Home / IIA / IIA-CIA-Part3

IIA IIA-CIA-Part3 Practice Test - Questions Answers, Page 2

Question list

List of questions

Question 11

(0)

An organization is considering integration of governance, risk., and compliance (GRC) activities into a centralized technology-based resource. In implementing this GRC resource, which of the followi

Question 12

(0)

At one organization, the specific terms of a contract require both the promisor and promisee to sign the contract in the presence of an independent witness. What is the primary role to the witness t

Question 13

(0)

An internal auditor is assigned to perform data analytics. Which of the following is the next step the auditor should undertake after she has ascertained the value expected from the review?

Question 14

(0)

Which of the following actions is likely to reduce the risk of violating transfer pricing regulations?

Question 15

(0)

Which of the following statements is true regarding user-developed applications (UDAs)?

Question 16

(0)

Which of the following represents a basis for consolidation under the International Financial Reporting Standards?

Question 17

(0)

Which of the following scenarios best illustrates a spear phishing attack?

Question 18

(0)

An organization discovered fraudulent activity involving the employee time-tracking system. One employee regularly docked in and clocked out her co-worker friends on their days off, inflating their

Question 19

(0)

Which of the following best describes owner's equity?

Question 20

(0)

Which of the following describes a mechanistic organizational structure?

Related questions

When executive compensation is based on the organization's financial results, which of the following situations is most likely to arise?

Which of the following contract concepts is typically given in exchange for the execution of a promise?

An internal auditor is reviewing key phases of a software development project. Which of the following would; the auditor most likely use to measure the project team's performance related to how project tasks are completed?

Which of the following statements is true regarding a project life cycle?

An internal auditor observed that the organization's disaster recovery solution will make use of a cold site in a town several miles away. Which of the following is likely to be a characteristic of this disaster recover/ solution?

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to the organization itself. - Risks specific to the service provider. - Risks shared by both the organization and the service provider Which of the following risks should the auditor classify as specific to the service provider?

A newly appointed board member received an email that appeared to be from the company's CEO. The email stated: "Good morning. As you remember, the closure of projects is our top priority. Kindly organize prompt payment of the attached invoice for our new solar energy partners." The board member quickly replied to the email and asked under which project the expense should be accounted. Only then did he realize that the sender 's mail domain was different from the company's. Which of the following cybersecurity risks nearly occurred in the situation described?

An employee was promoted within the organization and relocated to a new office in a different building. A few months later, security personnel discovered that the employee's smart card was being used to access the building where she previously worked. Which of the following security controls could prevent such an incident from occurring?

Which of the following best describes the use of predictive analytics?

Which of the following characteristics applies to an organization that adopts a flat structure?

Question 11

An organization is considering integration of governance, risk., and compliance (GRC) activities into a centralized technology-based resource. In implementing this GRC resource, which of the following is a key enterprise governance concern that should be fulfilled by the final product?

The board should be fully satisfied that there is an effective system of governance in place through accurate, quality information provided.

Compliance, audit, and risk management can find and seek efficiencies between their functions through integrated information reporting.

Key compliance and risk metrics can be tracked and compared throughout the enterprise, aiding in identifying problem departments.

Data analytics can be utilized for trending of the data to ensure that patterns and ongoing monitoring occurs throughout the organization.

Show Answer Comment (0)

Question 12

At one organization, the specific terms of a contract require both the promisor and promisee to sign the contract in the presence of an independent witness. What is the primary role to the witness to these signatures?

A witness verifies the quantities of the copies signed.

A witness verifies that the contract was signed with the free consent of the promisor and promisee.

A witness ensures the completeness of the contract between the promisor and promisee.

A witness validates that the signatures on the contract were signed by the promisor and promisee.

Show Answer Comment (0)

Question 13

An internal auditor is assigned to perform data analytics. Which of the following is the next step the auditor should undertake after she has ascertained the value expected from the review?

Normalize the data,

Obtain the data

Identify the risks.

Analyze the data.

Show Answer Comment (0)

Question 14

Which of the following actions is likely to reduce the risk of violating transfer pricing regulations?

The organization sells inventory to an overseas subsidiary at fair value.

The local subsidiary purchases inventory at a discounted price.

The organization sells inventory to an overseas subsidiary at the original cost.

The local subsidiary purchases inventory at the depreciated cost.

Show Answer Comment (0)

Question 15

Which of the following statements is true regarding user-developed applications (UDAs)?

UDAs are less flexible and more difficult to configure than traditional IT applications.

Updating UDAs may lead to various errors resulting from changes or corrections.

UDAs typically are subjected to application development and change management controls.

Using UDAs typically enhances the organization's ability to comply with regulatory factors.

Show Answer Comment (0)

Question 16

Which of the following represents a basis for consolidation under the International Financial Reporting Standards?

Variable entity approach.

Control ownership.

Risk and reward.

Voting interest.

Show Answer Comment (0)

Question 17

Which of the following scenarios best illustrates a spear phishing attack?

Numerous and consistent attacks on the company's website caused the server to crash and service was disrupted.

A person posing as a representative of the company's IT help desk called several employees and played a generic prerecorded message requesting password data.

A person received a personalized email regarding a golf membership renewal, and he clicked a hyperlink to enter his credit card data into a fake website.

Many users of a social network service received fake notifications of a unique opportunity to invest in a new product

Show Answer Comment (0)

Question 18

An organization discovered fraudulent activity involving the employee time-tracking system. One employee regularly docked in and clocked out her co-worker friends on their days off, inflating their reported work hours and increasing their wages. Which of the following physical authentication devices would be most effective at disabling this fraudulent scheme?

Face or finger recognition equipment,

Radiofrequency identification chips to authenticate employees with cards.

A requirement to clock in and clock out with a unique personal identification number.

A combination of a smart card and a password to clock in and clock out.

Show Answer Comment (0)