IIA IIA-CIA-Part3 Exam Dumps

IIA IIA-CIA-Part3 Sample Question Answers

Question # 1

Which of the following is a cybersecurity monitoring activity that involves assessing thestrength of an organization's IT protection?

A. Boundary defense 
B. Malware defense 
C. Penetration tests 
D. Wireless access controls 

Show Answer

Question # 2

New data privacy laws require an organization to use collected customer information for mesole purpose of meeting the organization's business requirements. Which of the followingbest addresses the risk of the organization not complying with this objective?

A. Provide training on social engineering attacks 
B. Encrypt the customer information retained by the organization 
C. Establish policies that discipline those who misuse customer information 
D. Allocate access profiles for each end user of the information 

Show Answer

Question # 3

Which of the following statements is true regarding the risks associated with the increaseduse of smart devices at work?

A. Due to their small size and portability smart devices and their associated data aretypically less susceptible to physical loss 
B. The Bluetooth and WI-FI features of smart devices enhance the security of data while intransit 
C. The global positioning system (GPS) capability of smart devices could be exploited toplan cyberattacks 
D. When the user fads to perform jailbreaking or rooting, data security and privacy risks weincreased 

Show Answer

Question # 4

The balanced scorecard approach differs from traditional performance measurementapproaches because it adds which of the following measures?1. Financial measures2. Internal business process measures.3. Client satisfaction measures4. Innovation and learning measures

A. 1 only. 
B. 2 and 4 only. 
C. 3 and 4 only. 
D. 2, 3, and 4 only 

Show Answer

Question # 5

An internal auditor is evaluating an organization's business continuity managementprogram According to HA guidance on IT. which of the following tests would bestdemonstrate the ability to perform Key processes without significant problems?

A. End-to-end testing 
B. IT systems and application walkthrough 
C. Tabletop or boardroom-style testing 
D. Desk check testing 

Show Answer

Question # 6

Which of the following is an example of a phishing attack?

A. An employee receives an email that appears to be from the organization's bank, thoughit is not. The employee replies to the email and sends the requested confidentialinformation. 
B. An organization's website has been hacked. The hacker added political content that isnot consistent with the organization's views. 
C. An organization's systems have been compromised by malicious software. The softwarelocks the organization's operating system until d ransom is paid.
D. An organization's communication systems have been intercepted. A communicationsession is controlled by an unauthorized third party. 

Show Answer

Question # 7

Organizations mat adopt just-in-time purchasing systems often experience which of thefollowing? 

A. A slight increase in carrying costs. 
B. A greater need for inspection of goods as the goods arrive. 
C. A greater need for linkage with a vendor s computerized order entry system. 
D. An increase in the number of suitable suppliers 

Show Answer

Question # 8

The mobility of personal smart devices significantly increases which of the following risks?

A. Data integrity risks 
B. Compliance risks. 
C. Physical security risks 
D. Privacy risks 

Show Answer

Question # 9

During an audit of the organization's annual financial statements, the internal auditor notesthat the current cost of goods sold percentage is substantially higher than in prior years.Which of the following is the most likely explanation for this increase?

A. Cost of raw material inventory items is decreasing. 
B. Process to manufacture goods is more efficient. 
C. Labor productivity to produce goods is increasing. 
D. Write-off of inventory is increasing. 

Show Answer

Question # 10

When using data analytics during a review of the procurement process what is the first stepin the analysis process?

A. Identity data anomalies and outliers 
B. Define questions to be answered 
C. identify data sources available 
D. Determine the scope of the data extract 

Show Answer

Question # 11

With regard to disaster recovery planning, which of the following would most likely involvestakeholders from several departments?

A. Determining the frequency with which backups will be performed. 
B. Prioritizing the order in which business systems would be restored. 
C. Assigning who in the IT department would be involved in the recovery procedures. 
D. Assessing the resources needed to meet the data recovery objectives 

Show Answer

Question # 12

Which of the following is an example of a physical security control that should be in place atan organization's data center?

