BEC - Information Technology

Question 1

Objective of Logical Security Controls

Answer 1

To restrict access to specific data and resources

Question 2

Self Checking Digit

Answer 2

Generated when the data element is input. Prescribed arithmetic operation is automatically done and stored on this element. The operation is then performed later on to ensure that the number has not been recorded incorrectly.

• Compatibility test validates data within the field
• Hash total is total of nonquantitative field such as account number to be sure all records are processed
• Record Count summarized the # of records processed

Question 3

Data Mining

Answer 3

Help examine large amounts of data to discover previously unknown information and patterns. It can identify trends and outcomes that are not easily identifiable by looking at higher-level or summary data

Question 4

Master File

Answer 4

Used in electronic data processing and contains permanent information used for reference and updated periodically. PERMANENT

Question 5

Query Utility Program

Answer 5

Used to access information contained in databases. Provide users with online access to database information items and characterized by their ability to design an ad hoc query to only retrieve information needed by the user.

Question 6

Quality Assurance Function(s)

Answer 6

Determine if change achieved their objectives.

Question 7

Data Loading Process

Answer 7

1. ) Extraction - Process of gathering and retrieving data captured within unstructured sources (email, social media, images, barcodes)
2. ) Data Cleansing & Transformation - increases efficiency of analytic and business processes to enable better data-driven decisions. Can Happen during extraction. After this comes Data Mapping.
3. ) Data Loading - Loading data into a target data warehouse database. Final Step.

Data Cleansing - Checking data against predefined rules.

Question 8

Batch Processing

Answer 8

Updating Master Files periodically to reflect all transactions that occurred during a given time period. Transactions are processed as a batch, can cause time delays.

Question 9

Systems Development Life Cycle (SDLC) 5 Stages

Answer 9

1. ) System Analysis
2. ) Conceptual Design
3. ) Physical Design
4. ) Implementation and Conversion
5. ) Maintenance

Question 10

SOC 1 Report

Answer 10

System and Organization Controls 1 reports on the controls at a service organization relevant to user entities’ internal control over financial reporting (ICFR)

Question 11

Run-to-Run Controls

Answer 11

Able to accumulate separate totals for all transactions processed during the day and agree to the totals to the total of items accepted for processing.

Question 12

Hash Total

Answer 12

Type of batch control total, it is the summation of a quantitative but noninformational data field

Question 13

Revenue Cycle

Financing/Treasury Cycle

Answer 13

A recurring set of business and data processing activities associated with selling goods and services to customers in exchange for cash. It produces info that is used by other accounting cycles.

This is where companies obtain funds from investors and creditors. Not a business activity with selling goods and services.

Question 14

Range Checking

Answer 14

Involves checking a number in a transaction to determine whether that number falls within a specified range.

Question 15

Application Controls

Answer 15

Refer to the transactions and data relating to each computer-based application system and are specific to each process

Question 16

Check Digit

Answer 16

Specific type of input control, consisting of a single digit at the end of an ID code that is computed from other digits in a field.

Question 17

Edit Checks

Answer 17

Type of Input (App or procedural) control. They are by the computer to check the validity, accuracy, and reasonableness of the input data from source documents.

Question 18

Encryption

Answer 18

Transforming data, called plaintext, into unreadable gibberish called ciphertext.

Decryption reverses this process, transforming ciphertext back into plaintext.

Question 19

What does an access control matrix consist of:

Answer 19

• A List of all authorized user code #s and passwords
• A list of all files and programs maintained on the system
• A record of the type of access to which each user is entitled

Question 20

Data Extraction

Answer 20

Process of gathering and retrieving data captured within unstructured and semi-structured sources for conversion into structured data.

Question 21

DSS (Decision Support System)

Answer 21

Provides interactive problem-solving assistance.
It provides the decision maker with access to the computational capabilities, models, and data resources of the system to help in exploring the problem and developing potential solutions.

Question 22

DSS (Decision Support System)

Answer 22

Provides interactive problem-solving assistance.
It provides the decision maker with access to the computational capabilities, models, and data resources of the system to help in exploring the problem and developing potential solutions.

Question 23

ERP (Enterprise Resource Planning)

Answer 23

These systems integrate all aspects of a company’s operations with its I.S.

Errors during the implementation phase can cause the most damage.

Question 24

Infrastructure as a service (IaaS)

Answer 24

Provides the basic building blocks for cloud IT and typically provides access to IT infrastructure assets (Servers and Virtual Machines (VMs), storage, networks, operating systems) from a cloud provider who charges on a pay-as-you-go basis.