IIA IIA-CIA-PART3 Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART3 Online Questions & Answers

• Question 151:

  Which of the following is a benefit from the concept of Internet of Things?

  A. Employees can choose from a variety of devices they want to utilize to privately read work emails without their employer's knowledge.
  B. Physical devices, such as thermostats and heat pumps, can be set to react to electricity market changes and reduce costs.
  C. Information can be extracted more efficiently from databases and transmitted to relevant applications for in-depth analytics.
  D. Data mining and data collection from internet and social networks is easier, and the results are more comprehensive
  B. Physical devices, such as thermostats and heat pumps, can be set to react to electricity market changes and reduce costs.

  ---

  Explanation

  The Internet of Things (IoT) refers to a network of interconnected physical devices that collect and exchange data through the internet. The key benefits of IoT include automation, improved decision-making, cost savings, and efficiency gains.

  (A)

  Employees can choose from a variety of devices they want to utilize to privately read work emails without their employer's knowledge. This is incorrect because it focuses on unauthorized access rather than a benefit of IoT. Security and monitoring are major concerns in IoT environments.

  IIA Standard 2110 - Governance requires organizations to ensure adequate governance structures for IT and data security.

  (B)

  Physical devices, such as thermostats and heat pumps, can be set to react to electricity market changes and reduce costs.

  This is correct because IoT enables smart devices to automatically adjust based on real-time data.

  Example: Smart thermostats (e.g., Nest, Honeywell) use IoT to track energy prices and consumption, adjusting temperatures to optimize efficiency.

  IIA Practice Guide "Assessing the Governance of Risks in IT Projects" highlights IoT as a tool for operational efficiency and cost savings .

  (C)

  Information can be extracted more efficiently from databases and transmitted to relevant applications for in-depth analytics.

  This relates more to big data and data analytics , not necessarily IoT.

  IIA GTAG "Auditing IT Governance" discusses IoT in operational efficiency but distinguishes it from data extraction.

  (D)

  Data mining and data collection from the internet and social networks is easier, and the results are more comprehensive.

  This describes AI and machine learning rather than IoT, which primarily connects physical devices.

  IIA GTAG "Auditing Cybersecurity Risk" highlights IoT risks but does not emphasize social media data mining.

  IIA GTAG (Global Technology Audit Guide) - "Auditing IT Governanc";

  IIA GTAG - "Assessing the Governance of Risks in IT Project";

  IIA Standard 2110 ?Governance

  IIA GTAG - "Auditing Cybersecurity Ris";

  Analysis of Answer Choices:IIA References:Thus, the most appropriate answer is B because IoT improves efficiency by automating energy consumption based on market conditions.

• Question 152:

  Which of the following is considered a physical security control?

  A. Transaction logs are maintained to capture a history of system processing.
  B. System security settings require the use of strong passwords and access controls.
  C. Failed system login attempts are recorded and analyzed to identify potential security incidents.
  D. System servers are secured by locking mechanisms with access granted to specific individuals.
  D. System servers are secured by locking mechanisms with access granted to specific individuals.

  ---

  Explanation

  Comprehensive and Detailed Step-by-Step

  Explanation with all IIA References:

  Understanding Physical Security Controls:

  Physical security controls are measures that protect physical assets from unauthorized access, theft, or damage.

  These include locks, security cameras, guards, and restricted access areas .

  Why Secured Servers with Locks is Correct:

  Locking system servers ensures that only authorized personnel can physically access them, protecting data from theft or tampering.

  This aligns with best practices in IT security by safeguarding critical infrastructure.

  Why Other Options Are Incorrect:

  Option A: Transaction logs # This is a logical security control , not a physical one.

  Option B: Strong passwords and access controls # These are technical security controls , not physical.

  Option C: Failed login attempt analysis # This is an audit/logging control , which helps detect incidents but does not physically protect assets.

  IIA Standards and References:

  IIA GTAG on Information Security (2016): Recommends physical access controls for IT assets.

  IIA Standard 2110 - Governance: Ensures IT security includes physical protections.

