IIA IIA-CIA-PART3-3P Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART3-3P Online Questions & Answers

• Question 221:

  Which of the following is an example of a risk avoidance response?

  A. Buying an insurance policy to protect against loss events.
  B. Hedging against natural gas price fluctuations.
  C. Selling a non-strategic business unit.
  D. Outsourcing a high risk process to a third party.
  C. Selling a non-strategic business unit.

• Question 222:

  When attempting to devise creative solutions to problems, team members initially should do which of the following?

  A. Suspend assumptions and negative feedback
  B. Weight suggestions based on the speaker's level of authority.
  C. Discuss the details of all options presented
  D. Provide documentation to support their positions
  C. Discuss the details of all options presented

• Question 223:

  Which of the following budgets must be prepared first?

  A. Cash budget.
  B. Production budget.
  C. Sales budget.
  D. Selling and administrative expenses budget.
  C. Sales budget.

• Question 224:

  Which of the following professional organizations sets standards for quality and environmental audits?

  A. The Committee of Sponsoring Organizations of the Treadway Commission.
  B. The Board of Environmental, Health, and Safety Auditor Certifications.
  C. The International Organization of Supreme Audit Institutions.
  D. The International Standards Organization.
  D. The International Standards Organization.

• Question 225:

  Which of the following local area network physical layouts is subject to the greatest risk of failure if one device fails?

  A. Star network.
  B. Bus network.
  C. Token ring network.
  D. Mesh network.
  C. Token ring network.

• Question 226:

  According to IIA guidance on IT. which of the following would be considered a primary control for a spreadsheet to help ensure accurate financial reporting?

  A. Formulas and static data are locked or protected.
  B. The spreadsheet is stored on a network server that is backed up daily.
  C. The purpose and use of the spreadsheet are documented.
  D. Check-in and check-out software is used to control versions.
  A. Formulas and static data are locked or protected.

• Question 227:

  Which type of bond sells at a discount from face value, then increases in value annually until it reaches maturity and provides the owner with the total payoff?

  A. High-yield bonds.
  B. Commodity-backed bonds.
  C. Zero coupon bonds.
  D. Junk bonds.
  C. Zero coupon bonds.

• Question 228:

  Based on lest results an IT auditor concluded that the organization would suffer unacceptable toss of data if there was a disaster at its data center. Which of the following test results would likely lead the auditor to this conclusion?

  A. Requested backup tapes were not returned from the offsite vendor in a timely manner
  B. Returned backup tapes from the offsite vendor contained empty spaces
  C. Critical systems have been Backed up more frequently than required.
  D. Critical system backup tapes are taken off site less frequently than required.
  D. Critical system backup tapes are taken off site less frequently than required.

• Question 229:

  The critical path for any project is the path that exhibits which of the following characteristics?

  A. Has the longest duration in time.
  B. Costs the most money.
  C. Requires the largest amount of labor
  D. Is deemed most important to the project.
  A. Has the longest duration in time.

• Question 230:

  Which of the following statements is true with regard to information protection?

  A. All personal information, by definition is considered to be sensitive, requiring specialized controls.
  B. Information is not considered personal if it can only be linked to or used to identify an individual indirectly.
  C. Individuals who provide personal information to organizations share in the risk of inappropriate disclosure.
  D. Good protection controls remove any restrictions on the quantity of personal information that can be collected
  A. All personal information, by definition is considered to be sensitive, requiring specialized controls.