Which of the following best describes a man-in-the-middle cyber-attack?

The perpetrator is able to take over control of data communication in transit and replace traffic.

The perpetrator is able to delete data on the network without physical access to the device.

The perpetrator is able to exploit network activities for unapproved purposes.

The perpetrator is able to take over control of data communication in transit and replace traffic.

The perpetrator is able to disable default security controls and introduce additional vulnerabilities

Focus An organization has decided to have all employees work from home. Which of the following network types would securely enable this approach?

A virtual private network (VPN)

A wireless local area network (WLAN ).

A virtual private network (VPN)

Which of following best demonstrates the application of the cost principle?

A building purchased last year for $1 million is currently worth ©1.2 million, but the company still reports the building at $1 million.

A company reports trading and investment securities at their market cost

A building purchased last year for $1 million is currently worth ©1.2 million, but the company still reports the building at $1 million.

A building purchased last year for ©1 million is currently worth £1,2 million , and the company adjusts the records to reflect the current value

A company reports assets at either historical or fair value, depending which is closer to market value.

When examining; an organization's strategic plan, an internal auditor should expect to find which of the following components?

Identification of achievable goals and timelines

Analysis of the competitive environment.

Plan for the procurement of resources

Plan for progress reporting and oversight.

The chief audit executive (CAE) has embraced a total quality management approach to improving the internal audit activity's (lAArs) processes. He would like to reduce the time to complete audits and improve client ratings of the IA

Assign a team to each audit, designate a single person to be responsible for each phase of the audit, and limit decision making outside of their area of responsibility.

Which of the following staffing approaches is the CAE most likely lo select?

Assign a team with a trained audit manager to plan each audit and distribute field work tasks to various staff auditors.

Assign a team of personnel who have different specialties to each audit and empower Team members to participate fully in key decisions

Assign a team to each audit, designate a single person to be responsible for each phase of the audit, and limit decision making outside of their area of responsibility.

Assign a team of personnel who have similar specialties to specific engagements that would benefit from those specialties and limit Key decisions to the senior person.

Which of the following items best describes the strategy of outsourcing?

Contracting the work to Foreign Service providers to obtain lower costs

Contracting functions or knowledge-related work with an external service provider.

Contract -ng operation of some business functions with an internal service provider

Contracting a specific external service provider to work with an internal service provider

Which of the following is most appropriately placed in the financing section of an organization's cash budget?

Payment of debt, including interest

An internal auditor for a pharmaceutical company as planning a cybersecurity audit and conducting a risk assessment. Which of the following would be considered the most significant cyber threat to the organization?

Hackers breaching the organization's network to access research and development reports

Cybercriminals hacking into the organization's time and expense system to collect employee personal data.

Hackers breaching the organization's network to access research and development reports

A denial-of-service attack that prevents access to the organization's website.

A hacker accessing she financial information of the company

An internal audit activity is piloting a data analytics model, which aims to identify anomalies in payments to vendors and potential fraud indicators. Which of the following would be the most appropriate criteria for assessing the success of the piloted model?

The percentage of cases flagged by the model and confirmed as positives.

The development and maintenance costs associated with the model

The feedback of auditors involved with developing the model.

The number of criminal investigations initiated based on the outcomes of the model

Which component of an organization's cybersecurity risk assessment framework would allow management to implement user controls based on a user's role?

Prompt response and remediation policy

Inventory of information assets

Standard security configurations

What is the primary purpose of data and systems backup?

To restore data and systems to a previous point in time after the occurrence of an incident

To restore all data and systems immediately after the occurrence of an incident.

To set the maximum allowable downtime to restore systems and data after the occurrence of an incident.

To set the point in time to which systems and data must be recovered after the occurrence of an incident.

To restore data and systems to a previous point in time after the occurrence of an incident

Which of the following can be classified as debt investments?

Acquisition of government bonds.

Investments in the capital stock of a corporation

Acquisition of government bonds.

Contents of an investment portfolio,

Acquisition of common stock of a corporation

How can the concept of relevant cost help management with behavioral analyses?

It enables management to make business decisions, as it explains the cost that will be incurred for a given course of action

It explains the assumption mat both costs and revenues are linear through the relevant range

It enables management to calculate a minimum number of units to produce and sell without having to incur a loss.

It enables management to predict how costs such as the depreciation of equipment will be affected by a change in business decisions

It enables management to make business decisions, as it explains the cost that will be incurred for a given course of action

An organization upgraded to a new accounting software. Which of the following activities should be performed by the IT software vendor immediately following the upgrade?

Software testing and validation

Market analysis lo identify trends

Services to manage and maintain the IT Infrastructure.

Software testing and validation

Which of the following is a limitation of the remote wipe for a smart device?

Mobile device management software is required for successful remote wipe

Encrypted data cannot be locked to prevent further access

Default settings cannot be restored on the device.

All data, cannot be completely removed from the device

Mobile device management software is required for successful remote wipe

Which of the following is an example of internal auditors applying data mining techniques for exploratory purposes?

Internal auditors perform a risk assessment to identify potential audit subjects as input for the annual internal audit plan

Internal auditors perform reconciliation procedures to support an external audit of financial reporting.

Internal auditors perform a systems-focused analysis to review relevant controls.

Internal auditors perform a risk assessment to identify potential audit subjects as input for the annual internal audit plan

Internal auditors test IT general controls with regard to operating effectiveness versus design

Which of the following performance measures disincentives engaging in earnings management?

Linking performance to profitability measures such as return on investment.

Linking performance to the stock price.

Linking performance to quotas such as units produced.

Linking performance to nonfinancial measures such as customer satisfaction and employees training

While conducting' audit procedures at the organization's data center an internal auditor noticed the following:- Backup media was located on data center shelves.- Backup media was organized by date.- Backup schedule was one week in duration.The system administrator was able to present restore logs.Which of the following is reasonable for the internal auditor to conclude?

Backup media is not properly stored, as the storage facility should be off-site.

Backup procedures are adequate and appropriate according to best practices.

Backup media is not properly indexed, as backup media should be indexed by system, not date.

Backup schedule is not sufficient, as full backup should be conducted daily.

Which of the following best describes a potential benefit of using data analyses?

Its outcomes can be easily interpreted into audit: conclusions.

It easily aligns with existing internal audit competencies to reduce expenses

It provides a more holistic view of the audited area.

Its outcomes can be easily interpreted into audit: conclusions.

Its application increases internal auditors' adherence to the Standards

A third party who provides payroll services to the organization was asked to create audit or "readonly 1 functionalities in their systems. Which of the following statements is true regarding this request?

This will address cybersecurity considerations and concerns.

This will support execution of the right-to-audit clause.

This will enforce robust risk assessment practices

This will address cybersecurity considerations and concerns.

This will enhance the third party's ability to apply data analytics

Which of the following cost of capital methods identifies the time period required to recover She cost of the capital investment from the annual inflow produced?

Annual rate of return technique.

Internal rate of return method.

IIA IIA-CIA-Part3 Practice Test 6 - Free Online Exam Prep & Questions

An organization's board of directors is particularly focused on positioning, the organization as a leader in the industry and beating the competition. Which of the following strategies offers the greatest alignment with the board's focus?

Divesting product lines expected to have negative profitability.

Increasing the diversity of strategic business units.

Increasing investment in research and development for a new product.

Relocating the organization's manufacturing to another country.

Comment (0)

IIA IIA-CIA-Part3 Practice Test 6

Question

IIA IIA-CIA-Part3 Practice Tests

Practice Tests