Add IIA Certified Internal Auditor (CIA) IIA-CIA-Part3 Exam Dumps In Preparation: Pass IIA-CIA-Part3 Exam With Full Confidence

Eleanor2024-10-14T15:13:06+00:00

By Eleanor Certified Internal Auditor (CIA), IIA

IIA CIA Exam Part Three: Business Knowledge for Internal Auditing (IIA-CIA-Part3) exam is valuable. It validates IT professional skills and knowledge level. For quick IIA-CIA-Part3 exam preparation, you can get help from ITPrepare’s updated IIA-CIA-Part3 exam dumps. IIA certification IIA-CIA-Part3 exam dumps V14.02 come with 266 practice exam questions and answers. Those Q&As are valid, updated, and real, and prepare you for the final CIA Exam Part Three: Business Knowledge for Internal Auditing IIA-CIA-Part3 exam. You should not ignore it and must add the IIA Certified Internal Auditor (CIA) IIA-CIA-Part3 exam dumps in preparation.

Check IIA Certified Internal Auditor (CIA) IIA-CIA-Part3 Free Demo Questions

Page 1 of 10

1. When reviewing application controls using the four-level model, which of the following processes are associated with level 4 of the business process method?

Activity

Subprocess

Major process

Mega process

2. An internal auditor was assigned to test for ghost employees using data analytics. The auditor extracted employee data from human resources and payroll. Using spreadsheet functions, the auditor matched data sets by name and assumed that employees who were not present in each data set should be investigated further. However, the results seemed erroneous, as very few employees matched across all data sets.

Which of the following data analytics steps has the auditor most likely omitted?

Data analysis.

Data diagnostics.

Data velocity.

Data normalization.

3. Which of the following is the best example of a compliance risk that Is likely to arise when adopting a bring-your-own-device (BYOD) policy?

The risk that users try to bypass controls and do not install required software updates.

The risk that smart devices can be lost or stolen due to their mobile nature..

The risk that an organization intrusively monitors personal Information stored on smart devices.

The risk that proprietary information is not deleted from the device when an employee leaves.

4. Which of the following would be a concern related to the authorization controls utilized for a system?

Users can only see certain screens in the system.

Users are making frequent password change requests.

Users Input Incorrect passwords and get denied system access

Users are all permitted uniform access to the system.

5. Which of following best demonstrates the application of the cost principle?

A company reports trading and investment securities at their market cost

A building purchased last year for $1 million is currently worth ©1.2 million, but the company still reports the building at $1 million.

A building purchased last year for ©1 million is currently worth £1,2 million, and the company adjusts the records to reflect the current value

A company reports assets at either historical or fair value, depending which is closer to market value.

6. Which component of an organization's cybersecurity risk assessment framework would allow management to implement user controls based on a user's role?

Prompt response and remediation policy

Inventory of information assets

Information access management

Standard security configurations

7. CORRECT TEXT

Which of the following is a project planning methodology that involves a complex series of required simulations to provide information about schedule risk?

Monte Carlo Analysis.

Project Management Information System (PMIS).

Earned Value Management (EVM).

Integrated Project Plan

8. Which of the following controls would be most efficient to protect business data from corruption and errors?

Controls to ensure data is unable to be accessed without authorization.

Controls to calculate batch totals to identify an error before approval.

Controls to encrypt the data so that corruption is likely ineffective.

Controls to quickly identify malicious intrusion attempts.

9. Which of the following is a primary driver behind the creation and prloritteation of new strategic Initiatives established by an organization?

Risk tolerance

Performance

Threats and opportunities

Governance

10. Which of the following attributes of data are cybersecurity controls primarily designed to protect?

Veracity, velocity, and variety.

Integrity, availability, and confidentiality.

Accessibility, accuracy, and effectiveness.

Authorization, logical access, and physical access.

Page 2 of 10

11. Which of the following represents a basis for consolidation under the International Financial Reporting Standards?

Variable entity approach.

Control ownership.

Risk and reward.

Voting interest.

12. Which of the following situations best illustrates a "false positive" in the performance of a spam filter?

The spam filter removed Incoming communication that included certain keywords and domains.

The spam filter deleted commercial ads automatically, as they were recognized as unwanted.

