Test your basic knowledge |

CISA Certified Information Systems Auditor Vocab

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A mathematical key (kept secret by the holder) used to create digital signatures and; depending upon the algorithm; to decrypt messages or files encrypted (for confidentiality) with the corresponding public key






2. The risk that activities will include deliberate circumvention of controls with the intent to conceal the perpetuation of irregularities. The unauthorized use of assets or services and abetting or helping to conceal.






3. A file format in which records are organized and can be accessed; according to a preestablished key that is part of the record






4. A set of communications protocols that encompasses media access; packet transport; session communications; file transfer; electronic mail; terminal emulation; remote file access and network management. TCP/IP provides the basis for the Internet.






5. The process of actually entering transactions into computerized or manual files. Such transactions might immediately update the master files or may result in memo posting; in which the transactions are accumulated over a period of time; then applied






6. Electronic communications by special devices over distances or around devices that preclude direct interpersonal exchange






7. A condition in which each of an organization's regional locations maintains its own financial and operational data while sharing processing with an organizationwide; centralized database. This permits easy sharing of data while maintaining a certain






8. (remote authentication dial-in user service)






9. A row or record consisting of a set of attribute value pairs (column or field) in a relational data structure






10. An interactive online system capability that immediately updates computer files when transactions are initiated through a terminal






11. Any situation or event that has the potential to harm a system






12. The main memory of the computer's central processing unit






13. A phone number that represents the area in which the communications provider or Internet service provider (ISP) provides service






14. Techniques and procedures used to verify; validate and edit data; to ensure that only correct data are entered into the computer






15. Freedom from unauthorized intrusion






16. The process of taking an unencrypted message (plaintext); applying a mathematical function to it (encryption algorithm with a key) and producing an encrypted message (ciphertext)






17. Interface between data terminal equipment and data communications equipment employing serial binary data interchange






18. A set of protocols that allow systems to communicate information about the state of services on other systems. It is used; for example; in determining whether systems are up; maximum packet sizes on links; whether a destination host/network/port is a






19. Processing is achieved by entering information into the computer via a video display terminal. The computer immediately accepts or rejects the information; as it is entered.






20. Specifies the format of packets and the addressing scheme






21. The process of monitoring the events occurring in a computer system or network; detecting signs of security problems






22. An attack strategy in which the attacker intercepts the communications stream between two parts of the victim system and then replaces the traffic between the two components with the intruder's own; eventually assuming control of the communication






23. Impartial point of view which allows the IS auditor to act objectively and with fairness






24. Wiring devices that may be inserted into communication links for use with analysis probes; LAN analyzers and intrusion detection security systems






25. A series of steps to complete an audit objective






26. A programmed edit or routine that detects transposition and transcription errors by calculating and checking the check digit






27. An exception report is generated by a program that identifies transactions or data that appear to be incorrect. These items may be outside a predetermined range or may not conform to specified criteria.






28. An audit technique used to select items from a population for audit testing purposes based on selecting all those items that have certain attributes or characteristics (such as all items over a certain size)






29. A stored collection of related data needed by organizations and individuals to meet their information processing and retrieval requirements






30. Any technique designed to provide the electronic equivalent of a handwritten signature to demonstrate the origin and integrity of specific data. Digital signatures are an example of electronic signatures.






31. A project management technique used in the planning and control of system projects






32. An intrusion detection system (IDS) inspects network activity to identify suspicious patterns that may indicate a network or system attack from someone attempting to break into or compromise a system






33. Disconnecting from the computer






34. An approach used to plan; design; develop; test and implement an application system or a major modification to an application system. Typical phases include the feasibility study; requirements study; requirements definition; detailed design; programm






35. A process involving the extraction of components from existing systems and restructuring these components to develop new systems or to enhance the efficiency of existing systems. Existing software systems thus can be modernized to prolong their funct






36. The number of distinct locations that may be referred to with the machine address. For most binary machines; it is equal to 2n; where n is the number of bits in the machine address.






37. A top-down technique of designing programs and systems. It makes programs more readable; more reliable and more easily maintained.






38. Record layouts provide information regarding the type of record; its size and the type of data contained in the record. Screen and report layouts describe what information is provided and necessary for input.






39. Controls over the business processes that are supported by the ERP






40. A fail-over process in which the primary node owns the resource group. The backup node runs a non-critical application (e.g.; a development or test environment) and takes over the critical resource group but not vice versa.






41. ATM is a high-bandwidth low-delay switching and multiplexing technology. It is a data link layer protocol. This means that it is a protocol-independent transport mechanism. ATM allows integration of real-time voice and video as well as data. ATM allo






42. A sub-network of the Internet through which information is exchanged by text; graphics; audio and video.






43. The act of transferring computerized information from one computer to another computer






44. The application of audit procedures to less than 100 percent of the items within a population to obtain audit evidence about a particular characteristic of the population






45. Systems that employ sufficient hardware and software assurance measures to allow their use for processing of a range of sensitive or classified information






46. A web-based version of the traditional phone book's yellow and white pages enabling businesses to be publicly listed in promoting greater e-commerce activities.






47. Glass fibers that transmit binary signals over a telecommunications network. Fiber optic systems have low transmission losses as compared to twisted-pair cables. They do not radiate energy or conduct electricity. They are free from corruption and lig






48. Is the risk to earnings or capital arising from a bank's inability to meet its obligations when they come due; without incurring unacceptable losses. Internet banking may increase deposit volatility from customers who maintain accounts solely on the






49. A flag set in a packet to indicate that this packet is the final data packet of the transmission






50. Self-governance and freedom from conflict of interest and undue influence. The IS auditor should be free to make his/her own decisions; not influenced by the organization being audited and its people (managers and employers).