ITN 266 MOD 2 Question and answers
verified to pass 2025/2026
________ examines IT processes for efficiency, effectiveness, and adequate controls.
IT auditing
Financial auditing
Internal auditing
None of these - correct answer ✔IT auditing
The factors that require a firm to change its security planning, protection, and response are called
driving forces.
True
False - correct answer ✔True
The FTC can act against companies that fail to take reasonable precautions to protect privacy
information.
True
False - correct answer ✔True
A benefit of using MSSPs is that they provide ________.
Neither cost savings nor independence
cost savings
, independence
Both cost savings and independence - correct answer ✔Both cost savings and independence
Which companies do PCI-DSS affect?
government organizations
companies that accept credit card payments
e-commerce firms
medical firms - correct answer ✔companies that accept credit card payments
The first step in developing an IT security plan is to ________.
assess the current state of the company's security
determine needs
create comprehensive security
prioritize security projects - correct answer ✔assess the current state of the company's security
________ examines financial processes for efficiency, effectiveness, and adequate controls.
IT auditing
Internal auditing
None of these
Financial auditing - correct answer ✔Financial auditing
It is a good idea to view the security function as a police force or military organization.
verified to pass 2025/2026
________ examines IT processes for efficiency, effectiveness, and adequate controls.
IT auditing
Financial auditing
Internal auditing
None of these - correct answer ✔IT auditing
The factors that require a firm to change its security planning, protection, and response are called
driving forces.
True
False - correct answer ✔True
The FTC can act against companies that fail to take reasonable precautions to protect privacy
information.
True
False - correct answer ✔True
A benefit of using MSSPs is that they provide ________.
Neither cost savings nor independence
cost savings
, independence
Both cost savings and independence - correct answer ✔Both cost savings and independence
Which companies do PCI-DSS affect?
government organizations
companies that accept credit card payments
e-commerce firms
medical firms - correct answer ✔companies that accept credit card payments
The first step in developing an IT security plan is to ________.
assess the current state of the company's security
determine needs
create comprehensive security
prioritize security projects - correct answer ✔assess the current state of the company's security
________ examines financial processes for efficiency, effectiveness, and adequate controls.
IT auditing
Internal auditing
None of these
Financial auditing - correct answer ✔Financial auditing
It is a good idea to view the security function as a police force or military organization.
