Question 1

The operations run manual describes user procedures for an application and assists the user in preparing inputs and using outputs.

Accepted Answer

The answer of The operations run manual describes user procedures...

Question 2

A facility usually comprised of air-conditioned space with a raised floor,telephone connections,and computer ports,into which a subscriber can move equipment,is called a hot site.

Accepted Answer

A facility described is known as a colocation center or colo, not a hot site. A hot site is a fully equipped backup facility that an organization can immediately use if its primary site becomes unusable.

Question 3

Systems documentation provides an overall description of the application,including the system's purpose;an overview of system procedures;and sample source documents,outputs,and reports.

Accepted Answer

Systems documentation does indeed provide an overall description of the application, including the system's purpose, an overview of system procedures, and sample source documents, outputs, and reports.

Question 4

A fidelity bond indemnifies a company in case it suffers losses from defalcations committed by its employees.

Accepted Answer

A fidelity bond provides insurance coverage to protect a company from losses due to theft, embezzlement, or other dishonest acts committed by employees.

Question 5

Program documentation provides a description of an application program and usually includes the program's purpose,program flowcharts,and source code listings.

Accepted Answer

Program documentation typically includes a description of the program's purpose, flowcharts, and source code listings in order to provide a clear understanding of the program's functionality and operation.

Question 6

In a logic bomb attack,a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages,making it impossible for the attacked site to engage in its normal activities.

Accepted Answer

The description given in the statement is actually describing a Distributed Denial of Service (DDoS) attack, not a logic bomb attack. A logic bomb attack is a type of malicious software that is triggered by a specific event or condition, such as a particular time or date, and can cause damage to a system or network.

Question 7

Data encryption is a process that codes data to make it readable to human eye.

Accepted Answer

Data encryption is a process that codes data to make it unreadable to human eye by using complex algorithms and keys. The encrypted data remains in this form until it is decrypted using the correct key or algorithm.

Question 8

Business continuity planning is the process that identifies events that may threaten an organization and provide a framework whereby the organization will continue to operate when the threatened event occurs or resume operations with a minimum of disruption.

Accepted Answer

Business continuity planning is indeed the process of identifying potential threats to an organization and developing a plan to ensure that the organization can continue to operate or resume operations quickly and efficiently if one of those threats materializes.

Question 9

With continuous data protection (CDP)all data changes are data stamped and saved to secondary systems as the changes are happening.

Accepted Answer

CDP continuously saves and data stamps all changes as they occur, ensuring that the most up-to-date version of the data is always available for recovery.

Question 10

Program change controls provide assurance that all modifications to programs are authorized and documented,and that the changes are completed,tested,and properly implemented.

Accepted Answer

Program change controls are an important aspect of maintaining the integrity and security of software systems. They help to ensure that all modifications are made in a controlled and documented manner, reducing the risk of errors or unauthorized changes. By requiring that changes be properly tested and implemented, organizations can minimize the potential for system failures or data breaches.

Question 11

The disaster recovery strategy known as a cold site is a fully equipped data center that is made available to client companies for a monthly subscriber fee.

Accepted Answer

A cold site is a disaster recovery strategy where a secondary data center is available, but it is not fully equipped with the necessary hardware and infrastructure for immediate use. It may take time to fully set up and restore operations, unlike a hot site or warm site which are fully equipped and ready for immediate use.

Question 12

The most common biometric devices perform retinal eye scans.

Accepted Answer

The most common biometric devices use fingerprint or facial recognition technology, not retinal eye scans.

Question 13

COBIT 5 is more procedure-based than COBIT 4.1

Accepted Answer

COBIT 5 is more principle-based and integrates governance into the framework more comprehensively than COBIT 4.1, which was more process-oriented.

Question 14

The user manual gives detailed instructions to computer operators and to data control about a particular application.

Accepted Answer

The answer of The user manual gives detailed instructions to...

Question 15

Forced vacations is a policy of requiring an employee to take leave from the job and substitute another employee in his or her place.

Accepted Answer

Forced vacations are also known as mandatory vacations or furloughs, and the purpose of this policy is to reduce labor costs or restructuring. During the employee's forced vacation, another employee will be hired to fill the vacant position.

Question 16

Training materials help users learn their jobs and perform consistently in those jobs.

Accepted Answer

Training materials are designed to help users learn and understand the skills and knowledge required to perform their jobs efficiently and consistently.

Question 17

The WebTrust family of services offers best practices and e-business solutions related exclusively to B2B electronic commerce.

Accepted Answer

The WebTrust family of services offers best practices and e-business solutions related to both B2B and B2C electronic commerce.

Question 18

Antivirus is a technique to protect one network from another "untrusted" network.

Accepted Answer

Antivirus is a software that is designed to protect a device from malicious software or viruses, not to protect a network from an untrusted network. The term used to describe protection of a network from another untrusted network is firewall.

Question 19

Biometric identification systems identify authorized personnel through some unique physical trait such as fingers,hands,voice,eyes,face,or writing dynamics.

Accepted Answer

Biometric identification systems use unique physical traits for identification purposes.

Question 20

The disaster backup and recovery technique known as electronic vaulting is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

Accepted Answer

Electronic vaulting is a disaster backup and recovery technique whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

Quiz 8: Controlling Information Systems: Introduction to Pervasive Controls