Home / IIA / IIA-CIA-Part3

IIA IIA-CIA-Part3 Practice Test - Questions Answers, Page 15

Question list

List of questions

Question 141

(0)

Which of the following should be included in a data privacy poky?

Question 142

(0)

The head of the research arid development department at a manufacturing organization believes that his team lacks expertise in some areas, and he decides to hire more experienced researchers to assi

Question 143

(0)

Which of the following IT-related activities is most commonly performed by the second line of defense?

Question 144

(0)

With regard to project management, which of the following statements about project crashing Is true?

Question 145

(0)

An organization uses the management-by-objectives method whereby employee performance is based on defined goals. Which of the following statements is true regarding this approach?

Question 146

(0)

According to IIA guidance, which of the following would be the best first stop to manage risk when a third party is overseeing the organization's network and data?

Question 147

(0)

A new manager received computations of the internal fate of return regarding the project proposal. What should the manager compare the computation results to in order to determine whether the proje

Question 148

(0)

Which of the following risks would Involve individuals attacking an oil company's IT system as a sign of solidarity against drilling in a local area?

Question 149

(0)

An organization has 10,000 units of a defect item in stock, per unit, market price is $10$; production cost is $4; and defect selling price is $5. What is the carrying amount (inventory value) of de

Question 150

(0)

According to IIA guidance on IT, which of the following best describes a situation where data backup plans exist to ensure that critical data can be restored at some point in the future, but recover

Related questions

When executive compensation is based on the organization's financial results, which of the following situations is most likely to arise?

Which of the following contract concepts is typically given in exchange for the execution of a promise?

An internal auditor is reviewing key phases of a software development project. Which of the following would; the auditor most likely use to measure the project team's performance related to how project tasks are completed?

Which of the following statements is true regarding a project life cycle?

An internal auditor observed that the organization's disaster recovery solution will make use of a cold site in a town several miles away. Which of the following is likely to be a characteristic of this disaster recover/ solution?

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to the organization itself. - Risks specific to the service provider. - Risks shared by both the organization and the service provider Which of the following risks should the auditor classify as specific to the service provider?

A newly appointed board member received an email that appeared to be from the company's CEO. The email stated: "Good morning. As you remember, the closure of projects is our top priority. Kindly organize prompt payment of the attached invoice for our new solar energy partners." The board member quickly replied to the email and asked under which project the expense should be accounted. Only then did he realize that the sender 's mail domain was different from the company's. Which of the following cybersecurity risks nearly occurred in the situation described?

An employee was promoted within the organization and relocated to a new office in a different building. A few months later, security personnel discovered that the employee's smart card was being used to access the building where she previously worked. Which of the following security controls could prevent such an incident from occurring?

Which of the following best describes the use of predictive analytics?

Which of the following characteristics applies to an organization that adopts a flat structure?

Question 141

Which of the following should be included in a data privacy poky?

Stipulations for deleting certain data after a specified period of time.

Guidance on acceptable methods for collecting personal data.

A requirement to retain personal data indefinitely to ensure a complete audit trail, 4. A description of what constitutes appropriate use of personal data.

1 and 2 only

2 and 3 only

1, 2 and 4 only

2, 3, and 4 only

Show Answer Comment (0)

The head of the research arid development department at a manufacturing organization believes that his team lacks expertise in some areas, and he decides to hire more experienced researchers to assist in the development of a new product. Which of the following variances are likely to occur as the result of this decision?

Favorable labor efficiency variance.

Adverse labor rate variance.

Adverse labor efficiency variance.

Favorable labor rate variance.

1 and 2

1 and 4

3 and A

2 and 3

Show Answer Comment (0)

Question 143

Which of the following IT-related activities is most commonly performed by the second line of defense?

Block unauthorized traffic.

Encrypt data.

Review disaster recovery test results.

Provide independent assessment of IT security.

Show Answer Comment (0)

Question 144

With regard to project management, which of the following statements about project crashing Is true?

It leads to an increase in risk and often results in rework.

It is an optimization technique where activities are performed in parallel rather than sequentially.

It involves a revaluation of project requirements and/or scope.

It is a compression technique in which resources are added so the project.

Show Answer Comment (0)

Question 145

An organization uses the management-by-objectives method whereby employee performance is based on defined goals. Which of the following statements is true regarding this approach?

It is particularly helpful to management when the organization is facing rapid change.

It is a more successful approach when adopted by mechanistic organizations.

It is mere successful when goal setting is performed not only by management, but by all team members, including lower-level staff.

It is particularly successful in environments that are prone to having poor employer-employee relations.

Show Answer Comment (0)

Question 146

According to IIA guidance, which of the following would be the best first stop to manage risk when a third party is overseeing the organization's network and data?

Creating a comprehensive reporting system for vendors to demonstrate their ongoing due diligence in network operations.

Drafting a strong contract that requires regular vendor control reports end a right-to-audit clause.

Applying administrative privileges to ensure right to access controls are appropriate.

Creating a standing cyber-security committee to identify and manage risks related to data security

Show Answer Comment (0)

Question 147

A new manager received computations of the internal fate of return regarding the project proposal.

What should the manager compare the computation results to in order to determine whether the project is potentially acceptable?

Compare to the annual cost of capital

Compare to the annual interest data.

Compare to the required rate of return.

Compare to the net present value.

Show Answer Comment (0)

Question 148

Which of the following risks would Involve individuals attacking an oil company's IT system as a sign of solidarity against drilling in a local area?

Tampering

Hacking

Phishing

Piracy

Show Answer Comment (0)

Question 149

An organization has 10,000 units of a defect item in stock, per unit, market price is $10$; production cost is $4; and defect selling price is $5. What is the carrying amount (inventory value) of defects at your end?

$4,000

$5,000

$10,000

Show Answer Comment (0)

Question 150

According to IIA guidance on IT, which of the following best describes a situation where data backup plans exist to ensure that critical data can be restored at some point in the future, but recovery and restore processes have not been defined?

Hot recovery plan

Warm recovery plan

Cold recovery plan

Absence of recovery plan

Show Answer Comment (0)

Total 340 questions

13 14 15 16 17

Go to page: of 34