Kaplan Postal Exam 473/473-C 1st Edition Lee Wherry Brainerd; C. Roebuck Reed - Solutions

Discover top-notch resources for mastering the Kaplan Postal Exam 473/473-C with our comprehensive solution manual. Access detailed answers and step-by-step solutions to enhance your understanding. Our online platform offers an extensive test bank with solved problems to guide you through each chapter. The instructor manual provides insights, while the textbook offers a complete overview. Download our solutions PDF for free to explore questions and answers that are pivotal for success. Elevate your preparation with our answers key, ensuring a thorough grasp of the subject matter.

Business disruptions anticipated could include:a. The need to retrain existing user staff.b. The need to retrain existing IS staff.c. The need to retrain existing IS audit staff.d. The need to retrain all staff.
The outcome of the feasibility study could be:a. Not to proceed.b. To acquire an external system.c. To develop a system internally.d. Any of the above.
Included within the feasibility study should be a section on:a. The use of the ‘waterfall’ methodology for the SDLC.b. The availability of resources to carry out the appropriate development or implementation.c. The detailed system specification.d. The access controls required for the new system.
Evaluation criteria used within a feasibility study must ensure:a. A bias towards in-house developed systems.b. A bias towards purchased systems packages.c. A bias towards externally developed systems.d. A complete lack of bias.
Special bridges into existing systems may be required if:a. There is no integration.b. The degree of integration is high.c. The degree of integration is low.d. Significant parts of the old system will be retained.
Factors to be considered in conducting a feasibility study include:a. The likelihood of successful implementation.b. The programming language the new system.c. The extent of documentation required.d. The number of sites running a package.
The systems maintenance review is:a. Restricted to hardware only.b. Restricted to software only.c. Used to determine the cost-effectiveness of new systems.d. Used to analyze existing systems to ensure they are operating as intended.
Response times in the event of a system problem would normally be included in:a. The RFI.b. The RD.c. The RFP.d. The proposal.
The user function role within the requirements definition is to ensure that it:a. Accurately and completely reflects the functional requirements for the proposed system.b. Incorporates the access control constraints within which the package must operate.c. Includes the implementation schedule.d.
A request for proposal (RFP) is intended to:a. Define the functional requirements of the proposed system.b. Define access control constraints for the new system.c. Gather information on currently available products.d. Elicit bids from the vendors.
A request for information (RFI) is intended to:a. Define the functional requirements of the proposed system.b. Define access control constraints for the new system.c. Gather information on currently available products.d. All of the above.
Acquiring an externally developed purchased program involves:a. Acquiring software, user testing, and systems maintenance.b. Programming, user testing, and acquiring software.c. User testing, systems maintenance, and user selection.d. User selection, programming, and system testing.
IS audit should be involved in the process of systems acquisition in order to:a. Implement appropriate controls of the acquisition process.b. Provide advice and assistance in control aspects.c. Reduce overall costs.d. Ensure the package is tailored for the organization.
Advantages of buying a computer package as opposed to developing it in-house include all of the following except:a. Enhanced management and control of the development process.b. Early implementation of the system.c. Transfer of risk to the software supplier.d. Cost reduction.
Systems may be acquired from:a. Computer dealers and distributors.b. Time-sharing companies.c. Leasing companies.d. All of the above.
knowledge management, decision support systems; classification of information systems.
Define the types of strategic information systems frameworks and applications: types of IS,
Describe the components of the IS/IT strategic planning: competitive strategies and business intelligence, link to corporate strategy.
Describe the policies and procedures as well as standards and processes utilized to support the IS strategy.
Define the process for the development, deployment, and maintenance of the IS strategy.
Define Cloud computing and its effect on Risk Management.
Describe in define the audit indicators.
Define control risks and opportunities in outsourcing.
Explain the components of performance measurement and reporting: IS balanced scorecard.
Explain what is required in order to manage IS delivery (operations) and support(maintenance).
Define what is required in software quality control management.
Define the functions involved in IS project management.
Define the components of the management of an IS infrastructure and alternative IS architecture configuration.
Threats to integrity and privacy from inside the organization include:a. Loss or destruction of assets by malicious acts.b. Errors from incompetence or carelessness.c. Deliberate exposure of private or privileged information.d. All of the above.
IS auditors sign off on changes in order to:a. Indicate that audits control requirements have been met.b. Indicate that all testing has been done.c. Indicate that the change control process has been effective.d. All of the above.
