Information Systems Quiz 4

Quiz 4 Which of the following is NOT an audit type? External audits Internal audits independent audits Quality assurance Which of the following is NOT true for batch controls? Provides assurance that an audit trail of transactions is created It is a method used to manage high volumes of transaction data through a system Provides assurance that all records in batch are processed Provide assurance that no records are processed more than twice Which of the following is NOT a class of input controls? input error correction output error controls data coding controls source document controls Which of the following is NOT an IT governance procedure/concept in managing people? ethics statement health check agreement confidentiality agreement noncompetition agreement Which of the following is NOT a management control? security management programming management top management audit management Which of the following is NOT a processing controls? Audit trail controls Operator intervention controls Processor controls Run-to-run controls Which of the following is NOT true for source document controls? use source documents in random order periodically audit source documents techniques to prevent source document fraud use pre-numbered source documents Which of the following is NOT a possible correction/action to input error? Complain to the manager Create an error file Reject entire batch Immediate correction Which of the following is NOT true for check digits? A method to detect data coding errors Summing the digits (with different weights) in the code and use the remainder of this sum as the check digit It can detect some transcription errors but not transposition errors A control digit added to the code that allows the confidentiality of the code to be established during subsequent processing What is SLA in outsourcing? Staffing level agreement Staff leader appraisal Service level agreement Service level authorization Which of the following is NOT a purpose of having independent audits? Government requirement for taxation use Certification Product approval Licencing The concept/theory/model to link up management controls framework and application controls framework is called: Bird's nest concept Pig's hand model Bull's eye model Elephant's toy theory Which of the following is NOT a kind of transcription error? truncation errors addition errors subtraction errors substitution errors Which of the following is NOT a content inside the batch transmittal sheet? Total dollar value of a unique non-financial field Number of records in batch A transaction code A unique batch number Which of the following is NOT a task done by IS auditor? gather meaningful evidence define audit process establish audit criteria render independent opinion about external controls Which of the following is NOT a kind of record interrogation? Alphanumeric checks Sequence check Reasonableness checks Sign check Which of the following is NOT a focused area of COBIT? Resource management Performance measurement Value delivery of services and new projects Strategic alignment of IT with business partners Why does batch output controls so important? output could be misleading output could be misdirected output could be reviewed output could be copied Which of the following is NOT a technique to preserve audit trails? Listing of automatic transactions Transaction logs Transactions listing Log of automatic transactions Which of the following is NOT a good candidate of hash controls? Total of invoice number Total of invoice item codes Total of invoice dates Total of invoice description Which of the following is NOT a management control? data resource management quality assurance management tactical management systems development management Which of the following is NOT a kind of internal controls? Independent verification IS Auditing Supervision Access control Which of the following is NOT an auditor's interest in operational delivery? Expectation on IT deliverables Ensure proper controls are in place and are inappropriate to the unique risks of each source and location Evaluate whether the organization has provided effective daily support in accordance with the IS strategy Systematic decomposition of how each business objective is translated down into specific needs and are fulfilled by specific tasks Expiration date check is: the checking against field expiry date the checking against file expiry date the checking against record expiry date the checking against record existence date Which of the following is NOT a level of controls? corrective destructive preventive detective Which of the following is NOT a level of input validation controls? record interrogation file interrogation field interrogation entity interrogation Which of the following is NOT an application control? data resource management input controls output controls boundary controls Which of the following is NOT true for IT Governance? Intervention as required to stop, modify or fix failures as they occur Specifies the level of integration and control an organization has over its information technology investment Process to monitor assurance practices for customers Strategic alignment between IT and the enterprise objectives Which of the following IS an example of transcription errors? 83276 has been wrongly recorded as 86723 83276 has been wrongly recorded as 83376 83276 has been wrongly recorded as 83267 83276 has been wrongly recorded as 87236 Which of the following is NOT a purpose of having external audits? Required by customer who has the business with this company Required by professional association in compliance with the required corporate governance Required by Government for random checking purpose Required by vendor who has the business with this company Which of the following is the least preferred level of controls? corrective detective preventive destructive Which of the following is the most preferred level of controls? Corrective Destructive Detective Preventive Which of the following is NOT the auditor's ISACA Professional Code of Conduct? Perform auditors' duties with subjectivity, due diligence and professional care Support the implementation of, and encourage compliance with, appropriate standards, procedures and controls for information systems Maintain competency in auditors' respective fields and agree to undertake only those activities, which they can reasonably expect to complete with professional competence Support the professional education of stakeholders in enhancing their understanding of information systems security and control Which of the following is NOT a kind of field interrogation? Missing data checks Range checks Metadata checks Zero-value checks What is printing output spooling / spooler? It is a method which can calculate the best printing path It is a procedure to generate the printing output in good quality A temporary file holding the printer output until the printer can print more It is a software which can direct the printout to other printer Which of the following is NOT the auditor's ISACA Professional Code of Conduct? Serve in the interest of stakeholders in a lawful and honest manner while maintaining high standards of conduct and character and not engage in acts discreditable to the profession Maintain the privacy and confidentiality of information obtained in the course of auditors' duties unless disclosure is required by top management Perform auditors' duties with objectivity, due diligence and professional care Inform appropriate parties of the results of work performed and revealing all significant facts known to auditors What is parity/ECC? It is a solution to make sure the data are handled fairly It is a checksum method testing if the data after transmission has been altered or damaged It is to check whether the data are handled sufficiently It is a method to send information using ECC channel Which of the following is NOT an auditor's interest in tactical management? Change control process that involves exercises advance planning, risk management and due diligence Determine tactical management well integrated with measurable performance Gaining understanding of management tools in use and use of application controls Scope and extend of project management methodologies in use Which of the following is NOT true for open-source platform? Its software is not allowed to be sold to other parties without prior permission Software is free Support of its software is free Anybody has a chance to contribute there Suppose University Grants Committee (UGC) has a list of big data containing university students’ money borrowing status from various local banks. The structure of data items are as follow: {HKID#, Affiliated University, Affiliated College, Lending Bank, Borrow amount, Borrow date, Return date} What should be the {key, value} pair for the scenario of "Which bank has the highest loan amount?" ? {Lending Bank, Borrow amount} {Lending Bank + Borrow date, Borrow amount} {Lending Bank + Return date, Borrow amount} {HKID + Lending Bank, Borrow amount} Which of the following is NOT true for system design? Its hardware design refers to hardware systems selection and integration Software design refers to the systems testing and problem solving algorithm It contains hardware and software design It is one of the cornerstones in big data infrastructural design Which of the following is NOT a kind of segregation of duties? separate database administration from computer operations Separate Systems Development from Programming Separate systems design from systems development Separate database security from computer operations Which of the following is NOT an application control? quality assurance database controls communications controls processing controls Which of the following is NOT a step/operation of MapReduce? Mapping Splitting Sorting Counting Which of the following is NOT the correct representation format of {key, value} pair? {City + Branch + Salesman, Sales amount} {City, Branch, Sales amount} {City + Salesman, Sales amount} {City + Branch, Sales amount} Which of the following is NOT true for ECL? Its working mechanism is about 'How it is done to the data" It can support artificial intelligence It is a programming model under HPCC platform It is a declarative programming language Which of the following statement is NOT correct? Hadoop is mainly used in commercial areas while HPCC is mainly used in scientific areas Hadoop can only be used in MPP while HPCC can only be used in SMP architecture Both Hadoop and HPCC can support parallelism Both Hadoop and HPCC are the open-source platform