Exam 2

Front 1

active threats

Back 1

computer fraud and computer sabotage.

Front 2

adware

Back 2

a type of spyware the displays advertisements, typically in pop-up windows.

Front 3

archive bit

Back 3

a bit used to determine whether or not a file has been altered.

Front 4

backdoor

Back 4

a method of covertly eluding normal authentication procedures while accessing a computer system.

Front 5

black hat hackers

Back 5

hackers tha t attack systems for illegitimate reasons.

Front 6

botnets

Back 6

collections of tens or hundreds of thousands of zombie computers that are often used to engage in malicious conduct, such as DoS attacks against Web sites, e-mail servers, and distributed name servers.

Front 7

business continuity plan

Back 7

a strategy to mitigate disruption to business operations in the event of a disaster.

Front 8

code injection

Back 8

a type of exploit that involves tricking a computer program to accept and run software supplied by a user.

Front 9

database shadowing

Back 9

a duplicate of all transactions is automatically recorded.

Front 10

denial-of-service (DoS) attacks

Back 10

involve flooding victims with such enormous amounts of illegitimate network traffic that the victims can no longer process legitimate traffic.

Front 11

distributed DoS attack

Back 11

a DoS attack that is distributed over many different nodes on the Internet or other network. The attack is typically coordinated through a botnet.

Front 12

dumpster diving

Back 12

sifting through garbage to find confidential information such as discarded bank statements, department store bills, utility bills, and tax returns.

Front 13

emergency response team

Back 13

individuals who direct the execution of a disaster recovery plan.

Front 14

exploit

Back 14

occurs when a hacker takes advantage of a bug, glitch, or other software or hardware vulnerability to obtain unauthorized access to computer resources.

Front 15

file-access controls

Back 15

prevent unauthorized access to both data and program files.

Front 16

flying-start site

Back 16

an alternate processing site that contains the necessary wiring and equipment, and also up-to-date backup data and software.

Front 17

full backup

Back 17

all files on a given disk are backed up.

Front 18

grid computing

Back 18

involves clusters of interlinked computers that share common workloads. Individual computers can be linked locally or across different locations within the Internet.

Front 19

hackers

Back 19

individuals who attack computer systems for fun, challenge, profit, revenge, or other nefarious motives.

Front 20

hypervisor

Back 20

in software environments involving virtualization, the master program that controls the individual instances of operating systems running in the virtual machine.

Front 21

information security

Back 21

protecting information to provide confidentiality, integrity, and availability.

Front 22

information security management system (ISMS)

Back 22

the subsystem of the organization that controls risks relating to information security.

Front 23

keyboard loggers

Back 23

secretly record and transmit to the hacker all the victim’s keystrokes.

Front 24

layered approach to access control

Back 24

erecting multiple layers of access control that separate a would-be perpetrator from potential targets.

Front 25

malware

Back 25

any type of malicious software.

Front 26

passive threats

Back 26

system faults and natural disasters.

Front 27

phishing

Back 27

a form of social engineering that is aimed at tricking its victims into giving information (e.g., passwords), money, or other valuable assets to the perpetrator.

Front 28

pretexting

Back 28

a form of social engineering in which the perpetrator impersonates another person, typically in a phone call or electronic communication.

Front 29

qualitative approach to risk assessment

Back 29

a system’s vulnerabilities and threats are listed and subjectively ranked in order of their contribution to the company’s total loss exposures.

Front 30

quantitative approach to risk assessment

Back 30

each loss exposure is computed as the product of the cost of an individual loss times the likelihood of its occurrence.

Front 31

risk management

Back 31

the process of assessing and controlling computer system risks.

Front 32

service bureau

Back 32

provides data processing services to companies who choose not to process their own data.

Front 33

shoulder surfing

Back 33

the surreptitious direct observation of confidential information.

Front 34

site-access controls

Back 34

controls that physically separate unauthorized individuals from information system resources.

Front 35

social engineering

Back 35

involves manipulating victims in order to trick them into divulging privileged information.

