SYS_S03_1

1. Which best describes the process of benchmarking?

• A. Comparison of actual performance with budget.

• B. Comparison of the costs of one product with another.

• C. Comparison of direct competitors' performance.

• D. Comparison of the performance of one operation or business with another.

2) The resource-based perspective suggests that unique firm resources should be the starting point for developing successful strategies.

• A. the business opportunity should be the starting point for developing successful strategies.

• B. Unique firm resources should be the starting point for developing successful strategies.

• C. Both business opportunity and unique firm resources should be the starting point for developing successful strategies.

• D. Neither business opportunity nor unique firm resources should be the starting point for developing successful strategies.

3) An IT auditor could be:

• A. Must be external.

• B. Must be internal.

• C. Can be either internal or external.

• D. Must be certified public accountant.

4) An objective of an IT system auditing

• A. Tools

• B. Process

• C. Introduction

• D. Improve performance

5) Which of the following audit phases would generally be conducted before all of the others listed below?

• A. Review the specifications.

• B. Evaluate of audit evidence.

• C. Gaining an understanding of the audited item.

• D. Evaluate the benchmarks.

6) In information system acceptance criteria most relevant to audit materiality is.

• A. Integrity

• B. Effectiveness

• C. Efficiency

• D.All the above

7) Which of the following system element cannot be audited?

• A. Application software

• B. System hardware

• C. Network security

• D. None

8. Backup procedures and storage devices are include in business continuity review

• A. True

• B. False

• C. Based on the auditor opinion.

• D. Based on the company needs.

9) In system auditing, ___________ review includes a review of internal and external connections to the system, perimeter security, firewall review, router access control lists

• A. Business continuity

• B. Computer functionality

• C. Network security

• D. Data integrity

10) As a part of audit standards the information systems auditor is to adhere to the Code of Professional Ethics of the Information Systems Audit and Control Association.

• A. True

• B. False