testing.
B)  Network penetration testing.
C)  Encryption testing.
D)  Operating system vulnerability assessments.

Question 20

Identify which fundamental control objective belongs with the following statement: "A user's application may consist of several modules stored in separate memory locations,each with its own data.One module must not be allowed to destroy or corrupt another module."

Accepted Answer

A)  Protect the operating system from users.
B)  The operating system must protect users from each other.
C)  The operating system must be protected from itself.
D)  The operating system must be protected from its environment.
E)  The operating system must protect users from themselves.

Exam 15: Monitoring and Auditing Ais

Computer-assisted audit techniques (CAAT)are often used when auditing a company's IT infrastructure.

Correct AnswerverifiedShow Answer

Which of the following is not a use of generalized audit software (GAS) ?

Correct AnswerverifiedShow Answer

Which of the following is a key reason an operating system is the most important system software?

Correct AnswerverifiedShow Answer

A data warehouse is for daily operations and often includes data for the current fiscal year only.

Correct AnswerverifiedShow Answer

Which of the following is least likely to be considered a component of a computer network?

Correct AnswerverifiedShow Answer

Parallel simulation attempts to simulate the firm's key features or processes.

Correct AnswerverifiedShow Answer

Which statements are incorrect about virtual private network (VPN) ?

Correct AnswerverifiedShow Answer

IT governance over operating systems includes establishing proper policies and procedures.These policies and procedures over operating systems should cover all of the following except:

Correct AnswerverifiedShow Answer

Which of the following is not considered one of the primary CAAT approaches?

Correct AnswerverifiedShow Answer

Which of the following statements about firewalls is wrong?

Correct AnswerverifiedShow Answer

Categorize the following scenario below as management,operational,or technical controls for wireless networks' security controls. "Configuring all access points with encryption."

Correct AnswerverifiedB

The results of a generalized audit software simulation of the aging of accounts receivable revealed substantial differences in the aging contribution,even though grand totals reconciled.Which of the following should the IS auditor do first to resolve the discrepancy?

Correct AnswerverifiedShow Answer

Which of the following is not one of the reasons auditors should consider the use of CAATs?

Correct AnswerverifiedB

What are the differences between LANs and WANs? Have you ever used any LANs and WANS?

Correct AnswerverifiedWANs are much more expensive t...View AnswerShow Answer

Which of the following is not a benefit of using wireless technology?

Correct AnswerverifiedShow Answer

The purpose of a company's firewall is to:

Correct AnswerverifiedD

Identify which fundamental control objective belongs with the following statement: "No module should be allowed to destroy or corrupt another module."

Correct AnswerverifiedShow Answer

Which of the following is not one of the benefits of using a wireless network?

Correct AnswerverifiedShow Answer

CAATs are commonly used in all of the following situations except:

Correct AnswerverifiedShow Answer

Identify which fundamental control objective belongs with the following statement: "A user's application may consist of several modules stored in separate memory locations,each with its own data.One module must not be allowed to destroy or corrupt another module."

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified
WANs are much more expensive t...
View Answer

Correct Answer
verified

Correct Answer
verified
D

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified