Which of the following statements is true regarding data backup?

The tape rotation schedule affects how long data is retained

System backups should always be performed real time.

Backups should be stored in a secured location onsite for easy access.

The tape rotation schedule affects how long data is retained

Backup media should be restored only m case of a hardware or software failure

Which of the following principles s shared by both hierarchies and open organizational structures?

A superior can delegate the authority to make decisions but cannot delegate the ultimate responsibility for the results of those decisions.

A supervisor's span of control should not exceed seven subordinates.

Responsibility should be accompanied by adequate authority.

Employees at all levels should be empowered to make decisions.

Which of the following would be a concern related to the authorization controls utilized for a system?

Users can only see certain screens in the system.

Users are making frequent password change requests.

Users Input Incorrect passwords and get denied system access

Users are all permitted uniform access to the system.

Which of the following is the best example of a compliance risk that Is likely to arise when adopting a bring-your-own-device (BYOD) policy?

The risk that proprietary information is not deleted from the device when an employee leaves.

The risk that users try to bypass controls and do not install required software updates.

The risk that smart devices can be lost or stolen due to their mobile nature..

The risk that an organization intrusively monitors personal Information stored on smart devices.

The risk that proprietary information is not deleted from the device when an employee leaves.

According to IIA guidance, which of the following best describes an adequate management (audit.) trail application control for the general ledger?

Report identifying general ledger transactions by time and individual.

Report identifying data that is outside of system parameters

Report identifying general ledger transactions by time and individual.

Report comparing processing results with original Input

Report confirming that the general ledger data was processed without error

How do data analysis technologies affect internal audit testing?

They allow greater insight into high risk areas.

They improve the effectiveness of spot check testing techniques.

They allow greater insight into high risk areas.

They reduce the overall scope of the audit engagement,

They increase the internal auditor's objectivity.

A retail organization mistakenly did have include $10,000 of Inventory in the physical count at the end of the year. What was the impact to the organization's financial statements?

Cost of sales is overstated and net Income is understated.

Cost of sales and net income are understated.

Cost of sales and net income are overstated.

Cost of sales is understated and not income is overstated.

Cost of sales is overstated and net Income is understated.

Which of the following describes the most appropriate set of tests for auditing a workstation's logical access controls?

Review the password length, frequency of change, and list of users for the workstation's login process.

Review the list of people with access badges to the room containing the workstation and a log of those who accessed the room.

Review the password length, frequency of change, and list of users for the workstation's login process.

Review the list of people who attempted to access the workstation and failed, as well as error messages.

Review the passwords of those who attempted unsuccessfully to access the workstation and the log of their activity

Which of the following is most important for an internal auditor to check with regard to the database version?

Verify whether the database software version is supported by the vendor.

Verify whether the organization uses the most recent database software version.

Verify whether the database software version is supported by the vendor.

Verify whether the database software version has been recently upgraded.

Verify whether .access to database version information is appropriately restricted.

A rapidly expanding retail organisation continues to be tightly controlled by its original small management team. Which of the following is a potential risk in this vertically centralized organization?

Lack of coordination among different business units

Operational decisions are inconsistent with organizational goals

Duplication of business activities

Which of the following items represents the first thing that should be done with obtained dote in the data analytics process?

Verify completeness and accuracy.

Verify completeness and integrity.

Verify existence and completeness.

Which of the following should be included in a data privacy poky?

A requirement to retain personal data indefinitely to ensure a complete audit trail, 4. A description of what constitutes appropriate use of personal data.

Stipulations for deleting certain data after a specified period of time.

Guidance on acceptable methods for collecting personal data.

A requirement to retain personal data indefinitely to ensure a complete audit trail, 4. A description of what constitutes appropriate use of personal data.

The head of the research arid development department at a manufacturing organization believes that his team lacks expertise in some areas, and he decides to hire more experienced researchers to assist in the development of a new product. Which of the following variances are likely to occur as the result of this decision?

Favorable labor efficiency variance.

Adverse labor efficiency variance.

Which of the following IT-related activities is most commonly performed by the second line of defense?

Review disaster recovery test results.

Provide independent assessment of IT security.

With regard to project management, which of the following statements about project crashing Is true?

It is a compression technique in which resources are added so the project.

It leads to an increase in risk and often results in rework.

It is an optimization technique where activities are performed in parallel rather than sequentially.

It involves a revaluation of project requirements and/or scope.

It is a compression technique in which resources are added so the project.

An organization uses the management-by-objectives method whereby employee performance is based on defined goals. Which of the following statements is true regarding this approach?

It is mere successful when goal setting is performed not only by management, but by all team members, including lower-level staff.

It is particularly helpful to management when the organization is facing rapid change.

It is a more successful approach when adopted by mechanistic organizations.

It is mere successful when goal setting is performed not only by management, but by all team members, including lower-level staff.

It is particularly successful in environments that are prone to having poor employer-employee relations.

According to IIA guidance, which of the following would be the best first stop to manage risk when a third party is overseeing the organization's network and data?

Drafting a strong contract that requires regular vendor control reports end a right-to-audit clause.

Creating a comprehensive reporting system for vendors to demonstrate their ongoing due diligence in network operations.

Drafting a strong contract that requires regular vendor control reports end a right-to-audit clause.

Applying administrative privileges to ensure right to access controls are appropriate.

Creating a standing cyber-security committee to identify and manage risks related to data security

A new manager received computations of the internal fate of return regarding the project proposal.What should the manager compare the computation results to in order to determine whether the project is potentially acceptable?

Compare to the annual cost of capital

Compare to the annual interest data.

Compare to the required rate of return.

Compare to the net present value.

An organization has instituted a bring-your-own-device (BYOD) work environment. Which of the following policies best addresses the increased risk to the organization's network incurred by this environment?

Use management software scan and then prompt parch reminders when devices connect to the network

Limit the use of the employee devices for personal use to mitigate the risk of exposure to organizational data.

Ensure that relevant access to key applications is strictly controlled through an approval and review process.

Institute detection and authentication controls for all devices used for network connectivity and data storage.

Use management software scan and then prompt parch reminders when devices connect to the network

An organization's account for office supplies on hand had a balance of $9,000 at the end of year one.During year two. The organization recorded an expense of $45,000 for purchasing office supplies. At the end of year two. a physical count determined that the organization has $11 ,500 in office supplies on hand. Based on this Information, what would he recorded in the adjusting entry an the end of year two?

A debit to office supplies on hand for $11.500

A debit to office supplies on hand for S2.500

A debit to office supplies on hand for $11.500

A debit to office supplies on hand for $20,500

A debit to office supplies on hand for $42,500

Which of the following is a project planning methodology that involves a complex series of required simulations to provide information about schedule risk?

Project Management Information System (PMIS).

Which of the following physical access control is most likely to be based on ''something you have" concept?

A retina characteristics reader

Which of the following purchasing scenarios would gain the greatest benefit from implementing electronic cate interchange?

A just-in-time purchasing environment

A Large volume of custom purchases

A variable volume sensitive to material cost

A currently inefficient purchasing process

Which of the following is an example of a key systems development control typically found in the Inhouse development of an application system?

The development process is designed to prevent, detect, and correct errors that may occur.

Logical access controls monitor application usage and generate audit trails.

The development process is designed to prevent, detect, and correct errors that may occur.

A record is maintained to track the process of data from Input, to output to storage.

Business users' requirements are documented, and their achievement is monitored

An organization accomplishes its goal to obtain a 40 percent share of the domestic market, but is unable to get the desired return on Investment and output per hour of labor. Based on this information, the organization is most likely focused on which of the following?

Effectiveness and not efficiency

Capital investment and not marketing

Marketing and not capital investment

Efficiency and not input economy

Effectiveness and not efficiency

IIA IIA-CIA-Part3 Practice Test 4 - Free Online Exam Questions 121-160

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

IIA IIA-CIA-Part3 Practice Test 4

Question

IIA IIA-CIA-Part3 Practice Tests

Practice Tests