IIA IIA-CIA-PART3 Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART3 Online Questions & Answers

• Question 611:

  An organization's network administrator received an email that appeared to come from the organization's external IT service provider requesting his credentials to perform an update of a server operating system If the IT service provider did not send the email, which of the following best describes the likely purpose of the email?

  A. An attempt at phishing.
  B. An attempt at penetration testing
  C. An attempt to patch the server
  D. An attempt to launch malware
  A. An attempt at phishing.

  ---

  Explanation

• Question 612:

  Which of the following is the best approach to overcome entry barriers into a new business?

  A. Offer a standard product that is targeted in the recognized market.
  B. Invest in commodity or commodity-like product businesses.
  C. Enter into a slow-growing market.
  D. Use an established distribution relationship.
  D. Use an established distribution relationship.

  ---

  Explanation

• Question 613:

  Listening effectiveness is best increased by:

  A. Resisting both internal and external distractions.
  B. Waiting to review key concepts until the speaker has finished talking.
  C. Tuning out messages that do not seem to fit the meeting purpose.
  D. Factoring in biases in order to evaluate the information being given.
  A. Resisting both internal and external distractions.

  ---

  Explanation

• Question 614:

  After significant budget cuts, a small government agency has decided to allow managers to use their own smart phones for work. Which of the following is a best practice for smart phone data backup?

  A. Native storage
  B. Employee's desktop
  C. Data center
  D. Remote wipe
  C. Data center

  ---

  Explanation

• Question 615:

  An internal audit team performed an assurance engagement of the organization's IT security. The audit team found significant flaws in the design and implementation of the internal control framework. IT department managers often disagreed with the audit team on the significance of the findings, claiming that the controls in place partly mitigated the risks.

  Which of the following should be included when communicating the engagement results to senior management?

  A. All the correspondence exchanged between the audit team and IT department demonstrating the disagreement
  B. The audit team's findings and the IT department's opinion
  C. Only the audit team's findings and the reasons they require immediate action from senior management
  D. Only the findings that were agreed upon between the audit team and the IT department
  B. The audit team's findings and the IT department's opinion

  ---

  Explanation

  According to IIA Standards, engagement communications must be complete, objective, and balanced. When disagreements arise, the auditor should present both the audit team's findings and management's perspective so senior

  management and the board can make informed decisions.

  Option A is excessive; raw correspondence is not necessary. Option C omits management's opinion, reducing objectivity. Option D limits reporting to agreed items only, which would conceal significant unresolved issues.

  IIA Standards - Standard 2410: Criteria for Communicating.

• Question 616:

  Which of the following statements is true regarding cost-volume-profit analysis?

  A. Contribution margin is the amount remaining from sales revenue after fixed expenses have been deducted.
  B. Breakeven point is the amount of units sold to cover variable costs.
  C. Breakeven occurs when the contribution margin covers fixed costs.
  D. Following breakeven, net operating income will increase by the excess of fixed costs less the variable costs per units sold.
  C. Breakeven occurs when the contribution margin covers fixed costs.

  ---

  Explanation

• Question 617:

  An internal auditor is reviewing the organization's performance appraisal process. Which of the following methods would be most effective to identify stereotyping?

  A. Use a behaviorally anchored rating scale to Break down jobs into their components.
  B. Analyze and compare the ratings for different classes or groupings of employees.
  C. Compare the ratings of selective employees with their previous appraisals.
  D. Analyze the number and percentages of employee appraisals that fall into each rating category
  C. Compare the ratings of selective employees with their previous appraisals.

  ---

  Explanation

• Question 618:

  Which of the following statements describes the typical benefit of using a flat organizational structure for the internal audit activity, compared to a hierarchical structure?

  A. A flat structure results in lower operating and support costs than a hierarchical structure
  B. A flat structure results in a stable and very collaborative environment
  C. A flat structure enables field auditors to report to and learn from senior auditors
  D. A flat structure is more dynamic and offers more opportunities for advancement than a hierarchical structure
  C. A flat structure enables field auditors to report to and learn from senior auditors

  ---

  Explanation

• Question 619:

  An organization sells 1,000 shares of its treasury stock at $15 per share previously acquired at $10 per share. Which of the following statements is true?

  A. The organization should record a $5,000 gain on sale of treasury stock
  B. The organization should record $15,000 as a debit to treasury stock
  C. The organization should record $5,000 as a credit to paid-in capital
  D. The organization should record a $10,000 debit to paid-capital account
  B. The organization should record $15,000 as a debit to treasury stock

  ---

  Explanation

• Question 620:

  Which of the following controls is the most effective in mitigating activities of bots that continuously attempt to access a user's account?

  A. Password length
  B. User session timeout
  C. User account lockout
  D. Password aging
  C. User account lockout

  ---

  Explanation