CA Information Systems 5 — Questions and Answers
Question 1: Which type of malware encrypts a victim's files and demands payment for the decryption key?
- Spyware
- Adware
- Ransomware (Correct answer)
- Rootkit
Correct answer: Ransomware
Ransomware encrypts the victim's data and extorts payment in exchange for the decryption key needed to restore access.
Question 2: In IT governance, the COBIT framework is primarily used to:
- Define software coding standards for application developers
- Align IT strategy with business goals and ensure effective IT governance and management (Correct answer)
- Specify database normalization rules
- Standardize network protocol configurations
Correct answer: Align IT strategy with business goals and ensure effective IT governance and management
COBIT provides a comprehensive framework for IT governance and management, helping organizations align IT with business strategy.
Question 3: A 'completeness check' in data validation ensures that:
- Data values fall within an acceptable numeric range
- All required fields contain data before a record is accepted (Correct answer)
- Data conforms to the expected format or character type
- Duplicate records are identified and removed
Correct answer: All required fields contain data before a record is accepted
A completeness check verifies that all mandatory fields have been populated, preventing the processing of incomplete records.
Question 4: Which of the following best describes 'data warehousing' in the context of management information systems?
- Offsite storage of physical backup tapes
- A centralized repository integrating data from multiple sources for reporting and analysis (Correct answer)
- Real-time transaction processing for operational systems
- A cloud-based file synchronization service
Correct answer: A centralized repository integrating data from multiple sources for reporting and analysis
A data warehouse aggregates structured data from various operational sources into a single repository optimized for analytical queries and reporting.
Question 5: Multi-factor authentication (MFA) requires users to provide:
- Two or more independent verification factors from different categories (Correct answer)
- A username and a complex password meeting specific rules
- Biometric data only, without a password
- A one-time password sent via email
Correct answer: Two or more independent verification factors from different categories
MFA combines two or more factors from categories such as something you know, something you have, and something you are.
Question 6: An intrusion detection system (IDS) differs from an intrusion prevention system (IPS) in that an IDS:
- Blocks malicious traffic automatically
- Monitors and alerts on suspicious activity without blocking it (Correct answer)
- Encrypts sensitive data in transit
- Manages user authentication credentials
Correct answer: Monitors and alerts on suspicious activity without blocking it
An IDS passively monitors network or system activity and generates alerts, while an IPS actively blocks detected threats.
Question 7: Which of the following is the BEST description of 'systems integration testing'?
- Testing individual program modules in isolation
- Testing the combined interaction of multiple systems or modules to verify they work together correctly (Correct answer)
- Verifying that the system meets end-user requirements through user acceptance testing
- Checking system performance under peak load conditions
Correct answer: Testing the combined interaction of multiple systems or modules to verify they work together correctly
Systems integration testing validates that separately developed modules or systems function correctly when connected and interact as expected.
Which type of malware encrypts a victim's files and demands payment for the decryption key?