CA Information Systems 2 — Questions and Answers
Question 1: Which control ensures that data entered into an accounting system falls within a predefined acceptable range?
- Completeness check
- Range check (Correct answer)
- Validity check
- Sequence check
Correct answer: Range check
A range check validates that entered data values fall between a specified minimum and maximum to prevent out-of-bounds entries.
Question 2: In a relational database, a foreign key is used to:
- Uniquely identify each record in a table
- Encrypt sensitive data fields
- Establish a link between two tables (Correct answer)
- Index frequently queried columns
Correct answer: Establish a link between two tables
A foreign key references the primary key of another table, enforcing referential integrity between related tables.
Question 3: Which disaster recovery strategy involves maintaining a fully operational duplicate site ready to take over immediately?
- Cold site
- Warm site
- Hot site (Correct answer)
- Mirror archive
Correct answer: Hot site
A hot site is a fully equipped and operational backup facility that can assume production workloads immediately after a failure.
Question 4: The primary purpose of an IT general control (ITGC) review is to:
- Test individual transaction accuracy
- Assess controls over the IT environment that support application controls (Correct answer)
- Verify software license compliance
- Evaluate network bandwidth utilization
Correct answer: Assess controls over the IT environment that support application controls
ITGCs encompass controls over change management, access, and operations that provide the foundation for application-level controls.
Question 5: A hash total used as a batch control is best described as:
- A sum of meaningful dollar amounts for reconciliation
- A meaningless arithmetic total of a non-dollar field used for error detection (Correct answer)
- An encrypted checksum of transmitted data
- A count of records processed in a batch
Correct answer: A meaningless arithmetic total of a non-dollar field used for error detection
A hash total is the sum of a field (such as account numbers) that has no inherent meaning but detects missing, added, or altered records.
Question 6: Which access control model assigns permissions based on an individual's role within the organization?
- Discretionary Access Control (DAC)
- Mandatory Access Control (MAC)
- Role-Based Access Control (RBAC) (Correct answer)
- Attribute-Based Access Control (ABAC)
Correct answer: Role-Based Access Control (RBAC)
RBAC grants access rights to users based on their assigned organizational roles, simplifying permission management.
Question 7: Which of the following best describes a 'system changeover' using the parallel operation method?
- The old system is shut down before the new one starts
- Both old and new systems run simultaneously until the new system is verified (Correct answer)
- Users are migrated in phases by department
- The new system replaces the old one over a single weekend
Correct answer: Both old and new systems run simultaneously until the new system is verified
Parallel operation runs both systems concurrently so outputs can be compared, reducing risk before full cutover.
Which control ensures that data entered into an accounting system falls within a predefined acceptable range?