Quiz 78 

 

 

Please note: In order to obtain your CPE certificate for having passed the quiz, you must turn off your pop-up blocker.

Parkes Article
Norris Article
Carasik Article
Parker Article
Andrews Article
Karol Article
Parkinson Article
Gonzalez Article

 

CPE Quiz # 78

Based on Information Systems Control Journal Volume 3, 2001

A passing score of 75 percent qualifies for one (1) hour of CISA/CISM/CGEIT Continuing Professional Education (CPE) Credit

Your results will appear in a new window.

Enter your name below so it displays on the quiz results page:

Name:

Parkes Article

1. The author describes the process of assessing the inner condition of an enterprise (i.e., naringslav), the relationship of this process to the pervasiveness of IT and the need for IT governance.
2. The overall objectives of IT governance activities are to ensure that a corporation can sustain its operations and to confirm it can implement the strategies required to sustain and extend its activities into the future.
3. Elements of an effective Knowledge and Intellectual Capital domain for an IT governance program include: succession and resource planning, retention of key skills required to sustain operations and a suitable climate and culture for innovation within the corporation.
4. The author recommends the following items be considered in an IT due diligence review: data warehousing, IT asset management, risk management and the level of implementation of net centric technology.

Norris Article

5. An example of a virtual private network is the Internet.
6. Today's high-speed laptop computers compensate for any potential performance degradation of encryption technology.
7. IPSec security requires site-to-site peering to operate. This peering sends packets back and forth between known end points, with each end point declaring the encryption method it prefers and will accept, until they agree upon the strongest common method between them.

Carasik Article

8. Firewalls are effective in determining trust and identifying which users should and should not be permitted to access system resources.
9. IPSec has more features than secure shell or transport layer security (TLS), however, it is more difficult to implement.
10. Secure shell is designed for incorporation into a network gateway such as a router or firewall. It functions as a complete VPN solution.

Parker Article

11. Objectives of the implementation phase of a privacy-compliance program include: develop a detailed working document and planning template for achieving privacy compliance, and create an appropriate organization, infrastructure and authority for privacy issues.
12. E-business surveys cited by the author indicate that more than 70 percent of pure-play dot-coms have a privacy policy on their web sites.

Andrews Article

13. Personal records can be rendered anonymous by removing personally identifiable information such as name, telephone number or family financial information.
14. US legislation exists today regarding privacy that mandates notice, choice, access and security requirements for personal records. Consumer acknowledgement is required before an organization can use information beyond consummating the transaction for which the information was originally collected.

Karol Article

15. The aim of the privacy impact assessment process is to provide documented assurance that privacy issues have been appropriately identified and either adequately addressed or identified to more senior management for further direction.
16. The author recommends that teams conducting a cross-border privacy assessment include the following skill sets: marketing, operational, systems, risk and compliance, legal and privacy expertise.

Parkinson Article

17. According to Lou Gerstner, privacy is primarily a technology issue, due to the number of different systems that store personal information and the difficulty in securing these systems.
18. The concept of privacy is largely culturally determined. Differing boundaries among societies vary and change over time, thereby affecting privacy.

Gonzales Article

19. Magnetic band-based smart cards are capable of holding significantly more data than similar sized memory smart cards.
20. The C-SET protocol, a system used by French banks, uses a reader with an attached numeric keyboard to establish a dialog between a smart card and its microprocessor. This protocol can help maintain high security for commercial transactions over the Internet.

Your results will appear in a new window.

Please note: This quiz requires a JavaScript-enabled browser. If the quiz is not displayed above, you either do not have a browser which supports JavaScript or JavaScript support has been disabled.