CA Information Systems 4

Question 1

Which of the following best describes a 'phishing' attack?

Accepted Answer

Deceiving users into revealing credentials through fraudulent communications

Answer

Phishing uses deceptive emails or websites that impersonate legitimate entities to trick users into disclosing sensitive information.

Question 2

In an ERP system, a 'three-way match' refers to matching:

Accepted Answer

Invoice, purchase order, and receiving report

Answer

A three-way match compares the vendor invoice, purchase order, and receiving report to ensure agreement before payment is authorized.

Question 3

Which network security device inspects incoming and outgoing traffic based on predefined rules to block unauthorized access?

Accepted Answer

Firewall

Answer

A firewall monitors and filters network traffic based on security rules, blocking unauthorized connections while permitting legitimate traffic.

Question 4

Recovery Time Objective (RTO) is defined as:

Accepted Answer

The target duration within which a system must be restored after a disruption

Answer

RTO specifies the maximum tolerable downtime before a system must be operational again to avoid unacceptable business impact.

Question 5

Which of the following is an example of a preventive IT control?

Accepted Answer

Requiring dual authorization for wire transfers over $50,000

Answer

Requiring dual authorization prevents unauthorized transactions from occurring in the first place, making it a preventive control.

(CA) Certified Accountant Practice Test