IIA IIA-CIA-PART3-3P Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART3-3P Online Questions & Answers

• Question 151:

  Which of the following stages of contracting focuses on aligning the markets with objectives of the organization?

  A. Initiation stage
  B. Bidding stage
  C. Development stage
  D. Negotiation stage
  D. Negotiation stage

• Question 152:

  According to IIA guidance, which of the following would be the best first step to manage risk when a third party is overseeing the organization's network and data?

  A. Creating a comprehensive reporting system for vendors to demonstrate their ongoing due diligence in network operations
  B. Drafting a strong contract that requires regular vendor control reports and a right-to-audit clause.
  C. Applying administrative privileges to ensure right-to-access controls are appropriate
  D. Creating a standing cybersecurity committee to identify and manage risks related to data security
  B. Drafting a strong contract that requires regular vendor control reports and a right-to-audit clause.

• Question 153:

  An organization with an annual demand of 25.000 units correctly computes its economic order quantity to be 1,000 units Its safety stock is 300 units and the lead time is two days If there are 250 production days in a year what is the reorder point1?

  A. 200 units.
  B. 300 units.
  C. 500 units.
  D. 1,000 units.
  C. 500 units.

• Question 154:

  Which of the following is a product-oriented definition of a business rather than a market- oriented definition of a business?

  A. We are a people-and-goods mover.
  B. We supply energy.
  C. We make movies.
  D. We provide climate control in the home.
  C. We make movies.

• Question 155:

  The activity that involves a trial run of a product in a typical segment of the market before proceeding to a national launch is referred to as:

  A. Test marketing
  B. Experimentation
  C. Segmentation
  D. Positioning
  A. Test marketing

• Question 156:

  An organization has started allowing employees to use their personal smart devices to accept vendor payments. What should the organization's bring-your-own-device (BYOD) policy include to specifically address security and privacy required by the Payment Card Data Security Standard (PCI DSS)?

  A. Approved devices
  B. Mobile applications
  C. Data storage.
  D. Backups and transfers
  C. Data storage.

• Question 157:

  Which of the following statements is correct regarding risk analysis?

  A. The extent to which management judgments are required in an area could serve as a risk factor in assisting the auditor in making a comparative risk analysis.
  B. The highest risk assessment should always be assigned to the area with the largest potential loss.
  C. The highest risk assessment should always be assigned to the area with the highest probability of occurrence.
  D. Risk analysis must be reduced to quantitative terms in order to provide meaningful comparisons across an organization.
  A. The extent to which management judgments are required in an area could serve as a risk factor in assisting the auditor in making a comparative risk analysis.

• Question 158:

  Which of the following is not a potential area of concern when an internal auditor places reliance on spreadsheets developed by users?

  A. Increasing complexity over time.
  B. Interface with corporate systems.
  C. Ability to meet user needs.
  D. Hidden data columns or worksheets.
  C. Ability to meet user needs.

• Question 159:

  According to MA guidance on IT. which of the following controls the routing of data packets to link computers?

  A. Operating system.
  B. Control environment.
  C. Network.
  D. Application program code.
  C. Network.

• Question 160:

  Which of the following IT strategies is most effective for responding to competitive pressures created by the marketplace?

  A. Promote closer linkage between organizational strategy and information.
  B. Provide users with greater online access to information systems.
  C. Enhance the functionality of application systems.
  D. Expand the use of automated controls.
  C. Enhance the functionality of application systems.