CIS Service Learning Quiz

What is the primary purpose of internal control in an IT environment?

• Improve software compatibility

• Enforce manual transaction processing

• Ensure data integrity, accurate reporting, and business continuity

• Promote customer satisfaction

Which component of the COSO framework sets the organizational tone and includes management philosophy and ethical values?

• Monitoring

• Control Activities

• Risk Assessment

• Control Environment

What type of control includes password policies, firewalls, and data backups?

• Application Controls

• Internal Audit Controls

• General Controls

• Substantive Controls

Which IT processing structure is user-oriented but riskier?

• Distributed Data Processing

• Hybrid Systems

• Centralized Processing

• Cloud Computing

What is the purpose of a disaster recovery plan in IT governance?

• To schedule software updates

• To recover data and systems after disruptions

• To monitor employee activities

• To manage project deadlines

Which of the following is not a type of audit?

• Internal Audit

• Network Audit

• External Audit

• Fraud Audit

The audit risk model is calculated as:

• Audit Risk = Risk × Compliance

• Audit Risk = Inherent Risk × Control Risk × Detection Risk

• Audit Risk = Compliance / Control Risk

• Audit Risk = Fraud × Misstatement

What is the main purpose of tests of controls during an audit?

• To detect fraud

• To assess compliance with tax laws

• To evaluate the effectiveness of internal controls

• To verify external financial statements

What type of data format is used for electronic financial reporting and requires specific control mechanisms?

• CSV

• HTML

• XBRL

• XML

What element of the fraud triangle reflects the justification an individual gives to commit fraud?

• Opportunity

• Rationalization

• Pressure

• Deceit