Which of the following is NOT one of the three traditional categories of IT general controls (ITGCs)?
Cpa Isc Information Systems Data Management
Question · Easy
New hire access: Expectation vs Reality
Short
A control that requires programming changes to be approved, tested in a development environment, and migrated to production by an independent party best illustrates which ITGC category?
Chapter 1: Introduction & CPA Evolution Exam Overview
1.1 CPA Evolution Architecture & ISC Exam Logistics
Study guide
Under CPA Evolution, the ISC Discipline section is uniquely scored as:
Cpa Isc Exam Structure
Finance Exam Prep Podcast
Listen on Spotify
Podcast
Which database normal form is achieved when every non-key attribute is fully functionally dependent on the entire primary key (eliminating partial dependencies)?
Question · Medium
Which SQL clause is used to filter rows AFTER a GROUP BY aggregation has been performed?
Star schema: a city pop love song to a fact table
In an ETL pipeline, the 'T' stage typically includes all of the following EXCEPT:
1.2 Blueprint Navigation & Study Methodology
Which SDLC phase is most likely to involve a written user acceptance test (UAT) signed off by the business owner?
Data lineage documentation is most useful for which of the following objectives?
In a relational database, a foreign key is best described as:
A spy's rule for keys: encrypt with theirs, sign with yours
Which of the following is the BEST example of a preventive ITGC?
1.3 Task-Based Simulations & IT Audit Mechanics
An auditor identifies that the same developer wrote, tested, and migrated a code change to production. This control deficiency is BEST classified as a violation of:
In a star schema data warehouse, the central table that contains foreign keys to surrounding tables and quantitative measures is called the:
Which of the following BEST describes data integrity?
AWS or YOU?
Which type of database operation is BEST suited to OLTP (online transaction processing) systems?
Chapter 2: IT Infrastructure, Architecture & Cloud Environments
2.1 Hardware, Operating Systems & Network Architecture
A check digit appended to an account number to detect transcription errors is BEST classified as:
In an agile SDLC, what artifact replaces the traditional 'requirements specification document'?
Which of the following is the BEST example of a detective application control?
Public, private or hybrid cloud?
A company runs nightly batch jobs to post invoices. The job-scheduling system retries failed jobs and notifies operations on the third failure. This is an example of which ITGC category?
2.2 Cloud Computing Service & Deployment Models
In SQL, which command permanently removes a table along with all its data and structure?
A company stores customer addresses and customer order history in a single denormalized table. Each customer can have many orders. Which data quality risk is MOST elevated?
Question · Hard
Which of the following is a key benefit of using a data dictionary?
RTO vs RPO
What is the PRIMARY purpose of a configuration management database (CMDB)?
2.3 Enterprise Resource Planning (ERP) & AIS Integration
During an SDLC project, who typically owns the responsibility for approving the final business requirements?
A user runs the SQL statement SELECT customer_id, SUM(amount) FROM orders WHERE order_date >= '2025-01-01' GROUP BY customer_id; What does the result represent?
A general ledger system uses an automated three-way match (PO, receiver, invoice) before payment. For an auditor to rely on this automated control, what MUST also be tested?
An auditor wants to test the population completeness of a list of journal entries provided by management. The BEST analytic procedure would be to:
2.4 Cloud Governance, End-User Computing & AIS Process Improvement
Master data management (MDM) is BEST defined as:
In a typical change management workflow, which document records the business case, risk assessment, and approver sign-offs for a proposed change?
Which of the following BEST describes a 'data lake'?
During production cutover, the development team accidentally migrates a debug build that prints sensitive data to logs. Which control would have BEST prevented this?
2.5 Blockchain, Distributed Ledgers & COSO Internal Control
A company performs a quarterly access review where managers re-certify that each direct report still requires the access they hold. This control BEST mitigates which risk?
Cpa Isc Security Confidentiality Privacy
AES-256 is BEST described as a:
In an asymmetric encryption scheme like RSA, which key is used to ENCRYPT a message intended only for the recipient to read?
Loading more…