Front 36

software as a service (SaaS)

Back 36

IT-related capabilities provided as a service via the Internet.

Front 37

software piracy

Back 37

the copying and distributing of copyrighted software without permission.

Front 38

spyware

Back 38

Trojans that seek to gain the victim’s personal information or modify the victim’s interaction with his or her computer in a way that provides some financial or other gain to the perpetrator.

Front 39

system-access controls

Back 39

software-oriented controls designed to keep unauthorized users from using the system by such means as account numbers, passwords, and hardware devices.

Front 40

system faults

Back 40

system component failures, such as disk failures or power outages.

Front 41

threat

Back 41

a potential exploitation of a system vulnerability.

Front 42

Trojan horse

Back 42

a malicious program masquerading as a legitimate one or that appears to come from a legitimate source.

Front 43

virtualization

Back 43

involves running multiple operating systems or multiple copies of the same operating system, all on the same machine.

Front 44

virus

Back 44

malware that replicates itself and thus spread throughout a computer or a network.

Front 45

Vulnerability

Back 45

a weakness in a system.

Front 46

vulnerability scanner

Back 46

the same thing as a port scanner

Front 47

worm

Back 47

a type of malware program that spreads itself over a computer network.

Front 48

batch processing

Back 48

accumulating source documents into groups for processing on a periodic basis.

Front 49

check digit

Back 49

an extra digit added to a code number that is verified by applying mathematical calculations to the individual digits in the code number.

Front 50

continuous operations auditing

Back 50

the use of programmed edit tests to discriminate between acceptable and nonacceptable data values so that some items are either held in suspense of processing until audited or collected for audit after processing.

Front 51

input document control form

Back 51

documents batch control totals for batches of input data transmitted between user departments and the data processing department.

Front 52

key verification

Back 52

a control procedure to ensure the accuracy of key-transcribed input data.

Front 53

limit test

Back 53

an edit program checks the value of a numeric data field as being within a range of certain predefined limits.

Front 54

line coding

Back 54

assigning codes to items in the general ledger that indicate the item’s use and placement in financial statements.

Front 55

master file

Back 55

contains data that are permanent or of continuing interest.

Front 56

online, real-time systems (OLRS)

Back 56

computer systems that process input data immediately after they are input and can provide immediate output to users.

Front 57

output controls

Back 57

designed to check that processing results in valid output and that outputs are distributed properly to users.

Front 58

output distribution register

Back 58

a log maintained to control the disposition of output and reports.

Front 59

point-of-sale (POS) system

Back 59

technology that enhances the traditional cash register to allow it to function as a source data entry device for sales transactions.

Front 60

program data editing

Back 60

a software technique used to screen data for errors prior to computer processing.

Front 61

real-time processing

Back 61

immediate or fast-response processing.

Front 62

reference file

Back 62

contains data that are necessary to support data processing.

Front 63

son–father–grandfather retention

Back 63

retaining the old master (i.e., father) and the transaction file for backup over the new master file (i.e., son).

Front 64

source documents

Back 64

the physical evidence of inputs into the transaction processing system.

Front 65

table file

Back 65

synonym for reference file.

Front 66

table lookup

Back 66

an edit program compares the value of a field with the acceptable values contained in a table file.

Front 67

tagging

Back 67

audit-oriented information that is included with original transaction data when they are recorded.

Front 68

transaction file

Back 68

a collection of transaction input data.

Front 69

transaction processing system

Back 69

a system that collects and processes transactions and provides immediate output concerning processing.

Front 70

valid code check

Back 70

a table-lookup procedure in which the table file consists of valid data codes.

Front 71

approved vendor list

Back 71

a list of vendors approved for use by the purchasing function.

Front 72

attribute rating

Back 72

an approach to vendor selection that identifies, lists, and evaluates several different aspects concerning a vendor.

Front 73

blind count

Back 73

counters in receiving do not have access to quantities shown on purchase orders.

Front 74

built-up voucher system

Back 74

the accumulation of several invoices from the same vendor independent paymaster the person who distributes pay is independent of the payroll preparation process.

