IIA IIA Certifications IIA-CIA-PART3-3P Questions & Answers

• Question 141:

  What would be the effect if an organization paid one of its liabilities twice during the year in error?

  A. Assets liabilities and owners' equity would be understated

  B. Assets net income and owners' equity would be unaffected

  C. Assets and liabilities would be understated

  D. Assets net income and owners' equity would be understated, but liabilities would be overstated

  Correct Answer: C

• Question 142:

  Which of the following is a disadvantage in a centralized organizational structure?

  A. Communication conflicts.

  B. Slower decision making

  C. Loss of economies of scale

  D. Vulnerabilities in sharing knowledge

  Correct Answer: B

• Question 143:

  The balanced scorecard approach differs from traditional performance measurement approaches because it adds which of the following measures?

  1) Financial measures 2) Internal business process measures. 3) Client satisfaction measures 4) Innovation and learning measures

  A. 1 only.

  B. 2 and 4 only.

  C. 3 and 4 only.

  D. 2, 3, and 4 only

  Correct Answer: D

• Question 144:

  Which of the following statements is true regarding an organization's inventory valuation1?

  A. The valuation will be incorrect it the inventory includes goods m transit shipped free on board (FOB) destination to another organization

  B. The valuation will be correct if the inventory includes goods received on consignment from another organization

  C. The valuation will be incorrect it the inventory includes goods in transit shipped FOB shipping point from another organization

  D. The valuation will be correct it the inventory includes goods sent on consignment to another organization

  Correct Answer: B

• Question 145:

  An internal auditor has been approved lo gather data directly horn the organization's relational database management system tor data analyses To collect the data which of the Wowing is most important for the auditor to know?

  A. Structured query language

  B. Spreadsheet software such as Excel

  C. Data management system such as Oracle

  D. Basic web development

  Correct Answer: A

• Question 146:

  An organization has started allowing employees to use their personal smart devices to accept vendor payments. What should the organization's bring-your-own-device (BYOD) policy include to specifically address security and privacy required by the Payment Card Data Security Standard (PCI DSS)?

  A. Approved devices

  B. Mobile applications

  C. Data storage.

  D. Backups and transfers

  Correct Answer: C

• Question 147:

  Which of the following is a cybersecurity monitoring activity that involves assessing the strength of an organization's IT protection?

  A. Boundary defense

  B. Malware defense

  C. Penetration tests

  D. Wireless access controls

  Correct Answer: A

• Question 148:

  Which of the following is an example of an application system control?

  A. Data values fall within a prescribed range.

  B. Error listings are generated and promptly remediated.

  C. Report distribution is restricted to authorized personnel.

  D. Field amounts contain an upper or lower limit.

  Correct Answer: A

• Question 149:

  Which of the following IT-related activities is most commonly performed by the second line of defense?

  A. Block unauthorized traffic.

  B. Encrypt data.

  C. Review disaster recovery test results.

  D. Provide independent assessment of IT security.

  Correct Answer: C

• Question 150:

  Which of the following types of analytics focuses less on analysis and more on condensing data into mote meaningful pieces of information?

  A. Diagnostic analytics

  B. Descriptive analytics

  C. Prescriptive analytics

  D. Predictive analytics

  Correct Answer: C