Home / IIA / IIA-CIA-Part3

IIA IIA-CIA-Part3 Practice Test - Questions Answers, Page 9

Question list

List of questions

Question 81

(0)

Which of the following measures would best protect an organization from automated attacks whereby the attacker attempts to identify weak or leaked passwords in order to log into employees' accounts?

Question 82

(0)

According to 11A guidance on it; which of the following statements is true regarding websites used in e-commerce transactions?

Question 83

(0)

Which of the following is a benefit from the concept of Internet of Things?

Question 84

(0)

Which of the following controls would an internal auditor consider the most relevant to reduce risks of project cost overruns?

Question 85

(0)

What relationship exists between decentralization and the degree, importance, and range of lowerlevel decision making?

Question 86

(0)

When would a contract be dosed out?

Question 87

(0)

Which of the following inventory costing methods requires the organization to account for the actual cost paid for the unit being sold?

Question 88

(0)

Which of the following attributes of data are cybersecurity controls primarily designed to protect?

Question 89

(0)

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to

Question 90

(0)

Which of the following is true regarding the use of remote wipe for smart devices?

Related questions

When executive compensation is based on the organization's financial results, which of the following situations is most likely to arise?

Which of the following contract concepts is typically given in exchange for the execution of a promise?

An internal auditor is reviewing key phases of a software development project. Which of the following would; the auditor most likely use to measure the project team's performance related to how project tasks are completed?

Which of the following statements is true regarding a project life cycle?

An internal auditor observed that the organization's disaster recovery solution will make use of a cold site in a town several miles away. Which of the following is likely to be a characteristic of this disaster recover/ solution?

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to the organization itself. - Risks specific to the service provider. - Risks shared by both the organization and the service provider Which of the following risks should the auditor classify as specific to the service provider?

A newly appointed board member received an email that appeared to be from the company's CEO. The email stated: "Good morning. As you remember, the closure of projects is our top priority. Kindly organize prompt payment of the attached invoice for our new solar energy partners." The board member quickly replied to the email and asked under which project the expense should be accounted. Only then did he realize that the sender 's mail domain was different from the company's. Which of the following cybersecurity risks nearly occurred in the situation described?

An employee was promoted within the organization and relocated to a new office in a different building. A few months later, security personnel discovered that the employee's smart card was being used to access the building where she previously worked. Which of the following security controls could prevent such an incident from occurring?

Which of the following best describes the use of predictive analytics?

Which of the following characteristics applies to an organization that adopts a flat structure?

Question 81

Which of the following measures would best protect an organization from automated attacks whereby the attacker attempts to identify weak or leaked passwords in order to log into employees' accounts?

Requiring users to change their passwords every two years.

Requiring two-step verification for all users

Requiring the use of a virtual private network (VPN) when employees are out of the office.

Requiring the use of up-to-date antivirus, security, and event management tools.

Show Answer Comment (0)

Question 82

According to 11A guidance on it; which of the following statements is true regarding websites used in e-commerce transactions?

HTTP sites provide sufficient security to protect customers' credit card information.

Web servers store credit cardholders' information submitted for payment.

Database servers send cardholders' information for authorization in clear text.

Payment gatewaysauthorizecredit cardonlinepayments.

Show Answer Comment (0)

Question 83

Which of the following is a benefit from the concept of Internet of Things?

Employees can choose from a variety of devices they want to utilize to privately read work emails without their employer's knowledge.

Physical devices, such as thermostats and heat pumps, can be set to react to electricity market changes and reduce costs.

Information can be extracted more efficiently from databases and transmitted to relevant applications for in-depth analytics.

Data mining and data collection from internet and social networks is easier, and the results are more comprehensive

Show Answer Comment (0)

Question 84

Which of the following controls would an internal auditor consider the most relevant to reduce risks of project cost overruns?

Scope change requests are reviewed and approved by a manager with a proper level of authority.

Cost overruns are reviewed and approved by a control committee led by the project manager.

There is a formal quality assurance process to review scope change requests before they are implemented

There is a formal process to monitor the status of the project and compare it to the cost baseline

Show Answer Comment (0)

Question 85

What relationship exists between decentralization and the degree, importance, and range of lowerlevel decision making?

Mutually exclusive relationship.

Direct relationship.

Intrinsic relationship.

Inverse relationship.

Show Answer Comment (0)

Question 86

When would a contract be dosed out?

When there's a dispute between the contracting parties

When ail contractual obligations have been discharged.

When there is a force majenre.

When the termination clause is enacted.

Show Answer Comment (0)

Question 87

Which of the following inventory costing methods requires the organization to account for the actual cost paid for the unit being sold?

Last-in-first-Out (LIFO}.

Average cost.

First-in-first-out (FIFO).

Specific identification

Show Answer Comment (0)

Question 88

Which of the following attributes of data are cybersecurity controls primarily designed to protect?

Veracity, velocity, and variety.

Integrity, availability, and confidentiality.

Accessibility, accuracy, and effectiveness.

Authorization, logical access, and physical access.

Show Answer Comment (0)

Question 89

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories;

- Risks specific to the organization itself.

- Risks specific to the service provider.

- Risks shared by both the organization and the service provider

Which of the following risks should the auditor classify as specific to the service provider?

Unexpected increases in outsourcing costs.

Loss of data privacy.

Inadequate staffing.

Violation of contractual terms.

Show Answer Comment (0)