Question 1

The WebTrust family of services offers best practices and e-business solutions related exclusively to B2B electronic commerce.

Accepted Answer

The WebTrust family of services offers best practices and e-business solutions related to all types of electronic commerce, not just B2B.

Question 2

Antivirus is a technique to protect one network from another "untrusted" network.

Accepted Answer

Antivirus is a software program designed to detect, prevent, and remove malicious software from a computer system or network. Its primary function is to protect the computer or network from malware, viruses, worms, trojan horses, spyware, adware, and other malicious software that can cause damage, steal data, or disrupt operations. Antivirus software does not protect one network from another "untrusted" network. That is the job of firewalls and other security measures.

Question 3

A fidelity bond indemnifies a company in case it suffers losses from defalcations committed by its employees.

Accepted Answer

A fidelity bond is a type of insurance that protects a company from losses resulting from dishonest or fraudulent acts committed by its employees. The bond provides coverage for embezzlement, theft, or other types of financial fraud. If an employee defrauds the company and causes financial losses, the fidelity bond will indemnify the company and compensate it for the damages suffered.

Question 4

Program documentation provides a description of an application program and usually includes the program's purpose, program flowcharts, and source code listings.

Accepted Answer

Program documentation typically includes a description of the program's purpose, program flowcharts, and source code listings, among other details, and is used to provide insight into a program's implementation for developers, users, and other stakeholders.

Question 5

Business continuity planning is the process that identifies events that may threaten an organization and provide a framework whereby the organization will continue to operate when the threatened event occurs or resume operations with a minimum of disruption.

Accepted Answer

Business continuity planning is indeed the process of identifying potential threats to an organization and creating a plan to continue or resume operations with minimal disruption.

Question 6

A facility usually comprised of air-conditioned space with a raised floor, telephone connections, and computer ports, into which a subscriber can move equipment, is called a hot site.

Accepted Answer

A facility described is known as a colocation center or colo, not a hot site. A hot site is a fully equipped backup facility that an organization can immediately use if its primary site becomes unusable.

Question 7

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

Accepted Answer

A cold site is a facility that is not immediately ready for use but has the necessary infrastructure (power, connectivity, etc.) for setting up data center operations, unlike a fully equipped data center.

Question 8

Forced vacations is a policy of requiring an employee to take leave from the job and substitute another employee in his or her place.

Accepted Answer

Forced vacations, also known as mandatory vacations or "furloughs," require employees to take a certain amount of time off from work as a way to reduce costs or provide necessary coverage. During this time, another employee is typically hired to fill in for the absent worker.

Question 9

With continuous data protection (CDP) all data changes are data stamped and saved to secondary systems as the changes are happening.

Accepted Answer

With continuous data protection, data changes are recorded and saved in real time, ensuring that the most up-to-date version of the data is always available in secondary systems.

Question 10

Training materials help users learn their jobs and perform consistently in those jobs.

Accepted Answer

Training materials are created specifically to assist users in learning new skills and knowledge. The goal is for users to perform consistently, effectively and efficiently in their job roles.

Question 11

The user manual gives detailed instructions to computer operators and to data control about a particular application.

Accepted Answer

The answer of The user manual gives detailed instructions to...

Question 12

In a logic bomb attack, a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages, making it impossible for the attacked site to engage in its normal activities.

Accepted Answer

The description given in the statement is actually describing a Distributed Denial of Service (DDoS) attack, not a logic bomb attack. A logic bomb attack is a type of malicious software that is triggered by a specific event or condition, such as a particular time or date, and can cause damage to a system or network.

Question 13

Systems documentation provides an overall description of the application, including the system's purpose; an overview of system procedures; and sample source documents, outputs, and reports.

Accepted Answer

Systems documentation typically includes these components, providing a comprehensive guide to the system's functions and capabilities.

Question 14

Biometric identification systems identify authorized personnel through some unique physical trait such as fingers, hands, voice, eyes, face, or writing dynamics.

Accepted Answer

Biometric identification systems use unique physical traits to identify authorized individuals.

Question 15

The disaster backup and recovery technique known as electronic vaulting is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

Accepted Answer

Electronic vaulting is a disaster backup and recovery technique where data changes are continuously transmitted over the Internet to an off-site server maintained by a third party.

Question 16

The most common biometric devices perform retinal eye scans.

Accepted Answer

The most common biometric devices perform fingerprint scans, not retinal eye scans.

Question 17

Program change controls provide assurance that all modifications to programs are authorized and documented, and that the changes are completed, tested, and properly implemented.

Accepted Answer

This statement is true. Program change controls are important for ensuring that changes to programs are made in a controlled and documented manner to reduce the risk of introducing errors or vulnerabilities into the system.

Question 18

Data encryption is a process that codes data to make it readable to human eye.

Accepted Answer

Data encryption is a process that codes data to make it unreadable to human eye. The purpose of encryption is to protect the confidentiality of data by making it difficult for unauthorized individuals to access or interpret it.

Question 19

The operations run manual describes user procedures for an application and assists the user in preparing inputs and using outputs.

Accepted Answer

The answer of The operations run manual describes user procedures...

Question 20

COBIT 5 is more procedure-based than COBIT 4.1

Accepted Answer

COBIT 5 is more principle-based and integrates governance into the framework more comprehensively than COBIT 4.1, which was more process-oriented.

Quiz 8: Controlling Information Systems: Introduction to Pervasive Controls