1. Based on SOX, which of the following sections is about internal controls? Multiple Choice a] 302 b) 906 c] 401 d) 4-04 2. SOX requires companies to use COSO or COSO ERM as the framework in evaluating internal controls. a) True b) False 3. Controls that are designed to prevent, detect, or correct errors in transactions as they are processed through a specic subsystem are referred to as: a) general controls. b] application controls. c] physical controls. d) Two of the choices are correct. e! None of the choices are correct. 4-. Which of the following is not a component in the C050 2013 internal control framework? a) Risk assessment b) Control activities c] Control environment d) Effective operations e) Monitoring 5. A eld check is a(n] a. corrective control. b. general control. c. detective control. d. preventive control. 6.Using backup files to recover corrupted data is an example of control. preventive b) detective C) corrective 7.Based on SOX, which of the following sections is about corporate responsibility for financial reports? a) 404 201 c) d) 302 8. Based on COSO 2013, which of the following statements is NOT correct? a) The responsibility of monitoring the effectiveness of internal controls belongs to the internal audit group. b) Internal controls can provide reasonable assurance only. c) Employees at any level of an organization play a role in internal control. d) Internal control is a process consisting of ongoing tasks and activities. 9.Which of the following is not one of the five essential components in the COSO 2013 framework? a) Control environment b) Monitoring activities c) Control assessment d) Control activities 10. Access control to ensure only authorized personnel have access to a firm's network is a: a. general control. b. input control. c. output control. d. process control e. Bottom of Form