Test
SU 8.2
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (35)
1The basis of effective information security and cybersecurity are
- AA.De facto standards.
- BB.Policies.
- CC.De jure standards.
- DD.Procedures.
2A controller became aware that a competitor appeared to have access to the company’s pricing information. The internal auditor determined that the leak of information was occurring during the electronic transmission of data from branch offices to the head office. Which of the following controls would be most effective in preventing the leak of information?
- AA.Asynchronous transmission.
- BB.Encryption.
- CC.Use of fiber-optic transmission lines.
- DD.Use of passwords.
3The use of message encryption software
- AA.Guarantees the secrecy of data.
- BB.Requires manual distribution of keys.
- CC.Increases system overhead.
- DD.Reduces the need for periodic password changes.
4Which of the following is an encryption feature that can be used to authenticate the originator of a document and ensure that the message is intact and has not been tampered with?
- AA. Heuristic terminal.
- BB. Perimeter switch.
- CC. Default settings.
- DD. Digital signatures.
5A client communicates sensitive data across the Internet. Which of the following controls would be most effective to prevent the use of the information if it were intercepted by an unauthorized party?
- AA.A firewall.
- BB.An access log.
- CC.Passwords.
- DD.Encryption.
6To ensure privacy in a public-key encryption system, knowledge of which of the following keys would be required to decode the received message?
1.Private
2.Public- AA.1.
- BB.2.
- CC.Both 1 and 2.
- DD.Neither 1 nor 2.
7Which of the following is a true statement regarding security over an entity’s IT?
- AA.Controls should exist to ensure that users have access to and can update only the data elements that they have been authorized to access.
- BB.Controls over data sharing by diverse users within an entity should be the same for every user.
- CC.The employee who manages the computer hardware should also develop and debug the computer programs.
- DD.Controls can provide assurance that all processed transactions are authorized but cannot verify that all authorized transactions are processed.
8When a user enters a certain entity’s system, a series of questions is asked of the user, including a name and mother’s birth date. These questions are primarily intended to provide
- AA.Authorization for processing.
- BB.Access control to computer hardware.
- CC.Authentication of the user.
- DD.Data integrity control.
9What is a major disadvantage to using a private key to encrypt data?
- AA.Both sender and receiver must have the private key before this encryption method will work.
- BB.The private key cannot be broken into fragments and distributed to the receiver.
- CC.The private key is used by the sender for encryption but not by the receiver for decryption.
- DD.The private key is used by the receiver for decryption but not by the sender for encryption.
10A digital signature is used primarily to determine that a message is
- AA.Unaltered in transmission.
- BB.Not intercepted en route.
- CC.Received by the intended recipient.
- DD.Sent to the correct address.
11Which of the following IT developments poses the least risk to organizational security?
- AA.Adoption of wireless technology.
- BB.Use of public-key encryption.
- CC.Outsourcing of the IT infrastructure.
- DD.Enterprise-wide integration of functions.
12Which of the following does not present any risk for an entity under public-key encryption?
- AA.The transmission of the private keys between the parties.
- BB.The complexity of the private key.
- CC.The complexity of the public key.
- DD.The security of the information after encryption.
13The use of two-level authentication
- AA.Requires a username and password only.
- BB.Protects against a Trojan horse attack.
- CC.Requires information known only to the user.
- DD.Protects against a logic bomb.
14Which of the following is a computer program that appears to be legitimate but performs some illicit activity when it is run?
- AA.Hoax virus.
- BB.Web crawler.
- CC.Trojan horse.
- DD.Killer application.
15The best preventive measure against a computer virus is to
- AA.Compare software in use with authorized versions of the software.
- BB.Execute virus exterminator programs periodically on the system.
- CC.Allow only authorized software from known sources to be used on the system.
- DD.Prepare and test a plan for recovering from the incidence of a virus.
16Which of the following is an indication that a computer virus is present?
- AA.Frequent power surges that harm computer equipment.
- BB.Unexplainable losses of or changes to data.
- CC.Inadequate backup, recovery, and contingency plans.
- DD.Numerous copyright violations due to unauthorized use of purchased software.
17Managers at a consumer products company purchased personal computer software from only recognized vendors and prohibited employees from installing nonauthorized software on their personal computers. To minimize the likelihood of computer viruses infecting any of its systems, the company should also
- AA.Restore infected systems with authorized versions.
- BB.Recompile infected programs from source code backups.
- CC.Institute program change control procedures.
- DD.Test all new software on a stand-alone personal computer.
18Which of the following operating procedures increases an organization’s exposure to computer viruses?
- AA.Encryption of data files.
- BB.Frequent backup of files.
- CC.Downloading public-domain software from websites.
- DD.Installing original copies of purchased software on hard disk drives.
19An organization installed antivirus software on all its personal computers. The software was designed to prevent initial infections, stop replication attempts, detect infections after their occurrence, mark affected system components, and remove viruses from infected components. The major risk in relying on antivirus software is that antivirus software may
- AA.Not detect certain viruses.
- BB.Make software installation overly complex.
- CC.Interfere with system operations.
