Test your basic knowledge |

CISA Certified Information Systems Auditor Vocab

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A popular local area network operating system developed by the Novell Corp.






2. A computer program that enables the user to retrieve information that has been made publicly available on the Internet; also; that permits multimedia (graphics) applications on the World Wide Web






3. One who obtains products or services from a bank to be used primarily for personal; family or household purposes.






4. A proxy service that connects programs running on internal networks to services on exterior networks by creating two connections; one from the requesting client and another to the destination service






5. A group of budgets linked together at different levels such that the budgeting authority of a lower-level budget is controlled by an upper-level budget.






6. The method or communication mode of routing data over the communication network (also see half duplex and full duplex)






7. To record details of information or events in an organized record-keeping system; usually sequenced in the order they occurred






8. The computer's primary working memory. Each byte of memory can be accessed randomly regardless of adjacent bytes.






9. Compares data to predefined reasonability limits or occurrence rates established for the data.






10. These controls are designed to correct errors; omissions and unauthorized uses and intrusions; once they are detected.






11. A test that has been designed to evaluate the performance of a system. In a benchmark test; a system is subjected to a known workload and the performance of the system against this workload is measured. Typically; the purpose is to compare the measur






12. A multiuser; multitasking operating system that is used widely as the master control program in workstations and especially servers






13. A piece of information; in a digitized form; used to recover the plaintext from the corresponding ciphertext by decryption






14. A protocol for accessing a secure web server; whereby all data transferred is encrypted






15. A sub-network of the Internet through which information is exchanged by text; graphics; audio and video.






16. The process of electronically inputting source documents by taking an image of the document; thereby eliminating the need for key entry






17. A computer network connecting different remote locations that may range from short distances; such as a floor or building; to extremely long transmissions that encompass a large region or several countries






18. The machine language code that is generally referred to as the object or load module






19. A communications channel over which data can be sent and received simultaneously






20. Confidentiality concerns the protection of sensitive information from unauthorized disclosure






21. Is the risk to earnings or capital arising from movements in interest rates. From an economic perspective; a bank focuses on the sensitivity of the value of its assets; liabilities and revenues to changes in interest rates. Internet banking may attra






22. Detection on the basis of whether the system activity matched that defined as abnormal






23. The outward impression of being self-governing and free from conflict of interest and undue influence






24. Software used to administer logical security. It usually includes authentication of users; access granting according to predefined rules; monitoring and reporting functions.






25. Recovery strategy that involves two active sites; each capable of taking over the other's workload in the event of a disaster. Each site will have enough idle processing power to restore data from the other site and to accommodate the excess workload






26. Applications that detect; prevent and possibly remove all known viruses from files located in a microcomputer hard drive






27. Estimated cost and revenue amounts for a given range of periods and set of books. There can be multiple budget versions for the same set of books.






28. Diagramming data that are to be exchanged electronically; including how it is to be used and what business management systems need it. It is a preliminary step for developing an applications link. (Also see application tracing and mapping.)






29. A communication protocol used to connect to servers on the World Wide Web. Its primary function is to establish a connection with a web server and transmit HTML pages to the client browser.






30. A denial-of-service (DoS) assault from multiple sources; see DoS






31. A database structured in a tree/root or parent/child relationship. Each parent can have many children; but each child may have only one parent.






32. Individuals and departments responsible for the storage and safeguarding of computerized information. This typically is within the IS organization.






33. Used in data encryption; it uses a secret key to encrypt the plaintext to the ciphertext. It also uses the same key to decrypt the ciphertext to the corresponding plaintext. In this case; the key is symmetric such that the encryption key is equivalen






34. A public end-to-end digital telecommunications network with signaling; switching and transport capabilities supporting a wide range of service accessed by standardized interfaces with integrated customer control. The standard allows transmission of d






35. An attack capturing sensitive pieces of information; such as passwords; passing through the network






36. Processing is achieved by entering information into the computer via a video display terminal. The computer immediately accepts or rejects the information; as it is entered.






37. An Internet standard that allows a network to use one set of IP addresses for internal traffic and a second set of addresses for external traffic. The server; providing the NAT service; changes the source address of outgoing packets from the internal






38. A set of communications protocols that encompasses media access; packet transport; session communications; file transfer; electronic mail; terminal emulation; remote file access and network management. TCP/IP provides the basis for the Internet.






39. A fail-over process in which there are two nodes (as in idle standby but without priority). The node that enters the cluster first owns the resource group; and the second will join as a standby node.






40. A networking device that can send (route) data packets from one local area network (LAN) or wide area network (WAN) to another; based on addressing at the network layer (Layer 3) in the OSI model. Networks connected by routers can use different or si






41. Modern expression for organizational development stemming from IS/IT impacts. The ultimate goal of BPR is to yield a better performing structure; more responsive to the customer base and market conditions; while yielding material cost savings. To ree






42. The exchange of money via telecommunications. EFT refers to any financial transaction that originates at a terminal and transfers a sum of money from one account to another.






43. A fully operational offsite data processing facility equipped with both hardware and system software to be used in the event of a disaster






44. A stored collection of related data needed by organizations and individuals to meet their information processing and retrieval requirements






45. Processes certified as supporting a security goal






46. To the basic border firewall; add a host that resides on an untrusted network where the firewall cannot protect it. That host is minimally configured and carefully managed to be as secure as possible. The firewall is configured to require incoming an






47. The area of the central processing unit (CPU) that executes software; allocates internal memory and transfers operations between the arithmetic-logic; internal storage and output sections of the computer






48. The process of creating and managing duplicate versions of a database. Replication not only copies a database but also synchronizes a set of replicas so that changes made to one replica are reflected in all the others. The beauty of replication is th






49. Used to electronically input; read and interpret information directly from a source document; requires the source document to have specially-coded magnetic ink typeset






50. The risk that activities will include deliberate circumvention of controls with the intent to conceal the perpetuation of irregularities. The unauthorized use of assets or services and abetting or helping to conceal.