Filters
Question type

Study Flashcards

Substantive testing techniques provide information about the accuracy and completeness of an application's processes.

Correct Answer

verifed

verified

Which of the following is not an essential feature of a disaster recovery plan?


A) off-site storage of backups
B) computer services function
C) second site backup
D) critical applications identified

Correct Answer

verifed

verified

Some companies separate systems analysis from programming/program maintenance.All of the following are control weaknesses that may occur with this organizational structure except


A) systems documentation is inadequate because of pressures to begin coding a new program before documenting the current program
B) illegal lines of code are hidden among legitimate code and a fraud is covered up for a long period of time
C) a new systems analyst has difficulty in understanding the logic of the program
D) inadequate systems documentation is prepared because this provides a sense of job security to the programmer

Correct Answer

verifed

verified

Corporate management (including the CEO)must certify monthly and annually their organization's internal controls over financial reporting.

Correct Answer

verifed

verified

Which of the following is NOT a requirement in management's report on the effectiveness of internal controls over financial reporting?


A) A statement of management's responsibility for establishing and maintaining adequate internal control user satisfaction.
B) A statement that the organization's internal auditors has issued an attestation report on management's assessment of the company's internal controls.
C) A statement identifying the framework used by management to conduct their assessment of internal controls.
D) An explicit written conclusion as to the effectiveness of internal control over financial reporting.

Correct Answer

verifed

verified

The same internal control objectives apply to manual and computer-based information systems.

Correct Answer

verifed

verified

When planning the audit,information is gathered by all of the following methods except


A) completing questionnaires
B) interviewing management
C) observing activities
D) confirming accounts receivable

Correct Answer

verifed

verified

Control risk is


A) the probability that the auditor will render an unqualified opinion on financial statements that are materially misstated
B) associated with the unique characteristics of the business or industry of the client
C) the likelihood that the control structure is flawed because controls are either absent or inadequate to prevent or detect errors in the accounts
D) the risk that auditors are willing to take that errors not detected or prevented by the control structure will also not be detected by the auditor

Correct Answer

verifed

verified

For disaster recovery purposes,what criteria are used to identify an application or data as critical?

Correct Answer

verifed

verified

Critical application and files...

View Answer

Substantive tests include


A) examining the safety deposit box for stock certificates
B) reviewing systems documentation
C) completing questionnaires
D) observation

Correct Answer

verifed

verified

Describe how a Corporate Computer Services Function can overcome some of the problems associated with distributed data processing.

Correct Answer

verifed

verified

The Corporate Computer Services Function...

View Answer

Explain the outsourcing risk of failure to perform.

Correct Answer

verifed

verified

Once a client firm has outsourced specif...

View Answer

A qualified opinion on management's assessment of internal controls over the financial reporting system necessitates a qualified opinion on the financial statements?

Correct Answer

verifed

verified

Adequate backups will protect against all of the following except


A) natural disasters such as fires
B) unauthorized access
C) data corruption caused by program errors
D) system crashes

Correct Answer

verifed

verified

What is program fraud?

Correct Answer

verifed

verified

Program fraud involves making ...

View Answer

What primary IT functions must be separated in a centralized firm?

Correct Answer

verifed

verified

separate systems development f...

View Answer

All of the following are recommended features of a fire protection system for a computer center except


A) clearly marked exits
B) an elaborate water sprinkler system
C) manual fire extinguishers in strategic locations
D) automatic and manual alarms in strategic locations

Correct Answer

verifed

verified

Tests of controls include


A) confirming accounts receivable
B) counting inventory
C) completing questionnaires
D) counting cash

Correct Answer

verifed

verified

Discuss the key features of Section 302 of the Sarbanes-Oxley Act.

Correct Answer

verifed

verified

Section 302 requires corporate managemen...

View Answer

How do the tests of controls affect substantive tests?

Correct Answer

verifed

verified

Tests of controls are used by the audito...

View Answer

Showing 21 - 40 of 128

Related Exams

Show Answer