Question 1

Parallel simulation uses an independent program to simulate a part of an existing application program,and is designed to test the validity and to verify the accuracy of an existing application program.

Accepted Answer

A) True 
 B)False

Question 2

List common security threats for wireless LANs.Find a specific case in which the security of wireless LANs was threatened.Given the case you find,comment on how to prevent or mitigate the threats?

Accepted Answer

Rogue Access Points: The attacker sets u...

Question 3

If an auditor wanted to test the accuracy of a computer generated report they might use which of the the following approaches?

Accepted Answer

A)  An access point approach.
B)  The black-box approach.
C)  A continuous audit.
D)  A pentration test.E) B) and C)
F) B) and D)

Question 4

What is the test data technique?

Accepted Answer

A)  It uses a set of input data to validate system integrity.
B)  It requires auditors to prepare both valid and invalid data to examine critical logics and controls of the system.
C)  It is an automated technique that enables test data to be continually evaluated during the normal operation of a system.
D)  "It uses a set of input data to validate system integrity" and "It requires auditors to prepare both valid and invalid data to examine critical logics and controls of the system" are correct.
E)  None of the choices are correct.F) C) and D)
G) A) and B)

Question 5

Which of the following statements regarding the black-box approach for systems auditing is correct?

Accepted Answer

A)  The auditors need to gain detailed knowledge of the systems' internal logic.
B)  The black-box approach could be adequate when automated systems applications are complicated.
C)  The auditors first calculate expected results from the transactions entered into the system.Then,the auditors compare these calculations to the processing or output results.
D)  All of the choices are correct.E) A) and C)
F) A) and B)

Question 6

Identify which fundamental control objective belongs with the following statement: "In the event of a power failure or other disaster,the operating system should be able to achieve a controlled termination of activities from which it can later recover."

Accepted Answer

A)  Protect the operating system from users.
B)  The operating system must protect users from each other.
C)  The operating system must be protected from itself.
D)  The operating system must be protected from its environment.
E)  The operating system must protect users from themselves.F) A) and D)
G) All of the above

Question 7

Which of the following best describes continuous auditing?

Accepted Answer

A)  Audit-related activities are peformed throughout the period under review.
B)  The full audit team remains on the client site for the entire fiscal year.
C)  The database extracts every 10th transaction and flags it for audit review.
D)  Auditors can generate greater fees by increasing the amount of manual testing performed for the client.E) A) and B)
F) All of the above

Question 8

Data governance is the convergence of data quality,data management,data policies,business process management,and risk management surrounding the handling of data in a company.

Accepted Answer

A) True 
 B)False

Question 9

Categorize the following scenario below as management,operational,or technical controls for wireless networks' security control. "Deciding how transmissions over wireless networks should be protected."

Accepted Answer

A)  Operational controls
B)  Technical Controls
C)  Management ControlsD) A) and B)
E) A) and C)

Question 10

Which of the following would not assist in continuous auditing?

Accepted Answer

A)  Transactions can be tested and analyzed closer in time to when they actually occur.
B)  Better compliance with laws and regulations.
C)  It can reduce the effort required for routine testing.
D)  It can be costly and time consuming to set up continuous auditing processes.E) B) and D)
F) A) and C)

Question 11

The Generally Accepted Auditing Standards (GAAS)issued by PCAOB provide guidelines for conducting an IS/IT audit.

Accepted Answer

A) True 
 B)False

Question 12

Most threats involving a wireless local area network (LAN) involve which of the following?

Accepted Answer

A)  The attacker has access to the operating system.
B)  The attacker has access to the radio link between a station and an access point.
C)  The attacker has accessed the premises of the company.
D)  The attacker has access to the virtual private network (VPN) .E) All of the above
F) A) and C)

Question 13

The data in a data warehouse are updated when transactions are processed.

Accepted Answer

A) True 
 B)False

Question 14

Which of the statements regarding a data warehouse is incorrect?

Accepted Answer

A)  It is a centralized collection of firm-wide data.
B)  The purpose of a data warehouse is to provide a rich data set for management to identify patterns and to examine trends of business events.
C)  Includes data for the current fiscal year only.
D)  The data in a data warehouse is pulled from each of the operational databases periodically.E) B) and C)
F) None of the above

Question 15

An auditor reviewing the risks associated with a firm's Wide area network (WAN) should pay particular attention to which of the following?

Accepted Answer

A)  Operating systems.
B)  Computer-assisted auditing techniques (CAATs) .
C)  Segregation of duties.
D)  Routers and firewalls.E) None of the above
F) All of the above

Question 16

Which of the following strategies will a CPA most likely consider in auditing an entity that processes most of its financial data only in electronic form,such as a paperless system?

