Page 144 - CITP Review

8. Information assurance is similar to other assurance but limited to the presentation of data. Which is
not an important factor in information assurance?
a. Quality.
b. Relatability.
c. Timeliness.
d. Auditability.

9. During ancient times, a written communication from royalty was sealed on the outside of the
envelope using wax imprinted with a unique ring of the royal person. Which of the following is the
best type of control being used in this instance?

a. Access control — authorization.
b. Access control — authentication.
c. Access control — both authorization and authentication.
d. Output control — data control group.

10. An application control that ensures data entered by a data entry operator is complete is an example
of what?

a. Preventive control.
b. Detective control.
c. Corrective control.
d. Access control.

11. Suppose you have a conventional debit card. You go to an ATM machine to withdraw cash from your
account. The ATM will not process your request without the card and its PIN. Which best describes
this type of control?

a. Multifactor access control.
b. Logical access control.
c. Application level control.
d. Data level control.
12. ABC Co. is a large utility that has an IT staff including programmers. The programmers write all of the
code (applications) being used in all financial systems using COBOL. Assume that as IT auditor, you
have gained an understanding of the ITGC related to application development. After interviewing the
CIO, the director of application development, and a senior programmer, you believe the staff uses a
set of standard operating procedures for developing software. You also believe the programmers
actually use those standards in a consistent manner. Which is the best next step for you as the IT
auditor?

a. Assess ITGCs as reasonably reliable.
b. Ask for documentation on a staging area and examine it.
c. Assess control environment as reasonably reliable.
d. Ask for documentation of a sample of programs and examine it.

© 2019 Association of International Certified Professional Accountants. All rights reserved. 3-60