Home > Stock Markets > Quizzes > CISA Certified Information Systems Auditor Vocab
CISA Certified Information Systems Auditor Vocab
Fast practice, instant feedback. Timer auto-submits when time’s up.
Avg score: 32% Most missed: “An evaluation of any part of an implementation project (e.g.; project management…”
CISA Certified Information Systems Auditor Vocab
Time left 00:00
25 Questions

1. In broadband; multiple channels are formed by dividing the transmission medium into discrete frequency segments. It generally requires the use of a modem.

2. Used in data encryption; it uses a secret key to encrypt the plaintext to the ciphertext. It also uses the same key to decrypt the ciphertext to the corresponding plaintext. In this case; the key is symmetric such that the encryption key is equivalen

3. Expert systems are the most prevalent type of computer systems that arise from the research of artificial intelligence. An expert system has a built in hierarchy of rules; which are acquired from human experts in the appropriate field. Once input is

4. An authentication protocol; often used by remote-access servers

5. An attack capturing sensitive pieces of information; such as passwords; passing through the network

6. A document that has been approved by the IETF becomes an RFC and is assigned a unique number once published. If it gains enough interest; it may evolve into an Internet standard.

7. Used to ensure that input data agree with predetermined criteria stored in a table

8. Specialized system software used to perform particular computerized functions and routines that are frequently required during normal processing. Examples include sorting; backing up and erasing data.

9. The risk that an error which could occur in an audit area; and which could be material; individually or in combination with other errors; will not be prevented or detected and corrected on a timely basis by the internal control system

10. Also called permissions or privileges; these are the rights granted to users by the administrator or supervisor. Access rights determine the actions users can perform (e.g.; read; write; execute; create and delete) on files in shared volumes or file

11. The risk of errors occurring in the area being audited

12. Point-of-sale systems enable capture of data at the time and place of transaction. POS terminals may include use of optical scanners for use with bar codes or magnetic card readers for use with credit cards. POS systems may be online to a central com

13. Deliberately testing only the value-added functionality of a software component

14. A deficiency in the design or operation of a control procedure. Control weaknesses can potentially result in risks relevant to the area of activity not being reduced to an acceptable level (relevant risks are those that threaten achievement of the ob

15. The process that limits and controls access to resources of a computer system; a logical or physical control designed to protect against unauthorized entry or use. Access control can be defined by the system (mandatory access control; or MAC) or defi

16. Block-at-a-time data transmission

17. Processes certified as supporting a security goal

18. Controls that prevent unauthorized access from remote users that attempt to access a secured environment. These controls range from dial-back controls to remote user authentication.

19. Analysis that is performed on a continuous basis; with results gained in time to alter the run-time system

20. Analysis that is performed in real time or in continuous form

21. Any information collection mechanism utilized by an intrusion detection system

22. A connectionless Internet protocol that is designed for network efficiency and speed at the expense of reliability. A data request by the client is served by sending packets without testing to verify if they actually arrive at the destination; not if

23. An algorithm that maps or translates one set of bits into another (generally smaller) so that a message yields the same result every time the algorithm is executed using the same message as input. It is computationally infeasible for a message to be

24. An engagement where management does not make a written assertion about the effectiveness of their control procedures; and the IS auditor provides an opinion about subject matter directly; such as the effectiveness of the control procedures

25. Audit evidence is useful if it assists the IS auditors in meeting their audit objectives.