1 / 1

1. A companys current password policy requires that passwords be alphanumeric, case sensitive, and 10 characters long. Which one of the following changes to a companys password policy will increase password strength the most?

a. Require passwords to also include special characters (such as $, &, etc.)

b. Require passwords to be 15 characters long

c. Both of the options changes would have the same effect on password strength

d. None of the options changes would have the same effect on password strength

2. Which of the following set of authentication credentials provides the strongest access

control?

a. A password and a security question.

b. A PIN and a smart card.

c. Voice recognition and a fingerprint.

d. All of the combinations of credentials are equally strong.

3. Which of the following system(s) compares actual performance with planned performance?

a. Boundary system

b. Belief system

c. Diagnostic control system

d. Interactive control system

4. The ERM model includes an element called Risk Response. According to that element, which of the following is an appropriate way to respond to risk? a. Implement a system to effectively monitor risk .

b. Estimate material risk assessments.

c. Share the risk with another

d. All options are correct

5. Which of the following is not a principle applicable to project development and acquisition controls?

a. Strategic master plan

b. Project controls

c. Steering committee

d. Network management

6. According to sound internal control concepts, which of the following systems duties should be segregated?

a. Programming and systems administration

b. Computer operations and programming

c. Custody and record keeping

d. Programming, systems administration, computer operations and programming