Front 75

invoice verification

Back 75

the review of purchasing documentation prior to authorizing payment to vendors.

Front 76

procurement

Back 76

the business process of selecting a source, ordering, and acquiring goods or services.

Front 77

purchase order

Back 77

document issued to a vendor to initiate a purchase.

Front 78

purchase requisition

Back 78

document used to request a purchase.

Front 79

receiving report

Back 79

prepared to document the receipt of deliveries from vendors.

Front 80

request for quotation

Back 80

documents used to request competitive bids from vendors.

Front 81

voucher package

Back 81

a collection of documents that are reviewed and approved to authorize a disbursement.

Front 82

voucher system

Back 82

a system in which every organizational expenditure must be documented with an approved voucher.

Front 83

activity-based costing (ABC)

Back 83

a system that calculates several overhead rates, one for each manufacturing activity, and uses these rates to build product costs from the costs of the specific activities undertaken during production.

Front 84

advanced integration technologies (AIT)

Back 84

consist of EDI and automatic identification.

Front 85

bill-of-materials

Back 85

lists the raw materials necessary to produce a product.

Front 86

computer-aided design and drafting (CADD)

Back 86

the use of computer software to perform engineering functions.

Front 87

computer-aided manufacturing (CAM)

Back 87

includes software for defining the manufacturing process, tools to improve process productivity, and decision-support systems to aid in the control and monitoring of the production process.

Front 88

computer-integrated manufacturing (CIM)

Back 88

system integrates the physical manufacturing system and the MRP II systems.

Front 89

cost driver

Back 89

an element that influences the total cost of an activity.

Front 90

economic order quantity (EOQ)

Back 90

the order quantity that minimizes total inventory cost.

Front 91

factor availability reports

Back 91

reports that communicate the availability of labor and machine resources.

Front 92

finite element analysis

Back 92

a mathematical method used to determine mechanical characteristics, such as stresses of structures under load.

Front 93

flexible manufacturing system (FMS)

Back 93

a CAM system that incorporates programmable production processes that can be reconfigured quickly to produce different types of products.

Front 94

industrial robot

Back 94

a device designed to move materials, parts, tools, or specialized devices through variable programmed motions for the performance of a variety of tasks.

Front 95

inventory status reports

Back 95

reports that detail the resources available in inventory.

Front 96

investment register

Back 96

a systematic list of investments maintained for control purposes.

Front 97

job costing production

Back 97

costs are assigned to production orders.

Front 98

lean production

Back 98

a system in which items are produced only as they are required in subsequent operations.

Front 99

manufacturing resource planning (MRP II)

Back 99

system comprises the MRP system and the related systems for sales, billing, and purchasing.

Front 100

master operations list

Back 100

identifies and specifies the sequencing of all labor operations and

Front 101

materials requirements planning (MRP) system

Back 101

the use of computers in production planning and control systems, particularly applications in materials control systems.

Front 102

materials requisitions

Back 102

documents that authorize the release of raw materials to the production departments.

Front 103

production status reports

Back 103

reports that detail the work completed on individual production orders as they move through the production process.

Front 104

process costing production

Back 104

costs are compiled by department rather than by job.

Front 105

production order

Back 105

document that authorizes the production departments to make certain products.

Front 106

quick-response manufacturing system a CIM

Back 106

system in which the physical manufacturing system and the MRP II systems are integrated with AIT.

Front 107

reorder point

Back 107

the level of inventory at which it is desirable to order or produce additional items to avoid an out-of-stock condition.

Front 108

routings (RTGs)

Back 108

documents that indicate the sequence of operations required to manufacture a product.

Front 109

solids modeling

Back 109

the mathematical representation of a part as a solid object in computer memory.

Front 110

statistical process

Back 110

control procedures used to determine whether a manufacturing process is under control, which involve comparing process outputs to engineering specifications.

Front 111

vendor-based coding

Back 111

having a purchaser (i.e., retailer) use a vendor’s product codes as its own product codes for the same products.