chapter 2 | tf

Question 1

To fulfill the segregation of duties control objective, computer processing functions (like authorization of credit and billing) are separated.

Answer 1

False

Question 2

To ensure sound internal control, program coding and program processing should be separated.

Answer 2

True

Question 3

Some systems professionals have unrestricted access to the organization’s programs and data.

Answer 3

True

Question 4

IT governance focuses on the management and assessment of strategic IT resources.

Answer 4

True

Question 5

Distributed data processing places the control IT recourses under end users.

Answer 5

True

Question 6

An advantage of distributed data processing is that redundant tasks are greatly eliminated.

Answer 6

False

Question 7

Certain duties that are deemed incompatible in a manual system may be combined in a computer-based information system environment.

Answer 7

True

Question 8

To improve control and efficiency, the CBIS tasks of new systems development and program maintenance should be performed by the same individual or group.

Answer 8

False

Question 9

In a CBIS environment, data consolidation protects corporate data from computer fraud and losses from disaster.

Answer 9

False

Question 10

The database administrator should be separated from systems development.

Answer 10

True

Question 11

A disaster recovery plan is a comprehensive statement of all actions to be taken after a disaster.

Answer 11

True

Question 12

RAID is the use of parallel disks that contain redundant elements of data and applications.

Answer 12

True

Question 13

Transaction cost economics (TCE) theory suggests that firms should outsource specific non-core IT assets.

Answer 13

False

Question 14

Commodity IT assets easily acquired in the marketplace and should be outsourced under the core competency theory.

Answer 14

False

Question 15

A database administrator is responsible for the receipt, storage, retrieval, and custody of data files.

Answer 15

False

Question 16

A ROC usually involves two or more user organizations that buy or lease a building and remodel it into a computer site, but without the computer and peripheral equipment.

Answer 16

False

Question 17

Fault tolerance is the ability of the system to continue operation when part of the system fails due to hardware failure, application program error, or operator error.

Answer 17

True

Question 18

An often-cited benefit of IT outsourcing is improved core business performance.

Answer 18

True

Question 19

Commodity IT assets include such things are network management.

Answer 19

True

Question 20

Specific IT assets support an organization’s strategic objectives.

Answer 20

True

Question 21

A generally accepted advantage of IT outsourcing is improved security.

Answer 21

False

Question 22

An advantage of distributed data processing is that individual end user groups set specific IT standards without concern for the broader corporate needs.

Answer 22

False

Question 23

A mutual aid is the lowest cost disaster recovery option, but has shown to be effective and low risk.

Answer 23

False

Question 24

Critical applications should be identified and prioritized by the user departments, accountants, and auditors.

Answer 24

True

Question 25

A widespread natural disaster is a risk associated with a ROC.

Answer 25

True