BEC Information Technology and Systems 1 — Questions and Answers
Question 1: Which of the following best describes an ERP (Enterprise Resource Planning) system?
- Integrated software that centralizes business processes across departments in a unified database (Correct answer)
- Software used exclusively for payroll and human resources management
- A system that monitors external threats to IT infrastructure
- A platform for customer-facing e-commerce transactions only
Correct answer: Integrated software that centralizes business processes across departments in a unified database
ERP systems integrate core business functions — accounting, HR, supply chain, manufacturing — into a single unified platform sharing a common database.
Question 2: In IT governance, the principle of 'separation of duties' means:
- No single individual should have control over all phases of a transaction (Correct answer)
- IT and accounting departments must operate independently
- Software development and testing must be done by different companies
- User access should be separated from administrator access
Correct answer: No single individual should have control over all phases of a transaction
Separation of duties is an internal control requiring that key steps in a transaction (authorization, recording, custody of assets) be handled by different individuals to prevent fraud.
Question 3: Which type of IT control is designed to prevent errors or irregularities from occurring?
- Preventive control (Correct answer)
- Detective control
- Corrective control
- Compensating control
Correct answer: Preventive control
Preventive controls are proactive measures designed to stop errors or unauthorized actions before they happen, such as access controls and input validation.
Question 4: A data warehouse is primarily used for:
- Storing large volumes of historical data for analytical reporting and decision-making (Correct answer)
- Processing real-time transactions for day-to-day operations
- Backing up operational databases in case of system failure
- Hosting web applications and e-commerce platforms
Correct answer: Storing large volumes of historical data for analytical reporting and decision-making
A data warehouse consolidates historical data from multiple sources into a centralized repository optimized for complex analytical queries and business intelligence reporting.
Question 5: Which of the following best describes a phishing attack?
- Fraudulent communications disguised as legitimate to trick users into revealing sensitive information (Correct answer)
- Malware that encrypts files and demands a ransom payment
- Unauthorized access to a system by exploiting software vulnerabilities
- Overloading a server with traffic to make it unavailable
Correct answer: Fraudulent communications disguised as legitimate to trick users into revealing sensitive information
Phishing attacks use deceptive emails, texts, or websites impersonating trusted entities to manipulate victims into disclosing credentials, financial data, or other sensitive information.
Question 6: Business continuity planning (BCP) primarily aims to:
- Ensure critical business functions continue during and after a disruptive event (Correct answer)
- Reduce information technology capital expenditures
- Document all internal business processes for audit purposes
- Improve employee productivity through workflow automation
Correct answer: Ensure critical business functions continue during and after a disruptive event
BCP is a proactive strategy to ensure that essential business operations can continue with minimal interruption during disasters, cyberattacks, or other disruptive events.
Which of the following best describes an ERP (Enterprise Resource Planning) system?