Accepted Answer

A)  Continuous monitoring and analysis of transaction processing with an embedded audit module.
B)  Increased reliance on internal control activities that emphasize the segregation of duties.
C)  Verification of encrypted digital certificates used to monitor the authorization of transactions.
D)  Extensive testing of firewall boundaries that restrict the recording of outside network traffic.E) A) and B)
F) A) and D)

Question 17

Categorize the following scenario below as management,operational,or technical controls for wireless networks' security controls. "Providing regular updates in organizational policies and procedures to employees."

Accepted Answer

A)  Operational controls
B)  Technical Controls
C)  Management ControlsD) All of the above
E) A) and B)

Question 18

Identify which fundamental control objective belongs with the following statement: "One user must not be able to access,destroy,or corrupt the data or programs of another user."

Accepted Answer

A)  Protect the operating system from users.
B)  The operating system must protect users from each other.
C)  The operating system must be protected from itself.
D)  The operating system must be protected from its environment.
E)  The operating system must protect users from themselves.F) All of the above
G) B) and D)

Question 19

Which of the following uses best describes the use of a VPN?

Accepted Answer

A)  Connect computers,printers,and file servers in an office building.
B)  Lease dedicated communication lines to guarantee connection performance between remote office locations.
C)  Allow employees traveling for business to connect to home office computing resources.
D)  Allocates computing resources among multiple processors and operating systems.E) None of the above
F) C) and D)

Question 20

An auditor should be most concerned about which of the following when reviewing the risks of a company's wireless network:

Accepted Answer

A)  Confidentiality.
B)  Integrity.
C)  Availability.
D)  All of the choices are correct.E) None of the above
F) All of the above

Exam 15: Monitoring and Auditing Ais

An auditor reviewing the risks associated with a firm's Wide area network (WAN) should pay particular attention to which of the following?

Correct AnswerverifiedShow Answer

Identify which fundamental control objective belongs with the following statement: "In the event of a power failure or other disaster,the operating system should be able to achieve a controlled termination of activities from which it can later recover."

Correct AnswerverifiedShow Answer

If an auditor wanted to test the accuracy of a computer generated report they might use which of the the following approaches?

Correct AnswerverifiedShow Answer

Which of the following would not assist in continuous auditing?

Correct AnswerverifiedShow Answer

Most threats involving a wireless local area network (LAN) involve which of the following?

Correct AnswerverifiedShow Answer

An auditor should be most concerned about which of the following when reviewing the risks of a company's wireless network:

Correct AnswerverifiedShow Answer

Which of the statements regarding a data warehouse is incorrect?

Correct AnswerverifiedShow Answer

Which of the following strategies will a CPA most likely consider in auditing an entity that processes most of its financial data only in electronic form,such as a paperless system?

Correct AnswerverifiedShow Answer

Which of the following best describes continuous auditing?

Correct AnswerverifiedShow Answer

The Generally Accepted Auditing Standards (GAAS)issued by PCAOB provide guidelines for conducting an IS/IT audit.

Correct AnswerverifiedShow Answer

Which of the following uses best describes the use of a VPN?

Correct AnswerverifiedShow Answer

Categorize the following scenario below as management,operational,or technical controls for wireless networks' security control. "Deciding how transmissions over wireless networks should be protected."

Correct AnswerverifiedShow Answer

Parallel simulation uses an independent program to simulate a part of an existing application program,and is designed to test the validity and to verify the accuracy of an existing application program.

Correct AnswerverifiedShow Answer

Data governance is the convergence of data quality,data management,data policies,business process management,and risk management surrounding the handling of data in a company.

Correct AnswerverifiedShow Answer

List common security threats for wireless LANs.Find a specific case in which the security of wireless LANs was threatened.Given the case you find,comment on how to prevent or mitigate the threats?

Correct AnswerverifiedRogue Access Points: The attacker sets u...View AnswerShow Answer

What is the test data technique?

Correct AnswerverifiedShow Answer

The data in a data warehouse are updated when transactions are processed.

Correct AnswerverifiedShow Answer

Identify which fundamental control objective belongs with the following statement: "One user must not be able to access,destroy,or corrupt the data or programs of another user."

Correct AnswerverifiedShow Answer

Categorize the following scenario below as management,operational,or technical controls for wireless networks' security controls. "Providing regular updates in organizational policies and procedures to employees."

Correct AnswerverifiedShow Answer

Which of the following statements regarding the black-box approach for systems auditing is correct?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Rogue Access Points: The attacker sets u...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified