Home / IIA / IIA-CIA-Part3

IIA IIA-CIA-Part3 Practice Test - Questions Answers, Page 32

Question list

List of questions

Question 311

(0)

Which of the following should internal auditors be attentive of when reviewing personal data consent and opt-in/opt-out management process?

Question 312

(0)

In an effort to increase business efficiencies and improve customer service offered to its major trading partners, management of a manufacturing and distribution company established a secure network

Question 313

(0)

Which of these instances accurately describes the responsibilities for big data governance?

Question 314

(0)

According to IIA guidance, which of the following statements is true regarding penetration testing?

Question 315

(0)

Which of the following financial statements provides the best disclosure of how a company's money was used during a particular period?

Question 316

(0)

According to The IIA's Three Lines Model, which of the following IT security activities is commonly shared by all three lines?

Question 317

(0)

A organization finalized a contract in which a vendor is expected to design, procure, and construct a power substation for $3,000,000. In this scenario, the organization agreed to which of the follo

Question 318

(0)

Which of the following analytical techniques would an internal auditor use to verify that none of an organization's employees are receiving fraudulent invoice payments?

Question 319

(0)

Which of the following would be the best method to collect information about employees' job satisfaction?

Question 320

(0)

Which of the following is a distinguishing feature of managerial accounting, which is not applicable to financial accounting?

Related questions

When executive compensation is based on the organization's financial results, which of the following situations is most likely to arise?

Which of the following contract concepts is typically given in exchange for the execution of a promise?

An internal auditor is reviewing key phases of a software development project. Which of the following would; the auditor most likely use to measure the project team's performance related to how project tasks are completed?

Which of the following statements is true regarding a project life cycle?

An internal auditor observed that the organization's disaster recovery solution will make use of a cold site in a town several miles away. Which of the following is likely to be a characteristic of this disaster recover/ solution?

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to the organization itself. - Risks specific to the service provider. - Risks shared by both the organization and the service provider Which of the following risks should the auditor classify as specific to the service provider?

A newly appointed board member received an email that appeared to be from the company's CEO. The email stated: "Good morning. As you remember, the closure of projects is our top priority. Kindly organize prompt payment of the attached invoice for our new solar energy partners." The board member quickly replied to the email and asked under which project the expense should be accounted. Only then did he realize that the sender 's mail domain was different from the company's. Which of the following cybersecurity risks nearly occurred in the situation described?

An employee was promoted within the organization and relocated to a new office in a different building. A few months later, security personnel discovered that the employee's smart card was being used to access the building where she previously worked. Which of the following security controls could prevent such an incident from occurring?

Which of the following best describes the use of predictive analytics?

Which of the following characteristics applies to an organization that adopts a flat structure?

Question 311

Which of the following should internal auditors be attentive of when reviewing personal data consent and opt-in/opt-out management process?

Whether customers are asked to renew their consent for their data processing at least quarterly.

Whether private data is processed in accordance with the purpose for which the consent was obtained?

Whether the organization has established explicit and entitywide policies on data transfer to third parties.

Whether customers have an opportunity to opt-out the right to be forgotten from organizational records and systems.

Show Answer Comment (0)

In an effort to increase business efficiencies and improve customer service offered to its major trading partners, management of a manufacturing and distribution company established a secure network, which provides a secure channel for electronic data interchange between the company and its partners. Which of the following network types is illustrated by this scenario?

A value-added network.

A local area network.

A metropolitan area network.

A wide area network.

Show Answer Comment (0)

Question 313

Which of these instances accurately describes the responsibilities for big data governance?

Management must ensure information storage systems are appropriately defined and processes to update critical data elements are clear.

External auditors must ensure that analytical models are periodically monitored and maintained.

The board must implement controls around data quality dimensions to ensure that they are effective.

Internal auditors must ensure the quality and security of data, with a heightened focus on the riskiest data elements.

Show Answer Comment (0)

Question 314

According to IIA guidance, which of the following statements is true regarding penetration testing?

Testing should not be announced to anyone within the organization to solicit a real-life response.

Testing should take place during heavy operational time periods to test system resilience.

Testing should be wide in scope and primarily address detective management controls for identifying potential attacks.

Testing should address the preventive controls and management's response.

Show Answer Comment (0)

Question 315

Which of the following financial statements provides the best disclosure of how a company's money was used during a particular period?

Income statement.

Owner's equity statement.

Balance sheet.

Statement of cash flows.

Show Answer Comment (0)

Question 316

According to The IIA's Three Lines Model, which of the following IT security activities is commonly shared by all three lines?

Assessments of third parties and suppliers.

Recruitment and retention of certified IT talent.

Classification of data and design of access privileges.

Creation and maintenance of secure network and device configuration.

Show Answer Comment (0)

Question 317

A organization finalized a contract in which a vendor is expected to design, procure, and construct a power substation for $3,000,000. In this scenario, the organization agreed to which of the following types of contracts?

A cost-reimbursable contract.

A lump-sum contract.

A time and material contract.

A bilateral contract.

Show Answer Comment (0)

Question 318

Which of the following analytical techniques would an internal auditor use to verify that none of an organization's employees are receiving fraudulent invoice payments?

Perform gap testing.

Join different data sources.

Perform duplicate testing.

Calculate statistical parameters.

Show Answer Comment (0)