Home / IIA / IIA-CIA-Part3

IIA IIA-CIA-Part3 Practice Test - Questions Answers, Page 31

Question list

List of questions

Question 301

(0)

Which of the following would be the strongest control to prevent unauthorized wireless network access?

Question 302

(0)

A chief audit executive wants to implement an enterprisewide resource planning software. Which of the following internal audit assessments could provide overall assurance on the likelihood of the so

Question 303

(0)

Which of the following is an example of two-factor authentication?

Question 304

(0)

The internal audit activity has identified accounting errors that resulted in the organization overstating its net income for the fiscal year. Which of the following is the most likely cause of this

Question 305

(0)

Which of the following is considered a physical security control?

Question 306

(0)

Which of the following business practices promotes a culture of high performance?

Question 307

(0)

An internal auditor has requested the organizational chart in order to evaluate the control environment of an organization. Which of the following is a disadvantage of using the organizational chart

Question 308

(0)

A financial institution receives frequent and varied email requests from customers for funds to be wired out of their accounts. Which verification activity would best help the institution avoid fall

Question 309

(0)

Internal auditors want to increase the likelihood of identifying very small control and transaction anomalies in their testing that could potentially be exploited to cause material breaches. Which o

Question 310

(0)

An internal auditor discusses user-defined default passwords with the database administrator. Such passwords will be reset as soon as the user logs in for the first time, but the initial value of th

Related questions

When executive compensation is based on the organization's financial results, which of the following situations is most likely to arise?

Which of the following contract concepts is typically given in exchange for the execution of a promise?

An internal auditor is reviewing key phases of a software development project. Which of the following would; the auditor most likely use to measure the project team's performance related to how project tasks are completed?

Which of the following statements is true regarding a project life cycle?

An internal auditor observed that the organization's disaster recovery solution will make use of a cold site in a town several miles away. Which of the following is likely to be a characteristic of this disaster recover/ solution?

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to the organization itself. - Risks specific to the service provider. - Risks shared by both the organization and the service provider Which of the following risks should the auditor classify as specific to the service provider?

A newly appointed board member received an email that appeared to be from the company's CEO. The email stated: "Good morning. As you remember, the closure of projects is our top priority. Kindly organize prompt payment of the attached invoice for our new solar energy partners." The board member quickly replied to the email and asked under which project the expense should be accounted. Only then did he realize that the sender 's mail domain was different from the company's. Which of the following cybersecurity risks nearly occurred in the situation described?

An employee was promoted within the organization and relocated to a new office in a different building. A few months later, security personnel discovered that the employee's smart card was being used to access the building where she previously worked. Which of the following security controls could prevent such an incident from occurring?

Which of the following best describes the use of predictive analytics?

Which of the following characteristics applies to an organization that adopts a flat structure?

Question 301

Which of the following would be the strongest control to prevent unauthorized wireless network access?

Allowing access to the organization's network only through a virtual private network.

Logging devices that access the network, including the date. time, and identity of the user.

Tracking all mobile device physical locations and banning access from non-designated areas.

Permitting only authorized IT personnel to have administrative control of mobile devices.

Show Answer Comment (0)

A chief audit executive wants to implement an enterprisewide resource planning software. Which of the following internal audit assessments could provide overall assurance on the likelihood of the software implementation's success?

Readiness assessment.

Project risk assessment.

Post-implementation review.

Key phase review.

Show Answer Comment (0)

Question 303

Which of the following is an example of two-factor authentication?

The user's facial geometry and voice recognition.

The user's password and a separate passphrase.

The user's key fob and a smart card.

The user's fingerprint and a personal Identification number.

Show Answer Comment (0)

Question 304

The internal audit activity has identified accounting errors that resulted in the organization overstating its net income for the fiscal year. Which of the following is the most likely cause of this overstatement?

Beginning inventory was overstated for the year.

Cost of goods sold was understated for the year.

Ending inventory was understated for the year.

Cost of goods sold was overstated for the year.

Show Answer Comment (0)

Question 305

Which of the following is considered a physical security control?

Transaction logs are maintained to capture a history of system processing.

System security settings require the use of strong passwords and access controls.

Failed system login attempts are recorded and analyzed to identify potential security incidents.

System servers are secured by locking mechanisms with access granted to specific individuals.

Show Answer Comment (0)

Question 306

Which of the following business practices promotes a culture of high performance?

Reiterating the importance of compliance with established policies and procedures.

Celebrating employees' individual excellence.

Periodically rotating operational managers.

Avoiding status differences among employees.

Show Answer Comment (0)

Question 307

An internal auditor has requested the organizational chart in order to evaluate the control environment of an organization. Which of the following is a disadvantage of using the organizational chart?

The organizational chart shows only formal relationships.

The organizational chart shows only the line of authority.

The organizational chart shows only the senior management positions.

The organizational chart is irrelevant when testing the control environment.

Show Answer Comment (0)

Question 308

A financial institution receives frequent and varied email requests from customers for funds to be wired out of their accounts. Which verification activity would best help the institution avoid falling victim to phishing?

Reviewing the customer's wire activity to determine whether the request is typical.

Calling the customer at the phone number on record to validate the request.

Replying to the customer via email to validate the sender and request.

Reviewing the customer record to verify whether the customer has authorized wire requests from that email address.

Show Answer Comment (0)

Question 309

Internal auditors want to increase the likelihood of identifying very small control and transaction anomalies in their testing that could potentially be exploited to cause material breaches. Which of the following techniques would best meet this objective?

Analysis of the full population of existing data.

Verification of the completeness and integrity of existing data.

Continuous monitoring on a repetitive basis.

Analysis of the databases of partners, such as suppliers.

Show Answer Comment (0)

Question 310

An internal auditor discusses user-defined default passwords with the database administrator. Such passwords will be reset as soon as the user logs in for the first time, but the initial value of the password is set as "123456." Which of the following are the auditor and the database administrator most likely discussing in this situation?

Whether it would be more secure to replace numeric values with characters.

What happens in the situations where users continue using the initial password.

What happens in the period between the creation of the account and the password change.

Whether users should be trained on password management features and requirements.

Show Answer Comment (0)

Total 340 questions

29 30 31 32 33

Go to page: of 34