  NIST Cybersecurity Framework: Identifies physical access control as a key protection measure.

  Thus, the correct answer is D: System servers are secured by locking mechanisms with access granted to specific individuals.

• Question 153:

  Which of the following is an established systems development methodology?

  A. Waterfall
  B. Projects in Controlled Environments (PRINCE2)
  C. Information Technology Infrastructure Library (ITIL)
  D. COBIT
  A. Waterfall

  ---

  Explanation

• Question 154:

  Which of the following budgets serves as a basis for the budgeted income statement?

  A. All financial budgets
  B. All operating budgets
  C. Only the cash budget and budgeted balance sheet
  D. Only the sales and production budgets
  B. All operating budgets

  ---

  Explanation

• Question 155:

  Which of the following best describes the concept of relevant cost?

  A. A future cost that is the same among alternatives.
  B. A future cost that differs among alternatives.
  C. A past cost that is the same among alternatives.
  D. A past cost that differs among alternatives.
  B. A future cost that differs among alternatives.

  ---

  Explanation

• Question 156:

  A strategic business unit (SBU) has a relative market share (RMS) of 2. 0 and a market growth rate (MGR) of 9.5%. According to the portfolio model for competitive analysis created by the Boston Consulting Group, such an SBU is considered a

  A. Star.
  B. Question mark.
  C. Cash cow.
  D. Dog.
  C. Cash cow.

  ---

  Explanation

  The annual MGR reflects the maturity and attractiveness of the market and the relative need for cash to finance expansion. An MGR of 10% or more is generally regarded as high. The RMS reflects an SBU's competitive position in the marketsegment. An RMS of 1.0 or moresignifies that the SBU has a strong competitive position. Cash cows have high RMS and low MGR. They are strong competitors and cash generators in low-growth markets.

• Question 157:

  What is a primary reason for planning?

  A. Reacting to employee needs.
  B. Environmental uncertainty.
  C. Reacting to competition.
  D. Organizational policy.
  B. Environmental uncertainty.

  ---

  Explanation

  Planning is influenced and limited constrained) by external environmental) factors, the effects of which cannot be determined with certainty. Market trends, social change, competitors' actions, and governmental regulation are among these environmental factors.

• Question 158:

  Which of the following physical access controls often functions as both a preventive and detective control?

  A. Locked doors.
  B. Firewalls.
  C. Surveillance cameras.
  D. Login IDs and passwords.
  C. Surveillance cameras.

  ---

  Explanation

• Question 159:

  According to internal organizational rules, procurement specialists are responsible for carrying out procurement procedures in accordance with legal acts, but have little knowledge of the equipment and services being procured. Business unit engineers are responsible for preparing the technical descriptions of the desired equipment. Which of the following controls should be implemented to mitigate potential fraud risks that may occur in the described arrangement?

  A. Require technical descriptions to be reviewed by a group of internal experts.
  B. Require procurement specialists to obtain higher education in a technical field.
  C. Assign the task of writing technical descriptions to procurement specialists.
  D. Assign the task of writing technical descriptions to potential bidders.
  A. Require technical descriptions to be reviewed by a group of internal experts.

  ---

  Explanation

• Question 160:

  Identify the management technique in which employees assist in setting goals, making decisions, solving problems, and designing and implementing organizational changes.

  A. Total quality control.
  B. Job enlargement.
  C. Kanban.
  D. Participative management.
  D. Participative management.

  ---

  Explanation

  According to Marshall Soshkin [Participative Management is an Ethical Imperative," Organizational Dynamics 12 (Spring 1984):4-22] employees may participate in goal setting, decision making, problem solving, and designing and implementing change. Subject to various individual (values and attitudes), organizational (e.g. job design and company culture), and environmental (such as technological change and competition) contingencies, workers who participate in the aforementioned ways should experience greater autonomy and find their tasks more meaningful. In turn, this experience should lead to satisfaction, challenge, security, andacceptance and commitment. Ultimate results are innovation and improved performance and productivity.