Question 1

Which of the following deal with transaction legitimacy?

Accepted Answer

A)   transaction authorization and validation
B)   access controls
C)   EDI audit trail
D)   all of the aboveE) B) and C)
F) A) and B)

Question 2

Which of the following is not an access control in a database system?

Accepted Answer

A)   antivirus software
B)   database authorization table
C)   passwords
D)   voice printsE) A) and B)
F) B) and C)

Question 3

What are the three security objectives of audit trails? Explain.

Accepted Answer

Audit trails support system security objectives in three ways. By detecting unauthorized access to the system, the audit trail protects the system from outsiders trying to breach system controls. By monitoring system performance, changes in the system may be detected. The audit trail can also contribute to reconstructing events such as system failures, security breaches, and processing errors. In addition, the ability to monitor user activity can support increased personal accountability.

Question 4

Explain how SYN Flood attacks can be controlled.

Accepted Answer

Two things can be done:
First, Internet ...

Question 5

Firewalls are

Accepted Answer

A)   special materials used to insulate computer facilities
B)   a system that enforces access control between two networks
C)   special software used to screen Internet access
D)   none of the aboveE) B) and D)
F) A) and C)

Question 6

Describe two ways that passwords are used to authorize and validate messages in the electronic data interchange environment.

Accepted Answer

value-added networks use passwords to de...

Question 7

All of the following techniques are used to validate electronic data interchange transactions except

Accepted Answer

A)   value added networks can compare passwords to a valid customer file before message transmission
B)   prior to converting the message, the translation software of the receiving company can compare the password against a validation file in the firm's database
C)   the recipient's application software can validate the password prior to processing
D)   the recipient's application software can validate the password after the transaction has been processedE) None of the above
F) A) and C)

Question 8

Which of the following is not a test of access controls?

Accepted Answer

A)   biometric controls
B)   encryption controls
C)   backup controls
D)   inference controlsE) None of the above
F) C) and D)

Question 9

Describe one benefit of using a call-back device.

Accepted Answer

Access to the system is achieved when th...

Question 10

All of the following tests of controls will provide evidence that access to the data files is limited except

Accepted Answer

A)   inspecting biometric controls
B)   reconciling program version numbers
C)   comparing job descriptions with access privileges stored in the authority table
D)   attempting to retrieve unauthorized data via inference queriesE) B) and D)
F) None of the above

Question 11

Describe three ways in which IPS can be used to protect against DDoS Attacks?

Accepted Answer

1) IPS cam work inline with a firewall a...

Question 12

Which method is most likely to detect unauthorized access to the system?

Accepted Answer

A)   message transaction log
B)   data encryption standard
C)   vertical parity check
D)   request-response techniqueE) A) and B)
F) B) and D)

Question 13

What are biometric devices?

Accepted Answer

Biometric devices measure various person...

Question 14

Which of the following is not a basic database backup and recovery feature?

Accepted Answer

A)   checkpoint
B)   backup database
C)   transaction log
D)   database authority tableE) A) and D)
F) B) and D)

Question 15

Explain how smurf attacks can be controlled.

Accepted Answer

The targeted organization can ...

Question 16

Hackers can disguise their message packets to look as if they came from an authorized user and gain access to the host's network using a technique called

Accepted Answer

A)   spoofing.
B)   spooling.
C)   dual-homed.
D)   screening.E) B) and C)
F) None of the above

Question 17

A software program that replicates itself in areas of idle memory until the system fails is called a

Accepted Answer

A)   Trojan horse
B)   Worm
C)   logic bomb
D)   none of the aboveE) A) and C)
F) B) and D) B

Question 18

A firewall is a hardware partition designed to protect networks from power surges.

Accepted Answer

A) True 
 B)False

Question 19

Audit objectives for communications controls include all of the following except

Accepted Answer

A)   detection and correction of message loss due to equipment failure
B)   prevention and detection of illegal access to communication channels
C)   procedures that render intercepted messages useless
D)   all of the aboveE) C) and D)
F) None of the above D

Question 20

A formal log-on procedure is the operating system's last line of defense against unauthorized access.

Accepted Answer

A) True 
 B)False

Exam 16: IT Controls Part II: Security and Access

Which of the following deal with transaction legitimacy?

Correct Answer
verified

Which of the following is not an access control in a database system?

Correct Answer
verified

What are the three security objectives of audit trails? Explain.

