MSTIP - IT audit and Control - FAct1

Which of the following is an example of an IT General Control?

• Firewall configuration

• Password policy

• Data encryption

• Password policy

What is the purpose of access controls in IT General Controls?

• To encrypt sensitive data

• To manage user permissions and privileges

• To monitor system performance

• To backup critical files

Which control ensures that critical tasks are divided among different individuals to prevent fraud and errors?

• Change management controls

• Segregation of duties controls

• Access controls

• Backup and recovery controls

What is the primary goal of change management controls?

• To secure network infrastructure

• To prevent unauthorized access

• To manage changes to IT systems

• To monitor system logs

Which control ensures that data can be restored in the event of a disaster?

• Access controls

• Change management controls

• Backup and recovery controls

• Physical security controls

Which control helps protect the physical infrastructure that houses IT systems?

• Access controls

• Segregation of duties controls

• Physical security controls

• Incident management controls

Incident management controls primarily focus on:

• Managing user access

• Preventing system failures

• Detecting and responding to security incidents

• Monitoring system performance

Which control involves capturing and analyzing system activities, events, and transactions?

• Monitoring and logging controls

• Change management controls

• Segregation of duties controls

• Backup and recovery controls

Which control ensures that only authorized individuals can access IT systems?

• Change management controls

• Access controls

• Incident management controls

• Physical security controls

What is the purpose of a formal change management process?

• To enforce password policies

• To manage system backups

• To control and document changes to IT systems

• To monitor network traffic