IIA IIA-CIA-PART3-3P Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART3-3P Online Questions & Answers

• Question 271:

  Which of the following does not provide operational assurance that a computer system is operating properly?

  A. Performing a system audit.
  B. Making system changes.
  C. Testing policy compliance.
  D. Conducting system monitoring.
  B. Making system changes.

• Question 272:

  Which audit approach should be employed to test the accuracy of information housed in a database on an un-networked computer?

  A. Submit batches of test transactions through the current system and verify with expected results.
  B. Use a test program to simulate the normal data entering process.
  C. Select a sample of records from the database and ensure it matches supporting documentation.
  D. Evaluate compliance with the organization's change management process.
  C. Select a sample of records from the database and ensure it matches supporting documentation.

• Question 273:

  Which of the following conditions could lead an organization to enter into a new business through internal development rather than through acquisition?

  A. It is expected that there will be slow retaliation from incumbents.
  B. The acquiring organization has information that the selling organization is weak.
  C. The number of bidders to acquire the organization for sale is low.
  D. The condition of the economy is poor.
  A. It is expected that there will be slow retaliation from incumbents.

• Question 274:

  Senior management has decided to implement the Three Lines of Defense model for risk management. Which of the following best describes senior management's duties with regard to this model?

  A. Ensure compliance with the model.
  B. Identify management functions.
  C. Identify emerging issues.
  D. Set goals for implementation.
  A. Ensure compliance with the model.

• Question 275:

  Which of the following are appropriate reasons for internal auditors to document processes as part of an audit engagement?

  1) To determine areas of primary concern.

  2) To establish a standard format for process mapping.

  3) To define areas of responsibility within the organization.

  4) To assess the performance of employees.

  A. 1 and 2 only
  B. 1 and 3 only
  C. 2 and 3 only
  D. 2 and 4 only
  B. 1 and 3 only

• Question 276:

  According to the COSO enterprise risk management (ERM) framework, which of the following is not a typical responsibility of the chief risk officer?

  A. Establishing risk category definitions and a common risk language for likelihood and impact measures.
  B. Defining ERM roles and responsibilities.
  C. Providing the board with an independent, objective risk perspective on financial reporting.
  D. Guiding integration of ERM with other management activities.
  C. Providing the board with an independent, objective risk perspective on financial reporting.

• Question 277:

  Which of the following is a strategy that organizations can use to stimulate innovation?

  1) Source from the most advanced suppliers. 2) Establish employee programs that reward initiative. 3) Identify best practice competitors as motivators. 4) Ensure that performance targets are always achieved.

  A. 1 and 3 only
  B. 2 and 4 only
  C. 1, 2, and 3 only
  D. 1, 2, 3, and 4
  C. 1, 2, and 3 only

• Question 278:

  Which of me following statements is most accurate concerning me management and audit of a web server?

  A. The file transfer protocol (FTP) should always be enabled
  B. The simple mail transfer protocol (SMTP) should be operating under me most privileged accounts
  C. The number of ports and protocols allowed to access the web server should be maximized
  D. Secure protocols for confidential pages should be used instead of clear-text protocol such as HTTP or FTP
  D. Secure protocols for confidential pages should be used instead of clear-text protocol such as HTTP or FTP

• Question 279:

  Which of me following storage options would give the organization the best chance of recovering data?

  A. Encrypted physical copies of the data and their encryption keys are stored together at the organization and are readily available upon request
  B. Encrypted physical copies of the data are stored separately from their encryption keys and both are held in secure locations a few hours away from me organization
  C. Encrypted reports on usage and database structure changes are stored on a cloud- based. secured database that is readily accessible
  D. Encrypted copies of the data are stored in a separate secure location a few hours away while the encryption keys are stored at the organization and are readily available
  D. Encrypted copies of the data are stored in a separate secure location a few hours away while the encryption keys are stored at the organization and are readily available

• Question 280:

  An organization uses the management-by-objectives method, whereby employee performance is based on defined goals Which of the following statements is true regarding this approach?

  A. It is particularly helpful to management when the organization is facing rapid change
  B. It is a more successful approach when adopted by mechanistic organizations
  C. It is more successful when goal-setting is performed not only by management, but by an team members, including lower-level staff.
  D. It is particularly successful in environments that are prone to having poor employer- employee relations
  C. It is more successful when goal-setting is performed not only by management, but by an team members, including lower-level staff.