IIA-CIA-PART3-3P Real Exam Questions and Verified Answers

Question 1 Single choice

Which of the following statements regarding database management systems is not correct?

A
Database management systems handle data manipulation inside the tables, rather than it being done by the operating system itself in files.
B
The database management system acts as a layer between the application software and the operating system.
C
Applications pass on the instructions for data manipulation which are then executed by the database management system.
D
The data within the database management system can only be manipulated directly by the database management system administrator.

Show answer and explanation

Correct answer: D

Question 2 Single choice

Which of the following application controls can be defined as controls that monitor data Being processed and in storage to ensure it remains consistent and correct?

A
Input controls
B
Output controls
C
Integrity controls
D
Processing controls

Show answer and explanation

Correct answer: C

Question 3 Single choice

Which of the following factors is most responsible for the increasing risk that unauthorized parties may obtain or tamper with personal data?

A
The lack of legal and industry frameworks on privacy.
B
The absence of generally accepted privacy principles.
C
The rapid growth and evolution of technology.
D
The legislated need to retain sensitive personal information.

Show answer and explanation

Correct answer: C

Question 4 Single choice

Which of me following storage options would give the organization the best chance of recovering data?

A
Encrypted physical copies of the data and their encryption keys are stored together at the organization and are readily available upon request
B
Encrypted physical copies of the data are stored separately from their encryption keys and both are held in secure locations a few hours away from me organization
C
Encrypted reports on usage and database structure changes are stored on a cloud-based. secured database that is readily accessible
D
Encrypted copies of the data are stored in a separate secure location a few hours away while the encryption keys are stored at the organization and are readily available

Show answer and explanation

Correct answer: D

Question 5 Single choice

Which of the following network types should an organization choose if it wants to allow access only to its own personnel?

A
An extranet
B
A local area network.
C
An intranet
D
The internet

Show answer and explanation

Correct answer: B

Question 6 Single choice

In the current year, a merchandising organization had an inventory turnover ratio of 3.0, which was less than the industry average of 6.5.

Which of the following offers the most likely explanation for this difference?

A
The organization has understated the amount of inventory in its financial statements
B
The organization has overstated the cost of purchases in its financial statements.
C
The organization is holding obsolete or damaged items in its inventory
D
The organization experienced an unexpectedly large increase in sales shortly before year end.

Show answer and explanation

Correct answer: C

Question 7 Single choice

An organization's headquarters is centrally located and the organization runs numerous computer applications in multiple sites.

Which of the following would be the most appropriate approach for conducting an audit of the mainframe computer?

A
Conduct an individual audit of the mainframe general controls and separate application control audits of the individual applications in a phased manner
B
Conduct a single consolidated audit of both the mainframe general controls and the application controls for all of the applications that use the mainframe
C
Conduct individual audits of each application and include in each audit the general controls of the mainframe relevant to the individual application
D
Conduct a series of location-based audits that cover both the general and application IT controls an systems across the location

Show answer and explanation

Correct answer: D

Question 8 Single choice

Which of the following is the first step an internal audit activity should undertake when executing a data analytics process?

A
Conduct a risk assessment regarding the effectiveness of the data analytics process.
B
Analyze possible and available sources of raw data
C
Define the purpose and the anticipated value
D
Select data for cleaning and normalization procedures.

Show answer and explanation

Correct answer: B

Question 9 Single choice

Which of the following is a key component of an organization's cybersecurity governance?

A
Administrators monitoring the use, assignment and configuration of privileges on the network.
B
The IT department establishing implementing, and actively managing security configurations.
C
Management identifying and classifying the types of critical data in the organization's system
D
Senior management of the organization setting the cybersecurity policy

Show answer and explanation

Correct answer: D

Question 10 Single choice

Which of the following statements regarding organizational governance is not correct?

A
An effective internal audit function is one of the four cornerstones of good governance.
B
Those performing governance activities are accountable to the customer.
C
Accountability is one of the key elements of organizational governance.
D
Governance principles and the need for an internal audit function are applicable to governmental and not-for-profit activities.

Show answer and explanation

Correct answer: B