Information Technology and Systems Flashcards

Which of the following best describes an ERP (Enterprise Resource Planning) system?

Answer: Integrated software that centralizes business processes across departments in a unified database

ERP systems integrate core business functions — accounting, HR, supply chain, manufacturing — into a single unified platform sharing a common database.

In IT governance, the principle of 'separation of duties' means:

Answer: No single individual should have control over all phases of a transaction

Separation of duties is an internal control requiring that key steps in a transaction (authorization, recording, custody of assets) be handled by different individuals to prevent fraud.

Which type of IT control is designed to prevent errors or irregularities from occurring?

Answer: Preventive control

Preventive controls are proactive measures designed to stop errors or unauthorized actions before they happen, such as access controls and input validation.

A data warehouse is primarily used for:

Answer: Storing large volumes of historical data for analytical reporting and decision-making

A data warehouse consolidates historical data from multiple sources into a centralized repository optimized for complex analytical queries and business intelligence reporting.

Which of the following best describes a phishing attack?

Answer: Fraudulent communications disguised as legitimate to trick users into revealing sensitive information

Phishing attacks use deceptive emails, texts, or websites impersonating trusted entities to manipulate victims into disclosing credentials, financial data, or other sensitive information.

Business continuity planning (BCP) primarily aims to:

Answer: Ensure critical business functions continue during and after a disruptive event

BCP is a proactive strategy to ensure that essential business operations can continue with minimal interruption during disasters, cyberattacks, or other disruptive events.