Explain how SYN Flood attacks can be controlled.

Correct Answer
verified
Two things can be done:
First, Internet ...
View Answer

Firewalls are

Correct Answer
verified

Describe two ways that passwords are used to authorize and validate messages in the electronic data interchange environment.

Correct Answer
verified
value-added networks use passwords to de...
View Answer

All of the following techniques are used to validate electronic data interchange transactions except

Correct Answer
verified

Which of the following is not a test of access controls?

Correct Answer
verified

Describe one benefit of using a call-back device.

Correct Answer
verified
Access to the system is achieved when th...
View Answer

All of the following tests of controls will provide evidence that access to the data files is limited except

Correct Answer
verified

Describe three ways in which IPS can be used to protect against DDoS Attacks?

Correct Answer
verified
1) IPS cam work inline with a firewall a...
View Answer

Which method is most likely to detect unauthorized access to the system?

Correct Answer
verified

What are biometric devices?

Correct Answer
verified
Biometric devices measure various person...
View Answer

Which of the following is not a basic database backup and recovery feature?

Correct Answer
verified

Explain how smurf attacks can be controlled.

Correct Answer
verified
The targeted organization can ...
View Answer

Hackers can disguise their message packets to look as if they came from an authorized user and gain access to the host's network using a technique called

Correct Answer
verified

A software program that replicates itself in areas of idle memory until the system fails is called a

Correct Answer
verified
B

A firewall is a hardware partition designed to protect networks from power surges.

Correct Answer
verified

Audit objectives for communications controls include all of the following except

Correct Answer
verified
D

A formal log-on procedure is the operating system's last line of defense against unauthorized access.

Correct Answer
verified

Exam 16: IT Controls Part II: Security and Access

Which of the following deal with transaction legitimacy?

Correct AnswerverifiedShow Answer

Which of the following is not an access control in a database system?

Correct AnswerverifiedShow Answer

What are the three security objectives of audit trails? Explain.

Explain how SYN Flood attacks can be controlled.

Correct AnswerverifiedTwo things can be done:First, Internet ...View AnswerShow Answer

Firewalls are

Correct AnswerverifiedShow Answer

Describe two ways that passwords are used to authorize and validate messages in the electronic data interchange environment.

Correct Answerverifiedvalue-added networks use passwords to de...View AnswerShow Answer

All of the following techniques are used to validate electronic data interchange transactions except

Correct AnswerverifiedShow Answer

Which of the following is not a test of access controls?

Correct AnswerverifiedShow Answer

Describe one benefit of using a call-back device.

Correct AnswerverifiedAccess to the system is achieved when th...View AnswerShow Answer

All of the following tests of controls will provide evidence that access to the data files is limited except

Correct AnswerverifiedShow Answer

Describe three ways in which IPS can be used to protect against DDoS Attacks?

Correct Answerverified1) IPS cam work inline with a firewall a...View AnswerShow Answer

Which method is most likely to detect unauthorized access to the system?

Correct AnswerverifiedShow Answer

What are biometric devices?

Correct AnswerverifiedBiometric devices measure various person...View AnswerShow Answer

Which of the following is not a basic database backup and recovery feature?

Correct AnswerverifiedShow Answer

Explain how smurf attacks can be controlled.

Correct AnswerverifiedThe targeted organization can ...View AnswerShow Answer

Hackers can disguise their message packets to look as if they came from an authorized user and gain access to the host's network using a technique called

Correct AnswerverifiedShow Answer

A software program that replicates itself in areas of idle memory until the system fails is called a

Correct AnswerverifiedB

A firewall is a hardware partition designed to protect networks from power surges.

Correct AnswerverifiedShow Answer

Audit objectives for communications controls include all of the following except

Correct AnswerverifiedD

A formal log-on procedure is the operating system's last line of defense against unauthorized access.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Two things can be done:
First, Internet ...
View Answer

Correct Answer
verified

Correct Answer
verified
value-added networks use passwords to de...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Access to the system is achieved when th...
View Answer

Correct Answer
verified

Correct Answer
verified
1) IPS cam work inline with a firewall a...
View Answer

Correct Answer
verified

Correct Answer
verified
Biometric devices measure various person...
View Answer

Correct Answer
verified

Correct Answer
verified
The targeted organization can ...
View Answer

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified
D

Correct Answer
verified