• Investment World
• eWorld
• Catalyst
• Mentor
• Life
• Canvas
• Praxis
• Urban Pulse
• Brand Quest

S. Kannan

S. Kannan puts together a few objective questions on information systems audit

THE following questions, mainly covering networks, telecommunications, software testing and controls, are basically meant for those preparing for the ISA and CISA exams:

1) Which facilitates deadlock detection and resolution: i) cycle checkers; ii) page-level locks; iii) row-level locks; and iv) read-only locks

2) Perturbation controls form part of: a) existence controls; b) presentation controls; c) inference controls; d) distribution controls

3) Serious threat of hacking is normally more from: a) vendors; b) ex-employees; c) consultants; d) competitors

4) The tendency of a system towards disorder is known as: a) trace; b) bug; c) error; d) entropy

5) Controls over end-user computing include: a) passwords; b) peer reviews; c) disaster recovery controls; d) audit trails

A — (a) to (d); B — (a), (c), (d); C — (a), (b), (c); D — (b), (c), (d)

6) The differential file technique facilitates: a) roll-forward; b) rollback; c) real-time dumping and reorganisation; d) incremental dumping

A — (b), (c), (d); B — (a), (b), (c); C — (a) (c), (d); D — (a) to (d)

7) Toll fraud is a potential risk in: a) voice mail; b) PBX mail

A — (a) only; B — (b) only; C — both (a) and (b); D — neither (a) nor (b)

8) Which constitutes disciplinary control: a) backup and recovery; b) file control totals reconciliation; c) segregation of duties; d) program checks

9) Dialog management is related to: a) transport layer; b) session layer; c) network layer; d) application layer

10) Which has greater possibility of collision: a) bus topology; b) tree topology; c) ring topology; d) star topology

11) Message sequence numbers is not an appropriate control in respect of which of the following: a) message duplication;

b) message insertion; c) message modification; d) message deletion.

12) The teleprocessing monitor system interfaces with: a) job scheduling system; b) operating system; c) database system; d) application programs

A — (b), (c), (d); B — (a) to (d); C — (a), (c), (d); D — (a), (b), (c)

13) A central network to which other networks are connected is called: a) gateway; b) backbone; c) pivot; d) broadband

14) The key objectives of a properly designed coding system are: a) convenience; b) evolvability; c) compactness; d) flexibility

A — (b), (c), (d); B — (a), (b), (c); C — (a), (c), (d); D — (a) to (d)

15) Computer assisted audit techniques have the following advantages: a) faster exception identification; b) comprehensive audit coverage; c) reduced audit risk; d) cost savings

A — (b), (c), (d); B — (a), (b), (d); C — (a) to (d); D — (a), (c), (d)

16) Logging strategies include: a) before images; b) after images; c) change parameters; d) input transactions

A — (a), (c), (d); B — (a) to (d); C — (a), (b), (d); D — (b), (c), (d)

17) Which of the following is not true in relation to LAN logical security control: a) logon attempts to the supervisor account should be logged on the system; b) passwords should be internally encrypted and not displayed; c) users should be interviewed for evaluating their awareness of security policies of the management; d) a LAN node need not be disabled automatically after a short span of inactivity

18) Logical access control exposures include: a) Salami technique; b) logic bomb; c) trap doors; d) data diddling

A — (a), (c), (d); B — (b), (c), (d); C — (a) to (d); D — (a), (b), (c)

19) Instruction input consists of: a) job control languages; b) question-answer dialogs; c) forms-based languages; d)

command languages

A — (a) to (d); B — (b), (c), (d); C — (a), (b), (c); D — (a), (c), (d)

20) Match the following: a) attribute sampling — i) confidence level; b) variable sampling — ii) judgmental sampling; c)

non-statistical sampling — iii) mean estimation sampling; d) statistical sampling — iv) frequency estimation sampling

A: (a), (ii); (b), (iii); (c), (iv); (d), (i)

B: (a), (iii); (b), (i); (c), (iv); (d), (ii)

C: (a), (iv); (b), (i); (c), (ii); (d), (iii)

D: (a), (iv); (b), (iii); (c), (ii); (d), (i)

21) Which of the following is not part of presentation controls: a) medium controls; b) batch output controls; c) layout controls; d) timing controls

22) Routers, switches, transmitters and satellites belong to: a) information layer; b) applications layer; c) networks layer;

d) transport layer

23) File checks include: a) retention date; b) generation number; c) control totals; d) internal label

A: (a) to (d); B: (b), (c), (d); C: (a), (c), (d); D: (a), (b), (c)

24) The selection criteria for modems are: a) speed; b) dialling method; c) answering method; d) cost of acquisition and operation

A: (a), (c), (d); B: (a), (b), (c); C: (b), (c), (d); D: (a) to (d)

25) Applications programmers should work in: a) production environment only; b) test environment only; c) both test and production environments; d) neither production nor test environment

26) Which gives superior signal quality: a) shielded twisted cable; b) unshielded twisted cable; c) coaxial cable; d) fibre optic cable

27) Input data devices include: a) MICR devices; b) optical mark sensing devices; c) OCR devices; d) card readers

A: (a), (b), (c); B: (a), (c), (d); C: (a) to (d); D: (b), (c), (d)

28) Which leads to packet-queuing delays: a) routers; b) repeaters; c) gateways; d) bridges

29) Physical access controls include: a) biometric door locks; b) video surveillance; c) deadman doors; d) alarm systems

A: (a), (b), (d); B: (a), (c), (d); C: (a) to (d); D: (a), (b), (c)

30) Which of the following allows a relation to contain multiple rows with the same primary key in SQL: a) granularity; b)

polyinstantiation; c) entity integrity; d) referential integrity

31) Which is not part of identification and authorization security feature: a) password locking; b) keyboard locking; c) smart cards; d) digital signature

32) Which device facilitates usage of many communication channels simultaneously: a) multiplexer; b) modem; c) cluster controller; d) protocol controller

33) Security functions in a document image processing system includes: a) terminal security; b) file security; c) general public security; d) view security

A: (a) to (d); B: (a), (b), (d); C: (a), (b), (c); D: (b), (c), (d)

Solution: 1) a; 2) c; 3) b; 4) d; 5) a; 6) d; 7) c; 8) c; 9) b; 10) d; 11) c; 12) B; 13) b; 14) D; 15) C; 16) B; 17) d; 18) C; 19) A; 20) D; 21) b; 22) d; 23) A; 24) D; 25) b; 26) d; 27) C; 28) c; 29) C; 30) b; 31) d; 32) a; 33) A

Article E-Mail :: Comment :: Syndication

Stories in this Section
Can a company invest in gold?

Copyright © 2003, The Hindu Business Line. Republication or redissemination of the contents of this screen are expressly prohibited without the written consent of The Hindu Business Line