In general, mainframe or server production programs and data are adequately protected against unauthorized access. Certain utility software may, however, have privileged access to software and data. To compensate for the risk of unauthorized use of privileged software, IT management can:
Answer(s): C
Since certain utility software may have privileged access to software and data stored on the mainframe or server, management must control the use of this utility software are. Management should limit the use of this software to only those individuals with appropriate authority.
A control feature designed to negate the use of utility programs to read files that contain all authorized access user codes for the network is:
Answer(s): A
Utility programs can be used to gain access to almost any file. However, gaining access to a file of passwords would be useless if those passwords were encrypted prior to placing them in the file.
Effective internal control for application development should provide for which of the following?I). A project steering committee to initiate and oversee the systemII). A technical systems programmer to evaluate systems softwareIII). Feasibility studies to evaluate existing systemsIV). The establishment of standards for systems design and programming
Effective systems development requires participation by top management. This can be achieved through a steering committee composed of higher-level representatives of system users. The committee approves or recommends projects and reviews their progress.Studies of the economic, operational, and technical feasibility of new applications necessarily entail evaluations of existing systems. Another necessary control is the establishment of standards for system design and programming. Standards represent user and system requirements determined during systems analysis.
A benefit of using computer-aided software engineering CASE) technology is that it can ensure that:
Answer(s): D
CASE is an automated technology at least in part) for developing and maintaining software and managing projects. A benefit of using CASE technology is that it can ensure that data integrity mules, including those for validation and access, are applied consistently across all files.
CASE computer-aided software engineering) is the use of the computer to aid in the development of computer-based information systems.Which of the following could not be automatically generated with CASE tools and techniques?
CASE applies the computer to software design and development. It maintains on the computer a library of standard program modules and all of the system documentation. e.g.. data flow diagrams. data dictionaries, and pseudocode structured English). Permits development of executable input and output screens: and generates program code in at least skeletal form. Thus. CASE facilitates the creation. organization, and maintenance of documentation and permits some automation of the coding process. However, information requirements must be determined prior to using CASE.
Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IIA-CIA-PART3-3P content, but please register or login to continue.