The spam filter routed to the "junk|r folder a newsletter that appeared to include links to fake websites.

The spam filter blocked a fitness club gift card that coworkers sent to an employee for her birthday.

13. Which of the following should be established by management during implementation of big data systems to enable ongoing production monitoring?

Key performance indicators.

Reports of software customization.

Change and patch management.

Master data management

14. Which of the following data security policies is most likely to be the result of a data privacy law?

Access to personally identifiable information is limited to those who need It to perform their job.

Confidential data must be backed up and recoverable within a 24-hour period.

Updates to systems containing sensitive data must be approved before being moved to production.

A record of employees with access to insider information must be maintained, and those employees may not trade company stock during blackout periods

15. 1.An organization decided to reorganize into a flatter structure.

Which of the following changes would be expected with this new structure?

Lower costs.

Slower decision making at the senior executive level.

Limited creative freedom in lower-level managers.

Senior-level executives more focused on short-term, routine decision making

16. Which of the following is most influenced by a retained earnings policy?

Cash.

Dividends.

Gross margin.

Net income.

17. Which of the following best describes the primary objective of cybersecurity?

To protect the effective performance of IT general and application controls.

To regulate users ‘behavior it the web and cloud environment.

To prevent unauthorized access to information assets.

To secure application of protocols and authorization routines.

18. In an effort to increase business efficiencies and improve customer service offered to its major trading partners, management of a manufacturing and distribution company established a secure network, which provides a secure channel for electronic data interchange between the company and its partners.

Which of the following network types is illustrated by this scenario?

A value-added network.

A local area network.

A metropolitan area network.

A wide area network.

19. Which of the following controls would enable management to receive timely feedback and help mitigate unforeseen risks?

Measure product performance against an established standard.

Develop standard methods for performing established activities.

Require the grouping of activities under a single manager.

Assign each employee a reasonable workload.

20. Which of the following is an example of internal auditors applying data mining techniques for exploratory purposes?

Internal auditors perform reconciliation procedures to support an external audit of financial reporting.

Internal auditors perform a systems-focused analysis to review relevant controls.

Internal auditors perform a risk assessment to identify potential audit subjects as input for the annual internal audit plan

Internal auditors test IT general controls with regard to operating effectiveness versus design

Page 3 of 10

21. Which of the following authentication device credentials is the most difficult to revoke when an employee s access rights need to be removed?

A traditional key lock

A biometric device

A card-key system

A proximity device

22. Which of the following is a benefit from the concept of Internet of Things?

Employees can choose from a variety of devices they want to utilize to privately read work emails without their employer’s knowledge.

Physical devices, such as thermostats and heat pumps, can be set to react to electricity market changes and reduce costs.

Information can be extracted more efficiently from databases and transmitted to relevant applications for in-depth analytics.

Data mining and data collection from internet and social networks is easier, and the results are more comprehensive

23. Which of the following security controls would be me most effective in preventing security breaches?

Approval of identity request

Access logging.

Monitoring privileged accounts

Audit of access rights

24. Which of the following IT professionals is responsible for providing maintenance to switches and routers to keep IT systems running as intended?

Data center operations manager

Response and support team.

Database administrator,

Network administrator

25. Which of the following network types should an organization choose if it wants to allow access only to its own personnel?

An extranet

A local area network

An Intranet

The internet

26. A manufacturer ss deciding whether to sell or process materials further.

Which of the following costs would be relevant to this decision?

Incremental processing costs, incremental revenue, and variable manufacturing expenses.

Joint costs, incremental processing costs, and variable manufacturing expenses.

Incremental revenue, joint costs, and incremental processing costs.

Variable manufacturing expenses, incremental revenue, and joint costs

27. An organization with global headquarters in the United States has subsidiaries in eight other nations. If the organization operates with an ethnocentric attitude, which of the following statements is true?

Standards used for evaluation and control are determined at local subsidiaries, not set by headquarters.

Orders, commands, and advice are sent to the subsidiaries from headquarters.

Poop o of local nationality are developed for the best positions within their own country.

There is a significant amount of collaboration between headquarters and subs diaries.