A. Backup servers in the data center are stored in an environmentally controlled location 
B. All users have a unique ID and password to access data 
C. Swipe cards are used to access the data center 
D. Firewalls and antivirus protection are in place to prevent unauthorized access to data. 

Show Answer

Question # 13

Which of the following is improved by the use of smart devices?

A. Version control 
B. Privacy 
C. Portability 
D. Secure authentication 

Show Answer

Question # 14

Which of the following IT-related activities is most commonly performed by the second lineof defense?

A. Block unauthorized traffic. 
B. Encrypt data. 
C. Review disaster recovery test results. 
D. Provide independent assessment of IT security. 

Show Answer

Question # 15

An organization with global headquarters in the United States has subsidiaries in eightother nations. If the organization operates with an ethnocentric attitude, which of thefollowing statements is true?

A. Standards used for evaluation and control are determined at local subsidiaries, not setby headquarters. 
B. Orders, commands and advice are sent to the subsidiaries from headquarters. 
C. People of local nationality are developed for the best positions within their own country 
D. There is a significant amount of collaboration between headquarters and subsidiaries. 

Show Answer

Question # 16

Which of the following financial instruments should be recorded at fair market value on thefinancial statements?

A. Accounts receivable in the short term 
B. Bonds to be held to maturity. 
C. Notes receivable in the short term 
D. Bonds to be held for sale in the short term. 

Show Answer

Question # 17

Which of the following financial instruments should be recorded at fair market value on thefinancial statements?

A. Accounts receivable in the short term 
B. Bonds to be held to maturity. 
C. Notes receivable in the short term 
D. Bonds to be held for sale in the short term. 

Show Answer

Question # 18

Which of the following IT controls includes protection for mainframe computers andworkstations?

A. Change management controls 
B. Physical and environmental controls. 
C. System software controls 
D. Organization and management controls 

Show Answer

Question # 19

Which of the following controls would be the most effective in preventing the disclosure ofan organization s confidential electronic information?

A. Non-disclosure agreements between the firm and its employees 
B. Logs of user activity within the information system 
C. Two-factor authentication for access into the information system 
D. Limited access to information based on employee duties 

Show Answer

Question # 20

According to IIA guidance, which of the following is the correct order to conduct a businessimpact analysis (BIA) for the potential loss of an organization's network services''1. identify resources and partners to provide required recovery services2. Identify the business processes supporting the network functionality3. Obtain approval of the BIA from the operating managers relative to their areas ofresponsibility4. Identify the business impact if the network services cannot be performed

A. 1, 2, 3, 4 
B. 2, 1, 4, 3 
C. 2, 4, 1, 3 
D. 4, 2, 1, 3 

Show Answer

Question # 21

An organization is developing a new online collaboration tool for employees. The toolincludes a homepage that is customized to each employee according to his departmentand job function Which of the following engagements should be conducted to ensure thatthe organization has included all departments and job functions in the system before it isimplemented?

A. An application control review 
B. A source code review 
C. A design review 
D. An access control review 

Show Answer

Question # 22

Which of the following characteristics is most important specifically for a global manager topossess in order to be successful?

A. Knowledge of different languages. 
B. Understanding of uncertainty avoidance differences 
C. Emotional intelligence 
D. Cultural intelligence 

Show Answer

Question # 23

An organization uses the management-by-objectives method, whereby employeeperformance is based on defined goals Which of the following statements is true regardingthis approach?

A. It is particularly helpful to management when the organization is facing rapid change 
B. It is a more successful approach when adopted by mechanistic organizations 
C. It is more successful when goal-setting is performed not only by management, but by anteam members, including lower-level staff. 
D. It is particularly successful in environments that are prone to having poor employeremployee relations 

Show Answer

Question # 24

Which of the following statements about mentoring is true?1. Mentoring can be used effectively for increasing employee retention2. Mentoring can be used effectively in reducing employees frustration.3. Mentoring can be used effectively for increasing organization communication.4. Mentoring can be used effectively as a short term activity consisting of instruction andtraining

A. 1 2. and 3 only. 
B. 1. 2 and 4 only 
C. 1, 3. and 4 only. 
D. 1,2. 3, and 4 

Show Answer

Question # 25

Which of the following IT operational areas is responsible for the integrity of data flow withinan organization?

