When evaluating the controls of an EDI application, an IS auditor should PRIMARILY be concerned
with the risk of:

An IS auditor reviewing an accounts payable system discovers that audit logs are not being
reviewed. When this issue is raised with management the response is that additional controls are
not necessary because effective system access controls are inplace. The BEST response the
auditor can make is to:

The GREATEST advantage of using web services for the exchange of information between two
systems is:

A clerk changed the interest rate for a loan on a master file. The rate entered is outside the normal
range for such a loan. Which of the following controls is MOST effective in providing reasonable
assurance that the change was authorized?

When using an integrated test facility (ITF), an IS auditor should ensure that:

When reviewing input controls, an IS auditor observes that, in accordance with corporate policy,
procedures allow supervisory override of data validation edits. The IS auditor should:

When transmitting a payment instruction, which of the following will help verify that the instruction
was not duplicated?

Which of the following is the MOST critical and contributes the greatest to the quality of data in a
data warehouse?

Which of the following represents the GREATEST potential risk in an EDI environment?

A company uses a bank to process its weekly payroll. Time sheets and payroll adjustment forms
(e.g., hourly rate changes, terminations) are completed and delivered to the bank, which prepares

checks (cheques) and reports for distribution. To BEST ensure payroll data accuracy: