IIA IIA-CIA-PART3 Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART3 Online Questions & Answers

• Question 361:

  Which of the following is the best example of a compliance risk that is likely to arise when adopting a bring-your-own-device (BYOD) policy?

  A. The risk that users try to bypass controls and do not install required software updates.
  B. The risk that smart devices can be lost or stolen due to their mobile nature.
  C. The risk that an organization intrusively monitors personal information stored on smart devices.
  D. The risk that proprietary information is not deleted from the device when an employee leaves.
  C. The risk that an organization intrusively monitors personal information stored on smart devices.

  ---

  Explanation

• Question 362:

  The most likely span of control to apply over 14 data-entry clerks who do essentially the same job and work in the same office would be:

  A. Close.
  B. Narrow.
  C. Moderate.
  D. Wide.
  D. Wide.

  ---

  Explanation

  In any situation, there are underlying variables that influence the number of subordinates a manager can supervise. In general, if jobs are similar, procedures are standardized, and physical dispersion is minimized, a wide span of control is most effective.

• Question 363:

  Which of the following statements is true regarding change management?

  A. The degree of risk associated with a proposed change determines whether the change request requires authorization.
  B. Program changes generally are developed and tested in the production environment.
  C. Changes are only required by software programs.
  D. To protect the production environment, changes must be managed in a repeatable, defined, and predictable manner.
  D. To protect the production environment, changes must be managed in a repeatable, defined, and predictable manner.

  ---

  Explanation

• Question 364:

  Which of the following is true regarding Fiedler's studies of contingency theory?

  A. The three dimensions to contingency theory are position power, task structure, and relationship structure.
  B. The two types of leaders that emerged from Fiedler's studies include task-oriented style and leader-member style.
  C. Placement of leaders in the organization is not as important as the leaders' leadership skills.
  D. People become leaders not only because of personality attributes, but also because of various situational factors and the interaction between the leaders and the situation.
  D. People become leaders not only because of personality attributes, but also because of various situational factors and the interaction between the leaders and the situation.

  ---

  Explanation

  According to Fred E. Fiedler's contingency theory, people become leaders not only because of personality attributes, but also because of various situational factors and the interaction between the leaders and the situation. Thus, the right person at the right time may rise to a position of leadership if his or her personality and the needs of the situation complement each other.

• Question 365:

  Conflict maybe:

  A. Cooperative II. Competitive
  B. I only.
  C. II only.
  D. Both l and ll.
  E. Neither I nor II
  C. II only.

  ---

  Explanation

  Conflict may be either cooperative or competitive. Cooperative conflict is constructive and competitive conflict is destructive.

• Question 366:

  Which of the following activities most significantly increases the risk that a bank will make poor-quality loans to its customers?

  A. Borrowers may not sign all required mortgage loan documentation.
  B. Fees paid by the borrower at the time of the loan may not be deposited in a timely manner.
  C. The bank's loan documentation may not meet the government's disclosure requirements.
  D. Loan officers may override the lending criteria established by senior management.
  D. Loan officers may override the lending criteria established by senior management.

  ---

  Explanation

• Question 367:

  The difference between a tall organization structure and a flat organization structure is that, in the former.

  A. The communication process takes longer and is of poorer quality.
  B. Maintenance of the organization is less costly.
  C. The morale of lower-level employees is generally higher.
  D. A higher degree of coordination and cooperation is created.
  A. The communication process takes longer and is of poorer quality.

  ---

  Explanation

  "Flat" organizational structures have relatively few levels from top to bottom. "Tall" organizational structures have many levels between top and bottom. Flat structures have the advantages of fast information flow from top to bottom of the organization and increased employee satisfaction. Tall structures are faster and more effective at problem resolution because of the increased frequency of interaction between superior and subordinate and the greater order imposed by the hierarchy. Studies do not indicate great advantages for either flat or tall structures.

• Question 368:

  According to IIA guidance, which of the following would be a primary reason for an internal auditor to test the organization's IT contingency plan?

  A. To ensure that adequate controls exist to prevent any significant business interruptions.
  B. To identify and address potential security weaknesses within the system.
  C. To ensure that tests contribute to improvement of the program.
  D. To ensure that deficiencies identified by the audit are promptly addressed.
  C. To ensure that tests contribute to improvement of the program.

  ---

  Explanation

• Question 369:

  Which of the following recognized competitive strategies focuses on gaining efficiencies?

  A. Focus
  B. Cost leadership
  C. Innovation
  D. Differentiation
  B. Cost leadership

  ---

  Explanation

• Question 370:

  A newly appointed board member received an email that appeared to be from the company's CEO. The email stated:

  "Good morning. As you remember, the closure of projects is our top priority. Kindly organize prompt payment of the attached invoice for our new solar energy partners."

  The board member quickly replied to the email and asked under which project the expense should be accounted. Only then did he realize that the sender's mail domain was different from the company's. Which of the following cybersecurity risks nearly occurred in the situation described?

  A. A risk of spyware and malware
  B. A risk of corporate espionage
  C. A ransomware attack risk
  D. A social engineering risk
  D. A social engineering risk

  ---

  Explanation