AICPA AICPA Information Technology 2

Question 1

During a SOC 2 examination, which Trust Services Criteria category addresses the system's availability for operation and use as committed?

Accepted Answer

Availability

Answer

The Availability Trust Services Criteria addresses whether the system is available for operation and use as committed or agreed.

Question 2

An auditor using data analytics tools extracts a complete population of transactions rather than a sample. This approach is best described as:

Accepted Answer

Full population testing

Answer

Full population testing uses the entire data set, eliminating sampling risk by examining every transaction rather than a subset.

Question 3

Which IT control type would detect unauthorized changes to a financial application by comparing current program code to an authorized baseline?

Accepted Answer

File integrity monitoring

Answer

File integrity monitoring continuously compares program code or configuration files to a known-good baseline to detect unauthorized changes.

Question 4

A company implements role-based access control (RBAC) for its ERP system. What is the primary internal control benefit of RBAC?

Accepted Answer

Enforcing segregation of duties by restricting user access to job-relevant functions

Answer

RBAC enforces segregation of duties by ensuring users can only access functions appropriate to their job role, limiting fraud and error risk.

Question 5

Under AICPA standards, an auditor assessing IT risks in a cloud-based accounting environment should primarily obtain evidence about controls through:

Accepted Answer

A SOC 1 Type II report from the cloud provider

Answer

A SOC 1 Type II report provides independent evidence of the design and operating effectiveness of a cloud provider's controls relevant to financial reporting.

(AICPA) American Institute of Certified Public Accountants Practice Test

(AICPA) American Institute of Certified Public Accountants Practice Test

AICPA AICPA Information Technology 2