28. Which of the following intangible assets is considered to have an indefinite life?

Underground oil deposits

Trademark

Land

29. Management is designing its disaster recovery plan. In the event that there is significant damage to the organization's IT systems this plan should enable the organization to resume operations at a recovery site after some configuration and data restoration.

Which of the following is the ideal solution for management in this scenario?

A warm recovery plan.

A cold recovery plan.

A hot recovery plan.

A manual work processes plan

30. Which of the following is a result of Implementing on e-commerce system, which relies heavily on electronic data interchange and electronic funds transfer, for purchasing and biting?

Higher cash flow and treasury balances.

Higher inventory balances

Higher accounts receivable.

Higher accounts payable

Page 4 of 10

31. An internal auditor is assessing the risks related to an organization's mobile device policy. She notes that the organization allows third parties (vendors and visitors) to use outside smart devices to access its proprietary networks and systems.

Which of the following types of smart device risks should the internal Auditor be most concerned about?

Compliance.

Privacy

Strategic

Physical security

32. Which of the following describes the most appropriate set of tests for auditing a workstation's logical access controls?

Review the list of people with access badges to the room containing the workstation and a log of those who accessed the room.

Review the password length, frequency of change, and list of users for the workstation's login process.

Review the list of people who attempted to access the workstation and failed, as well as error messages.

Review the passwords of those who attempted unsuccessfully to access the workstation and the log of their activity

33. Which of the following biometric access controls uses the most unique human recognition characteristic?

Facial comparison using photo identification.

Signature comparison.

Voice comparison.

Retinal print comparison.

34. In an organization that produces chocolate, the leadership team decides that the organization will open a milk production facility for its milk chocolate.

Which of the following strategies have the organization chosen?

Vertical integration.

Unrelated diversification.

Differentiation

Focus

35. Which of the following should internal auditors be attentive of when reviewing personal data consent and opt-in/opt-out management process?

Whether customers are asked to renew their consent for their data processing at least quarterly.

Whether private data is processed in accordance with the purpose for which the consent was obtained?

Whether the organization has established explicit and entitywide policies on data transfer to third parties.

Whether customers have an opportunity to opt-out the right to be forgotten from organizational records and systems.

36. According to lIA guidance on IT, which of the following plans would pair the identification of critical business processes with recovery time objectives?

The business continuity management charter.

The business continuity risk assessment plan.

The business Impact analysis plan

The business case for business continuity planning

37. A chief audit executive wants to implement an enterprisewide resource planning software.

Which of the following internal audit assessments could provide overall assurance on the likelihood of the software implementation's success?

Readiness assessment.

Project risk assessment.

Post-implementation review.

Key phase review.

38. Which of the following financial statements provides the best disclosure of how a company's money was used during a particular period?

Income statement.

Owner's equity statement.

Balance sheet.

Statement of cash flows.

39. What is the primary purpose of an Integrity control?

To ensure data processing is complete, accurate, and authorized.

To ensure data being processed remains consistent and intact.

To monitor the effectiveness of other controls

To ensure the output aligns with the intended result.

40. Several organizations have developed a strategy to open co-owned shopping malls.

What would be the primary purpose of this strategy?

To exploit core competence.

To increase market synergy.

To deliver enhanced value.

To reduce costs.

Page 5 of 10

41. Which of the following capital budgeting techniques considers the tune value of money?

Annual rate of return.

Incremental analysis.

Discounted cash flow.

Cash payback

42. Which of the following types of date analytics would be used by a hospital to determine which patients are likely to require remittance for additional treatment?

Predictive analytics.

Prescriptive analytics.

Descriptive analytics.

Diagnostic analytics.

43. Which of the following best describes a potential benefit of using data analyses?

It easily aligns with existing internal audit competencies to reduce expenses

It provides a more holistic view of the audited area.

Its outcomes can be easily interpreted into audit: conclusions.

Its application increases internal auditors' adherence to the Standards

44. An analytical model determined that on Friday and Saturday nights the luxury brands stores should be open for extended hours and with a doubled number of employees present; while on Mondays and Tuesdays costs can be minimized by reducing the number of employees to a minimum and opening only for evening hours.

Which of the following best categorizes the analytical model applied?

Descriptive.

Diagnostic.

Prescriptive.

Prolific.

