FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 15: Auditing It Controls Part II: Security and Access

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 21

Essay

Review LaterAdd Note

Review Later

Explain how SYN flood attacks can be controlled.

Correct Answer

verified

Two things can be done:
First,Internet h...

View Answer

Show Answer

Question 22

Essay

Review LaterAdd Note

Review Later

A formal log-on procedure is the operating system's first line of defense.Explain how this works.

Correct Answer

verified

When the user logs on,he or she is prese...

View Answer

Show Answer

Question 23

Essay

Review LaterAdd Note

Describe two ways that passwords are used to authorize and validate messages in the electronic data interchange environment.

What are biometric devices?

List three methods of controlling unauthorized access to telecommunication messages.

Audit objectives for the database management system include all of the following except

Which of the following is not an access control in a database system?

The request-response technique should detect if a data communication transmission has been diverted.

Hackers can disguise their message packets to look as if they came from an authorized user and gain access to the host's network using a technique called

An integrated group of programs that supports the applications and facilitates their access to specified resources is called a(n)

Audit objectives in the electronic data interchange (EDI) environment include all of the following except

Computer viruses usually spread throughout the system before being detected.

Which control will not reduce the likelihood of data loss due to a line error?

Transaction logs are permanent records of transactions created to preserve audit trails in a computerized environment.

Discuss three sources of exposure (threats)to the operating system.

A software program that allows access to a system without going through the normal log-on procedures is called a

A firewall is a hardware partition designed to protect networks from power surges.

Audit trails in computerized systems are comprised of two types of audit logs: detailed logs of individual keystrokes and event-oriented logs.

In an electronic data interchange (EDI) environment,when the auditor compares the terms of the trading partner agreement against the access privileges stated in the database authority table,the auditor is testing which audit objective?

Malicious and destructive programs cause millions of dollars of loss to corporations annually.