5. According to COBIT 5, an organization's information technology governance and management should apply a single integrated framework for managing information. Which of the following best pairs an established framework with an element of the framework?

A. COSO enterprise risk management, cost of managing risk B. COSO internal control, risk/control matrix C. Both COSO enterprise risk management, cost of managing risk and COSO internal control, risk/control matrix D. Neither COSO enterprise risk management, cost of managing risk nor COSO internal control, risk/control matrix

6. According to COBIT 5, an organization's information technology governance and management should cover the enterprise end-to-end. Which of the following parts of an organization would likely need information on inventory levels?

A. production and operations B. marketing C. accounting D. all of these

7. The accounting cycle comprises ten steps. Companies that use XBRL do not have to:

A. Prepare journal entries. B. Close the nominal accounts. C. Both prepare journal entries and close the nominal accounts. D. Neither prepare journal entries nor close the nominal accounts.

8. Carter suggested a four-part taxonomy for classifying computer crime. Which of the following contains elements that would help an accounting professional prevent one or more of the four types?

A. COBIT B. AICPA Core Competencies framework C. Both COBIT and AICPA Core Competencies framework D. Neither COBIT nor AICPA Core Competencies framework

9. Which of the following best pairs a COBIT enabler with an element of the FASB conceptual framework of accounting? (Points : 1)

A. processes, the process of producing financial statements B. information, elements of financial statements C. culture, international elements of the conceptual framework D. organizational structures, assumptions/principles/constraints on those structures

10. SSAE 16 is a form of ___ with respect to an ASP. (Points : 1)

A. internal control B. information technology C. Both internal control and information technology D. Neither internal control nor information technology