IT General Controls - Set A

1.     These are vital for safeguarding information systems and ensuring data integrity and security.

• a)    Network segmentation

• b)    Network authentication

• c)    Security controls

• d)    IT general controls

2.     Which of the following actions would NOT be considered a preventive IT control?

• a)    User password complexity requirements

• b)    Antivirus software installation

• c)    System vulnerability scanning

• d)    Conducting system audits after an incident

3.     It involves real-time tracking of system activities and configurations to detect anomalies and ensure compliance with security policies.

• a)    Checking

• b)    Continuous monitoring

• c)    Compliance assurance

• d)    SOC 2

4.     It is performed to evaluate the effectiveness of internal controls and pinpoint areas where processes can be improved.

• a)    Authentication

• b)    Monitoring

• c)    Audit

• d)    Cross-checking

5.     Which of the following is a key factor in ensuring the effectiveness of IT General Controls?

• a)    Allowing users to make changes to system settings without approval

• b)    Constant software updates

• c)    Clear communication of policies and procedures to all employees

• d)    Giving all users full access to company data

6.     It is essential for safeguarding data against loss and ensuring rapid recovery in the event of incidents.

• a)    Data Follow-Up and Recovery

• b)    Data Restoration

• c)    Data Backup and Recovery

• d)    Data Protection

7.     Which statement/s is/are incorrect?

I. All changes should be documented and tracked to ensure accountability.

II. Implementing a structured change management process helps organizations effectively manage change while maximizing risks.

III. A strong change management process protects organizations from potential security vulnerabilities that could emerge during transitions.

IV. Approval processes ensure that only necessary and unauthorized changes are implemented.

• a)    II, III, and IV

• b)    II and IV

• c)    I, II, and III

• d)    III and IV

8.     _____________________ involves verifying the identity of users attempting to access systems, while _____________________ ensures they have the necessary permissions. Effective methods include passwords, biometrics, and multi-factor authentication.

• a)    User authorization; authentication

• b)    Access control; authentication

• c)    Authorization; user authentication

• d)    User authentication; authorization

9.     Which of the following best describes the concept of "data integrity" in an IT system?

• a)    Preventing unauthorized access to confidential data

• b)    Ensuring that data is complete, accurate, and consistent over its lifecycle

• c)    Encrypting all sensitive data

• d)    Monitoring for suspicious activities

10.     Which of the following is NOT a typical responsibility of an IT department when implementing general controls?

• a)    Establishing and enforcing system security policies

• b)    Managing user accounts and permissions

• c)    Conducting financial audits for internal controls

• d)    Ensuring the system remains available and resilient to threats