Change control is required to ensure all of the below except:a. All changes are audited.b. All changes are authorized.c. All authorized changes are made.d. Only authorized changes are made.
Changes may be required as a result of:a. Failures during normal operations.b. Changes to legislation.c. Changes to the business operation of the organization.d. All of the above.
The process of change control may include:a. Hardware only.b. Software only.c. Application software only.d. All of the above.
COBIT® is designed to be utilized by:a. Different levels of management.b. IT management.c. Audit management.d. User management.
‘Best practices’ may be described as:a. Practices appropriate to an organization based on its needs and capabilities.b. Practices performed by the best companies in an area.c. Mandatory for all IT sites.d. Essential to achieve adequate standards.
COBIT® may be defined as:a. Part of ISO 9000.b. An attempt to blend existing IT standards into one comprehensive structure.c. Mandatory for all IT sites.d. Limited to IS security only.
Using a steering committee has the primary objective of:a. Ensuring no single individual can be blamed for failure.b. Providing a discussion medium where all opinions can be aired.c. Bringing diverse skills and perspectives to bear on the alignment of the IS strategy.d. To ensure that interventions
Evaluation of IT planning would typically involve Audit looking at:a. Organization design.b. Span of control.c. IT command structures.d. Forecasting of needs and requirements.
Achieving information processing cost reduction is an indication of:a. Efficiency.b. Effectiveness.c. Value for money.d. Flexibility.
At the end of a five-year development program, the new information system was found not to achieve current corporate objectives. This most likely resulted from:a. Poor initial alignment of IS and organizational strategies.b. Failure of change management.c. Lack of flexibility in the final system.d.
Outsourcing of information system services is normally chosen when:a. The cost of in-house processing is low.b. The risks associated with executor function is determined to be too high to outsource.c. The organization does not have sufficient competence to tackle the work itself.d. All of the above.
Performance measurement using a one size fits all approach:a. Is inappropriate due to the extreme variations in architectures, methodologies, and approaches undertaken in developing and utilizing information systems.b. Is appropriate due to the extreme variations in architectures, methodologies,
A balanced scorecard involves measuring:a. Financial performance.b. Client satisfaction and internal business processes.c. The degree of innovation and learning.d. All of the above.
Performance measurement may be seen as:a. A methodology of offering feed-forward mechanisms to ensure continued quality of programs and services.b. An environment in which operational plans provide information to top executives.c. A methodology to prevent changes in both internal and external
Product quality is a measurement of:a. The degree to which customer needs and expectations are satisfied.b. Efficiency and effectiveness of the process which creates the end product.c. The economy and efficiency of the process which creates the end product.d. The degree to which customers’
In a waterfall cycle:a. The cycle starts with the development of a baseline product then moves through several iterations.b. Each activity cascades from the previous activity.c. Business strategy dictates the formulation of explicit user requirements.d. Audit is the verification stage, which may be
Archibald’s six phases include:a. Concept, development, and audit.b. Concept, definition, and audit.c. Development, definition, and audit.d. Concept, development, and definition.
The most critical component of project management is:a. An effective project manager.b. An effective project plan.c. Effectively monitoring deliverables.d. A constant audit presence.
Project control is designed to:a. Maximize the likelihood of successful outcomes.b. Minimize the risk of non-achievement of objectives.c. Eliminate delivery-risk.d. Control the consumption of resources.
A project may be defined as:a. An undertaking involving multiple individuals.b. An undertaking involving common techniques to develop a standardized product.c. A temporary endeavor undertaken to accomplish a unique purpose.d. Involving only the development of new software.
IT architectures will:a. Change constantly to ensure the best approach is taken to satisfy user requirements.b. Remain unchanged to ensure standardization of approach.c. Change occasionally as technology changes.d. Remain unchanged as it is independent of technology and requirements.
Describe the elements and procedures of risk analysis.
Quantify the impacts of computer risks.
Describe common risk factors.
Explain the use of risk-based auditing within an integrated approach.
Explain the function of risk analysis and its applicability in IS auditing.
Describe the nature of risk and its impact in a corporate environment.
Define the audit role in fraud prevention and detection.
Describe the classifications of reliability of audit evidence.
Describe the different classifications of audit evidence.
Differentiate among controllable, uncontrollable, and influenceable risks.
Differentiate among the types of IS risk.
Describe the differences between the concepts of inherent risk, control risk, and audit risk.
Define the role of the audit charter and describe its typical content.
Describe the role of management and its relationship with audit.
Differentiate between the roles of Internal and External IS auditing.
Describe the need for IS auditing.
