IIA IIA Certifications IIA-CIA-PART3-3P Questions & Answers

• Question 61:

  According to IIA guidance, which of the following best describes the activities that occur during the conversion phase of an IT project?

  A. Conversion of user requirements into system specifications

  B. Conversion of user requirements into program codes

  C. Conversion of test data into production data

  D. Conversion of data from the old system into the new system

  Correct Answer: D

• Question 62:

  Which of the following IT operational areas is responsible for the integrity of data flow within an organization?

  A. Network

  B. Database

  C. Operating system

  D. Server

  Correct Answer: A

• Question 63:

  According to MA guidance on IT. which of the following controls the routing of data packets to link computers?

  A. Operating system.

  B. Control environment.

  C. Network.

  D. Application program code.

  Correct Answer: C

• Question 64:

  Which of the following statements is true regarding a bring-your-own-device (BYOD) environment?

  A. There is a greater need Kr organizations to rely on users to comply with policies and procedures.

  B. With fewer devices owned by the organization, there is reduced need to maintain documented policies and procedures.

  C. Incident response times are less critical in the BYOD environment. compared to a traditional environment

  D. There is greater sharing of operational risk in a BYOD environment.

  Correct Answer: A

• Question 65:

  Which of the following is the best example of IT governance controls?

  A. Controls that focus on segregation of duties, financial and change management

  B. Personnel policies that define and enforce conditions for staff in sensitive IT areas

  C. Standards that support IT policies by more specifically defining required actions

  D. Controls that focus on data structures and the minimum level of documentation required

  Correct Answer: A

• Question 66:

  Which of the following is a primary driver behind the creation and prioritization of new strategic initiatives established by an organization?

  A. Risk tolerance

  B. Performance.

  C. Threats and opportunities.

  D. Governance

  Correct Answer: C

• Question 67:

  An internal auditor is evaluating an organization's business continuity management program According to the guidance on IT. which of the following tests would best demonstrate the ability to perform Key processes without significant problems?

  A. End-to-end testing

  B. IT systems and application walkthrough

  C. Tabletop or boardroom-style testing

  D. Desk check testing

  Correct Answer: A

• Question 68:

  An internal audit manager is explaining to a newly hired staff auditor the various analytics techniques frequently used by the internal audit activity Which of the following statements is true regarding these analytics techniques?

  A. Process mining is a type of data analysts where the data subject is a process

  B. Process analysis is a type of data mining where the data subject is a designated area of a process

  C. Data mining is a type of data analysis that focuses on finding statistical relationships in order to create profiles

  D. Data mining involves examining small amounts of structured data in a systematic manner

  Correct Answer: C

• Question 69:

  Much of the following authentication device credentials is the most difficult to revoke when an employee's access rights need to be removed?

  A. A traditional key lock

  B. A biometric device.

  C. A card-key system

  D. A proximity device

  Correct Answer: C

• Question 70:

  Which of the following is an example of a smart device security control intended to prevent unauthorized users from gaining access to a device's data or applications?

  A. Anti-malware software.

  B. Authentication.

  C. Spyware.

  D. Rooting.

  Correct Answer: B