What is not an application control? a. Preventive b. Detective c. Substantive d. Corrective

Who sets the tone for a business? a. Customers b. Shareholders c. Management d. Employees

Which risk strategy acknowledges said risk but does not act until it occurs? a. Avoid b. Transfer c. Mitigate d. Accept

Which is not a function of the segregation of duties? a. Custody b. Recording c. Reducing Accounting Errors d. Authorization

Which internal control is conducted year round? a. Risk Assessment b. Control Activities c. Information and Communication d. Monitoring

Information processing activities include a. only automated activities b. activities that retrieve, transform, and file data c. the sending of data between entities d. operational activities

Why do auditors and systems analysts use systems documentation? a. to understand, explain, and improve complex systems b. only to provide justification to management for systems investments c. to reduce the number and amount of external entities d. to eliminate evidence to be collected

A unique identifier that serves as an address for each row in a database is called: a. the query b. the primary key c. the composite key d. the form

Which of the following is not a function that a database management system performs? a. Defining the data. b. Defining the relations among data. c. Interfacing with the operating system for storage of the data on the physical media. d. Coordinating access to data stored in the applications programs.

An extra character added to a numeric code as a device to test the accuracy of data entered into a computer system is called a: a. control digit b. check digit c. mnemonic digit d. significant digit