Unknown internal controls indicate:a. A higher level of risk.b. A lower level of risk.c. An unacceptable level of risk.d. An acceptable level of risk.
Discretionary audit activities of those activities which:a. Must be carried out within the timespan of the audit plan.b. Are based upon management’s requests.c. Are decided upon using all risk factors.d. Are decided upon using only the most important risk factors.
The starting point for risk-based audit approach is:a. Determination of the overall business objectives of the organization.b. Determination of the individual detailed control objectives.c. Identification of the internal controls relied upon by management.d. Identification of best practice in
The primary reason for an IS risk-based audit approach is:a. To control costs within the IS function.b. To permit the efficient allocation of limited IS audit resources.c. To show management the areas in which the controls are deficient.d. To show the audit committee that IS audit is being carried
The most common source of IT threats is:a. Management.b. IS Auditors.c. Users.d. Outsiders.
Computer risks, exposures, and losses are:a. Always unintentional.b. Always intentional.c. The result of failure within the control systems.d. Controllable only to a certain extent.
Inherent risk can be defined as:a. The risk that significant business exposures have not been adequately addressed by the audit process.b. The likelihood of a significant loss occurring before taking into account the risk reducing factors.c. The risk which is left after control procedures have been
A commonly encountered problem as a result of computer risks is:a. Business interruption.b. Major changes to operations, programs, systems, and controls.c. Improvements in ethical climate and employee morale.d. Increased insurance costs.
COSO standards regarding information systems address:a. Accuracy and completeness of data input.b. Internally generated data used by the organization.c. Timeliness of external information gathering.d. The effective flow of communications throughout the organization.
ISACA standards:a. Are mandatory for all IS auditors.b. Give guidelines only and auditors may deviate where they feel appropriate.c. Give procedures only but do not set requirements.d. Are designed for the use of auditors only.
In gathering evidence an auditor will:a. Always use computer assisted audit tools and techniques.b. Use whichever tools and techniques are appropriate for the audit.c. Use the same audit program as last year.d. Design an audit program and follow it exactly.
Risk mitigation can be achieved by any of the following except:a. Risk avoidance.b. Risk elimination.c. Risk transference.d. Risk assumption.
A risk arising external to the organization which calls for a risk position to be taken by the organization is:a. An influenceable risk.b. A controllable risk.c. An uncontrollable risk.d. A strategic risk.
Key controls to mitigate risk are tested in order to determine the risk is being controlled in a manner which is:a. Adequate and effective.b. Adequate.c. At the level specified by management.d. Effective.
The core of the information processing architecture is the:a. Organization’s data.b. Mainframe communications.c. Mainframe computer.d. Servers.
A risk which measures the likelihood that a control process is not effective is an example of:a. Inherent risk.b. Audit risk.c. Control risk.d. Failure risk.
Results of last audit.Factors that best define materiality of audit risk are:a. 1 through 7.b. 2, 4, and 7.c. 1, 5, and 6.d. 3, 4, and 6.
Average value per transaction.
Value of ‘assets at risk’.
Significant management turnover.
Years since last audit.
Degree of system integration.
Volume of transactions.
Factors that should be considered when evaluating audit risk in an IS functional area include:
IS auditors may use a tool called ‘risk analysis’ in preparing work schedules. Which of the following would not be considered in performing a risk analysis?a. Financial exposure and potential loss.b. Skills available on the audit staff.c. Results of prior audits.d. Major operating changes.
Reasons for outsourcing IS audit could include:a. Lack of funds.b. Lack of in-house skills.c. Lack of time.d. Lack of direction.
IS Auditing professionalism is normally indicated by:a. Employing professional IS auditors.b. Outsourcing the IS audit function.c. Employing professional internal auditors.d. Compliance with internationally recognized standards.
For controls to be effective, they must be:a. Monitored continuously.b. Designed by IS auditors.c. Designed by internal auditors.d. Audited on a daily basis.
Understanding the business process involves:a. Identifying and examining the key activities.b. Designing and implementing control structures.c. Defining performance objectives.d. Selecting control strategies.
IS auditors are required to have skills in:a. Management processes.b. Technical processes within the organization.c. Understanding of IS risks and the use of appropriate control structures.d. Implementing IS controls.
According to the Standards, internal auditors review information systems to:a. Become familiar with the activities and controls to be audited, to identify areas for audit emphasis, and to invite auditee comments.b. Ensure that application systems meet management’s defined, authorized requirements
For which of these would “Dr. Ayisha Melville” be an acceptable entry?A. Box 1b B. Box 1c C. Box 5a D. None of the above
Damaged Item B was a broken Chinese vase. Where would you put its description?A. Line 3a B. Line 4a C. Line 4b D. Line 5c

Showing 5900 - 6000 of 8740

First
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
Last

Kaplan Postal Exam 473/473-C 1st Edition Lee Wherry Brainerd; C. Roebuck Reed - Solutions

Step by Step Answers