최신 IIA-CIA-Part3 무료덤프 - IIA Business Knowledge for Internal Auditing

문제1

Which of the following practices circumvents administrative restrictions on smart devices, thereby increasing data security risks?

A. Eavesdropping.

B. Rooting.

C. Session hijacking.

D. Man in the middle.

정답: B

문제2

Which of the following is a disadvantage in a centralized organizational structure?

A. Vulnerabilities in sharing knowledge

B. Communication conflicts

C. Slower decision making.

D. Loss of economies of scale

정답: D

문제3

Which of the following items represents the first thing that should be done with obtained dote in the data analytics process?

A. Verify completeness and accuracy.

B. Verify completeness and integrity.

C. Verify existence and accuracy.

D. Verify existence and completeness.

정답: C

문제4

Which of the following security controls would be me most effective in preventing security breaches?

A. Approval of identity request

B. Audit of access rights

C. Monitoring privileged accounts

D. Access logging.

정답: B

문제5

An Internal auditor is using data analytics to focus on high-risk areas during an engagement. The auditor has obtained data and is working to eliminate redundancies in the dat a. Which of the following statements is true regarding this scenario?

A. The auditor is normalizing data in preparation for analyzing it.

B. The auditor is reviewing trio data prior to defining the question

C. The auditor is cleaning the data in preparation for determining which processes may be involves .

D. The auditor is analyzing the data in preparation for communicating the results,

정답: A

문제6

Which type of bond sells at & discount from face value, then increases in value annually until it reaches maturity and provides the owner with the total payoff?

A. Zero coupon bonds

B. High-yield bonds

C. Commodity-backed bonds

D. Junk bonds

정답: A

문제7

A financial institution receives frequent and varied email requests from customers for funds to be wired out of their accounts. Which verification activity would best help the institution avoid falling victim to phishing?

A. Calling the customer at the phone number on record to validate the request.

B. Reviewing the customer record to verify whether the customer has authorized wire requests from that email address.

C. Reviewing the customer's wire activity to determine whether the request is typical.

D. Replying to the customer via email to validate the sender and request.

정답: A

문제8

What is the primary risk associated with an organization adopting a decentralized structure?

A. Inconsistency in decision making.

B. Lack of resilience.

C. Greater costs of control function.

D. Inability to adapt.

정답: A

문제9

Which of the following is a systems software control?

A. Housing servers with sensitive software away from environmental hazards

B. Restricting server room access to specific individuals

C. Performing of intrusion testing on a regular basis

D. Ensuring that all user requirements are documented

정답: C

문제10

Which component of an organization's cybersecurity risk assessment framework would allow management to implement user controls based on a user's role?

A. Prompt response and remediation policy

B. Inventory of information assets

C. Information access management

D. Standard security configurations

정답: C

문제11

According to IIA guidance, which of the following best describes an adequate management (audit.) trail application control for the general ledger?

A. Report identifying general ledger transactions by time and individual.

B. Report comparing processing results with original Input

C. Report confirming that the general ledger data was processed without error

D. Report identifying data that is outside of system parameters

정답: A

문제12

An organization's board of directors is particularly focused on positioning, the organization as a leader in the industry and beating the competition. Which of the following strategies offers the greatest alignment with the board's focus?

A. Increasing the diversity of strategic business units.

B. Increasing investment in research and development for a new product.

C. Divesting product lines expected to have negative profitability.

D. Relocating the organization's manufacturing to another country.

정답: B

문제13

Which of the following is a cybersecurity monitoring activity intended to deter disruptive codes from being installed on an organizations systems?

A. Wireless access controls

B. Penetration tests

C. Boundary defense

D. Malware defense.

정답: B

문제14

Which of the following is true regarding the use of remote wipe for smart devices?

A. It can delete data backed up to a desktop for complete protection if required.

B. It enables the erasure and reformatting of secure digital (SD) cards.

C. It can restore default settings and lock encrypted data when necessary.

D. It can wipe data that is backed up via cloud computing

정답: B

문제15

An organization prepares a statement of privacy to protect customers' personal information. Which of the following might violate the privacy principles?

A. The organization retains customers' personal information indefinitely.

B. Customers can access and update personal information when needed.

C. The organization performs regular maintenance on customers' personal information.

D. Customers reserve the right to reject sharing personal information with third parties.

정답: A

문제16

An organization selected a differentiation strategy to compete at the business level. Which of the following structures best fits this strategic choice?

A. Functional structure.

B. Mechanistic structure.

C. Functional structure with cross-functional teams.

D. Divisional structure.

정답: D

최신 IIA-CIA-Part3 무료덤프 - IIA Business Knowledge for Internal Auditing

우리와 연락하기

유용한 링크

최신 업데이트