IT/Business Continuity

Question 1

A malicious program replicates itself at each node of access to a network and sends copies of itself to each location it can reach from that node without attaching itself to an existing program or code. The program eventually finds and exploits a hole in the network security prompting a security breach

Answer 1

WORM: It spreads by sending copies of itself to terminals throughout a network. Worms may act to open holes in network security.

Question 2

Malicious programs that try to appear harmless by using social engineering (rhetorical techniques designed to make messages appear to be friendly, innocent, or sent by familiar contacts).

Answer 2

Trojan horses

Question 3

Software-based controls that check amounts or validate access based on logical rules.

Answer 3

Logic controls.

Question 4

What are the three processes involved in Identity and Access Management

Answer 4

1. Provisioning 2. Identity Management 3. Enforcement

Question 5

The need to maintain security and integrity of transmissions and the data they represent. One of the best means of managing the confidentiality of satellite transmissions would be.

Answer 5

Encryption: Encryption is the best means of managing the confidentiality of satellite transmissions because even if an unauthorized individual recorded the transmissions, they would not be intelligible.

Question 6

To reduce security exposure when transmitting proprietary data over communication lines, a company should use?

Answer 6

Cryptographic devices protect data in transmission over communication lines.

Question 7

List the steps in the SDLC ( Systems Development Life Cycle)

Answer 7

1. Systems Planning 2. Systems Analysis 3. Systems design/system selection 4. Programming and customization/configuration 5. Conversion and implementation 6. Systems operation and refinement (feedback)

Question 8

Give an example of a input control?

Answer 8

A validation check at data entry that verifies that a quantity field contains only numbers is an example of a programmatic means of ensuring the accuracy of the value in that no nonnumeric characters are permitted; this is an input control.

Question 9

Which stage of the SDLC is most important for auditors to be involved in because they need to ensure specific controls are integrated?

Answer 9

Ensuring the system includes all of the necessary controls in the systems design stage is vital because such controls will be expensive if added later. For systems selection, auditors need to ensure specific controls are part of the selection criteria and should check that the controls actually exist once a package has been selected.

Question 10

After implementation of a new software system, the project team should

Answer 10

determine if the development process was conducted in compliance with policy.

Question 11

What is an Echo Check?

Answer 11

An echo check is a hardware control that checks for accuracy in data transmission;

Question 12

What is a sign check?

Answer 12

A sign check looks for positive or negative field restrictions

Question 13

Buy side, sell side, back office, and enterprise resources planning (ERP) are subcategories of which of the following layers of IT?

Answer 13

Applications are programs that perform specific tasks related to business processes. They may be transactional or support applications. Transactional applications perform buy side (e.g., procurement), sell side (e.g., order processing), back office (e.g., invoicing for payables, recording receivables), and enterprise resource planning (ERP), software that integrates some of the other functions.

Question 14

A device used to connect dissimilar networks is a

Answer 14

gateway, often implemented via software, translates between two or more different protocol families and makes connections between dissimilar networks possible.

Question 15

What are gateways, routers, bridges, and repeaters?

Answer 15

Gateways connect Internet computers of dissimilar networks. Routers determine the best path for data. Bridges connect physically separate LANs. Repeaters strengthen signal strength

Question 16

allows the use of batch totals and other controls, while simultaneously allowing changes to be viewed immediately

Answer 16

Memo posting is used by banks for financial transactions and others to create real-time entries that are posted to a temporary memo file. The memo file allows the updated information to be viewed; at a designated time, the memo file is batch processed to update the master file. Data is available immediately for viewing, but batch processing controls are applied before the changes become permanent.

Question 17

Describe Routers

Answer 17

includes intelligent processors that link network segments while keeping them separate and independent.

Question 18

Describe switches

Answer 18

which are devices that connect telecom circuits and may allow network management capabilities at Layer 3 and 4 of the OSI Model.

Question 19

What is distributed processing?

Answer 19

Distributed processing is a strategy where remote locations each have their own processing power, but all are networked together

Question 20

Concurrency controls are important to ensure that all updates to the database are recorded.

Answer 20

The controls address the problem of two users attempting to update the database at the same time.

Question 21

database elements would regulate whether a specific user role would have read-only access to particular data?

Answer 21

Schema, from schematic, are the rules for the overall database; subschema are files describing a portion of a database, including authorized read-only/full access users.