IIA IIA-CIA-PART3-3P Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART3-3P Online Questions & Answers

• Question 351:

  Which of the following situations best applies to an organization that uses a project rather man a process to accomplish its business activities?

  A. A clothing company designs makes and sells a new item.
  B. A commercial constructor company is hired to build a warehouse.
  C. A city department sets up a new firefighter training program.
  D. A manufacturing organization acquires component parts from a contracted vendor
  B. A commercial constructor company is hired to build a warehouse.

• Question 352:

  Which mindset promotes the most comprehensive risk management strategy?

  A. Increase shareholder value.
  B. Maximize market share.
  C. Improve operational efficiency.
  D. Mitigate losses.
  A. Increase shareholder value.

• Question 353:

  Which of the following statements is true regarding the resolution of interpersonal conflict?

  A. Unrealized expectations can be avoided with open and honest discussion.
  B. Reorganization would probably not help ambiguous or overlapping jurisdictions.
  C. Deferring action should be used until there is sufficient time to fully deal with the issue.
  D. Timely and unambiguous clarification of roles and responsibilities will eliminate most interpersonal conflict.
  A. Unrealized expectations can be avoided with open and honest discussion.

• Question 354:

  As it relates to the data analytics process, which of the following best describes the purpose of an internal auditor who cleaned and normalized data?

  A. The auditor eliminated duplicate information.
  B. The auditor organized data to minimize useless information.
  C. The auditor made data usable for a specific purpose by ensuring that anomalies were identified and corrected.
  D. The auditor ensured data fields were consistent and that data could be used for a specific purpose.
  C. The auditor made data usable for a specific purpose by ensuring that anomalies were identified and corrected.

• Question 355:

  Which of the following re a result of implementing an e-commerce system, which relies heavily on electronic data interchange and electronic funds transfer, for purchasing and billing?

  A. Higher cash flow and treasury balances
  B. Higher inventory balances
  C. Higher accounts receivable
  D. Higher accounts payable
  C. Higher accounts receivable

• Question 356:

  Which of me Wowing summarizes information about the cash receipts and cash payments for a specific time period?

  A. Income statement
  B. Statement of cash flows.
  C. Balance sheet
  D. Owner's equity statement
  B. Statement of cash flows.

• Question 357:

  New data privacy laws require an organization to use collected customer information for me sole purpose of meeting the organization's business requirements. Which of the following best addresses the risk of the organization not complying with this objective?

  A. Provide training on social engineering attacks
  B. Encrypt the customer information retained by the organization
  C. Establish policies that discipline those who misuse customer information
  D. Allocate access profiles for each end user of the information
  B. Encrypt the customer information retained by the organization

• Question 358:

  An internal auditor is assessing the risks related to an organization's mobile device pokey She notes that the organization allows third parties (vendors and visitors) to use outside smart devices to access its proprietary networks and systems Which of the following types of smart device risks should the internal auditor be most concerned about?

  A. Compliance
  B. Privacy
  C. Strategic
  D. Physical security.
  A. Compliance

• Question 359:

  An internal audit activity is piloting a data analytics model, which aims to identify anomalies in payments to vendors and potential fraud indicators Which of the following would be the most appropriate criteria for assessing the success of the piloted model?

  A. The percentage of cases flagged by the model and confirmed as positives.
  B. The development and maintenance costs associated with the model
  C. The feedback of auditors involved with developing the model
  D. The number of criminal investigations initiated based on the outcomes of the model
  B. The development and maintenance costs associated with the model

• Question 360:

  With regard to disaster recovery planning, which of the following would most likely involve stakeholders from several departments?

  A. Determining the frequency with which backups will be performed.
  B. Prioritizing the order in which business systems would be restored.
  C. Assigning who in the IT department would be involved in the recovery procedures.
  D. Assessing the resources needed to meet the data recovery objectives
  B. Prioritizing the order in which business systems would be restored.