- DD.Consume too many system resources.
20What is the best course of action to take if a program takes longer than usual to load or execute?
- AA.Test the system by running a different application program.
- BB.Reboot the system.
- CC.Run antivirus software.
- DD.Back up the hard disk files to floppies.
21Because of competitive pressures to be more responsive to their customers, some organizations have connected their internal personal computer networks through a host computer to outside networks. A risk of this practice is that
- AA.Viruses may gain entry to one or more company systems.
- BB.Uploaded files may not be properly edited and validated.
- CC.Data downloaded to the personal computers may not be sufficiently timely.
- DD.Software maintenance on the personal computers may become more costly.
22Spoofing is one type of online activity used to launch malicious attacks. Spoofing is
- AA.Trying large numbers of letter and number combinations to access a network.
- BB.Eavesdropping on information sent by a user to the host computer of a website.
- CC.Accessing packets flowing through a network.
- DD.Identity misrepresentation in cyberspace.
23Which of the following is a malicious program, the purpose of which is to reproduce itself throughout the network and produce a denial of service attack by excessively utilizing system resources?
- AA.Logic bomb.
- BB.Virus.
- CC.Worm.
- DD.Trojan horse.
24The reliability and integrity of all critical information of an organization, regardless of the media in which the information is stored, is the responsibility of
- AA.Shareholders.
- BB.IT department.
- CC.Management.
- DD.All employees.
25Who determines whether the internal audit activity has access to resources sufficient to evaluate the reliability and integrity of information?
- AA.The chief executive officer.
- BB.The chief audit executive.
- CC.The external auditor.
- DD.The chief operating officer.
26Which of the following is part of the board’s role in protecting against privacy threats?
- AA.Establishing a privacy framework.
- BB.Identifying the information gathered by the organization that is deemed personal or private.
- CC.Identifying the methods used to collect information.
- DD.Determining whether the use of the information collected is in accordance with its intended use and the laws.
27Freedom from monitoring best defines
- AA.Personal privacy.
- BB.Privacy of space.
- CC.Privacy of communication.
- DD.Privacy of information.
28When evaluating management of the organization’s privacy framework, the internal auditor considers
- AA.The applicable laws relating to privacy.
- BB.Conferring with in-house legal counsel.
- CC.Conferring with information technology specialists.
- DD.All of the answers are correct.
29Which of the following statements is false with respect to information security?
- AA.Internal auditors should determine that senior management and the board, audit committee, or other governing body have a clear understanding that information reliability and integrity is the responsibility of the internal audit activity.
- BB.The chief audit executive should determine that the internal audit activity possesses, or has access to, competent auditing resources to evaluate information security and associated risk exposures.
- CC.Internal auditors should periodically assess the organization’s information security practices and recommend, as appropriate, enhancements to, or implementation of, new controls and safeguards.
- DD.Internal auditors should assess the effectiveness of preventive, detective, and mitigative measures against past attacks, as deemed appropriate, and future attempts or incidents deemed likely to occur.
30Which of the following is the best policy for the protection of a company’s vital information resources from computer viruses?
- AA.Stringent corporate hiring policies for staff working with computerized functions.
- BB.Existence of a software program for virus prevention.
- CC.Prudent management procedures instituted in conjunction with technological safeguards.
- DD.Physical protection devices in use for hardware, software, and library facilities.
31Which of the following statements is(are) correct regarding electronic mail security?
1. Electronic mail can be no more secure than the computer system on which it operates.
2. Confidential electronic mail messages should be stored on the mail server as electronic mail for the same length of time as similar paper-based documents.
3. In larger organizations, there may be several electronic mail administrators and locations with varying levels of security.- AA.1 only.
- BB.1 and 2 only.
- CC.1 and 3 only.
- DD.2 and 3 only.
32A shift from manual to information technology (IT) for business operations causes auditors to seek assurance primarily regarding
- AA.Processes.
- BB.External IT interfaces.
- CC.Third-party review.
- DD.Historical data accuracy.
33Select the cyberattack which is best associated with extorting an individual or an organization.
- AA.Ransomware.
- BB.Phishing.
- CC.Software piracy.
- DD.Hacking.
34All of the following are correct statements regarding smart devices except
- AA.The portability of smart devices is a major factor when assessing physical security risks.
- BB.Smart machines are automation technology.
- CC.Remote wipe is the process of deleting data and applications without physical access to the smart device.
- DD.Although smart devices have the capability of adapting their behavior based on experience, smart devices are not able to learn and operate on their own.
35Contingency plans for information systems should include appropriate backup agreements. Which of the following arrangements would be considered too vendor-dependent when vital operations require almost immediate availability of computer resources?
- AA.A “hot site” arrangement.
- BB.A “cold site” arrangement.
- CC.A “cold and hot site” combination arrangement.
- DD.Using excess capacity at another data center within the organization.
Información
- Descripción
- CIA Part 3 SU 8 Test sobre SU 8.2, creado por Sadan Dahal el 14/06/2020.
- Autor
- Sadan Dahal
- Idioma
- English
- Visitas
- 1
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test