A. Network 
B. Database 
C. Operating system 
D. Server 

Show Answer

Question # 26

Which of the following situations best applies to an organization that uses a project ratherman a process to accomplish its business activities?

A. A clothing company designs makes and sells a new item. 
B. A commercial constructor company is hired to build a warehouse. 
C. A city department sets up a new firefighter training program. 
D. A manufacturing organization acquires component parts from a contracted vendor 

Show Answer

Question # 27

An organization's network administrator received an email that appeared to come from theorganization's external IT service provider requesting his credentials to perform an updateof a server operating system If the IT service provider did not send the email, which of thefollowing best describes the likely purpose of the email?

A. An attempt at phishing. 
B. An attempt at penetration testing 
C. An attempt to patch the server 
D. An attempt to launch malware 

Show Answer

Question # 28

The greatest advantage of functional departmentalization is that it:

A. Facilitates communication between primary functions. 
B. Helps to focus on the achievement of organizational goals. 
C. Provides for efficient use of specialized knowledge . 
D. Accommodates geographically dispersed companies 

Show Answer

Question # 29

Which of the following statements is true regarding cybersecurity risk?

A. Cybersecurity risks are identical across all organizations regardless of industry 
B. Installation of antivirus and malware software prevents cybersecurity risks 
C. Deployment of proper cybersecurity measures assures business success 
D. Information value extends the emergence of cybersecurity risks 

Show Answer

Question # 30

Which of the following statements is true regarding an organization's servers?

A. Servers optimize data processing by sharing it with other computers on the informationsystem 
B. Servers manage the interconnectivity of system hardware devices in the informationsystem. 
C. Servers manage the data stored in databases residing on the information system. 
D. Servers enforce access controls between networks transmitting data on the informationsystem 

Show Answer

Question # 31

An organization's headquarters is centrally located and the organization runs numerouscomputer applications in multiple sites. Which of the following would be the mostappropriate approach for conducting an audit of the mainframe computer'

A. Conduct an individual audit of the mainframe general controls and separate applicationcontrol audits of the individual applications in a phased manner 
B. Conduct a single consolidated audit of both the mainframe general controls and theapplication controls for all of the applications that use the mainframe 
C. Conduct individual audits of each application and include in each audit the generalcontrols of the mainframe relevant to the individual application 
D. Conduct a series of location-based audits that cover both the general and application ITcontrols m an systems across the location 

Show Answer

Question # 32

Which of the following recognized competitive strategies focuses on gaining efficiencies?

A. Focus 
B. Cost leadership 
C. Innovation 
D. Differentiation 

Show Answer

Question # 33

Which of the following statements is most accurate with respect to various forms, elements,and characteristics of business contracts?

A. A contract is a tool used by both suppliers and customers, the model and complexity ofwhich generally remains constant 
B. Collaboration during contract negotiation encourages stakeholders to developconsensus but typically increases cycle times and the likelihood that the contract will fail 
C. Differing legal requirements affect the attitudes of contracting parties as well as thelength content and language of contracts 
D. A contract is a tool used by both suppliers and customers though it offers commercialassurance of the relationship, purely from a customer perspective 

Show Answer

Question # 34

Organization X owns a 38 percent equity stake in Organization Y. Which of the followingstatements is true regarding the financial treatment for this relationship?

A. Y should be listed as an investment asset on X's balance sheet 
B. X must consolidate the financial statements for both organizations 
C. Y should be reported as a footnote to X's financial statements 
D. Y should not be reported by X as X does not have a controlling interest 

Show Answer