45. Which of the following networks is suitable for an organization that has operations In multiple cities and countries?

Wide area network.

Local area network

Metropolitan area network.

Storage area network.

46. Which of the following best explains the matching principle?

Revenues should be recognized when earned.

Revenue recognition is matched with cash.

Expense recognition is tied to revenue recognition.

Expenses are recognized at each accounting period.

47. On the last day of the year, a total cost of S 150.000 was incurred in indirect labor related to one of the key products an organization makes.

How should the expense be reported on that year's financial statements?

It should be reported as an administrative expense on the income statement.

It should be reported as period cost other than a product cost on the management accounts

It should be reported as cost of goods sold on the income statement.

It should be reported on the balance sheet as part of inventory.

48. A small software development firm designs and produces custom applications for businesses. The application development team consists of employees from multiple departments who all report to a single project manager.

Which of the following organizational structures does this situation represent?

Functional departmentalization.

Product departmentalization

Matrix organization.

Divisional organization

49. Which of the following is true of matrix organizations?

A unity-of-command concept requires employees to report technically, functionally, and administratively to the same manager.

A combination of product and functional departments allows management to utilize personnel from various Junctions.

Authority, responsibility and accountability of the units Involved may vary based on the project's life, or the organization's culture

It is best suited for firms with scattered locations or for multi-line, Large-scale firms.

50. Which of the following is an example of a physical control?

Providing fire detection and suppression equipment

Establishing a physical security policy and promoting it throughout the organization

Performing business continuity and disaster recovery planning

Keeping an offsite backup of the organization's critical data

Page 6 of 10

51. Which of the following statements is true regarding the term "flexible budgets" as it is used in accounting?

The term describes budgets that exclude fixed costs.

Flexible budgets exclude outcome projections, which are hard to determine, and instead rely on the most recent actual outcomes.

The term is a red flag for weak budgetary control activities.

Flexible budgets project data for different levels of activity.

52. At what stage of project integration management would a project manager and project management team typically coordinate the various technical and organizational interfaces that exist in the project?

Project plan development.

Project plan execution

Integrated change control.

Project quality planning

53. An internal auditor reviews a data population and calculates the mean, median, and range.

What is the most likely purpose of performing this analytic technique?

To inform the classification of the data population.

To determine the completeness and accuracy of the data.

To identify whether the population contains outliers.

To determine whether duplicates in the data inflate the range.

54. Which of the following risks would Involve individuals attacking an oil company's IT system as a sign of solidarity against drilling in a local area?

Tampering

Hacking

Phishing

Piracy

55. Which of the following would be the strongest control to prevent unauthorized wireless network access?

Allowing access to the organization's network only through a virtual private network.

Logging devices that access the network, including the date. time, and identity of the user.

Tracking all mobile device physical locations and banning access from non-designated areas.

Permitting only authorized IT personnel to have administrative control of mobile devices.

56. Which of the following risks is best addressed by encryption?

Information integrity risk

Privacy risk

Access risk

Software risk

57. Which of the following statements is true concerning the basic accounting treatment of a partnership?

The initial investment of each partner should be recorded at book value.

The ownership ratio identifies the basis for dividing net income and net toss.

A partner's capital only changes due to net income or net loss.

The basis for sharing net incomes or net kisses must be fixed.

58. Which of the following is on advantage of a decentralized organizational structure, as opposed to a centralized structure?

Greater cost-effectiveness

Increased economies of scale

Larger talent pool

Strong internal controls

59. The management of working capital is most crucial for which of the following aspects of business?

Liquidity

Profitability

Solvency

Efficiency

60. Which of the following is the best example of IT governance controls?

Controls that focus on segregation of duties, financial, and change management,

Personnel policies that define and enforce conditions for staff in sensitive IT areas.

Standards that support IT policies by more specifically defining required actions

Controls that focus on data structures and the minimum level of documentation required

Page 7 of 10

61. Management has established a performance measurement focused on the accuracy of disbursements. The disbursement statistics, provided daily to ail accounts payable and audit staff, include details of payments stratified by amount and frequency.

Which of the following is likely to be the greatest concern regarding this performance measurement?

Articulation of the data

Availability of the data.

Measurability of the data

Relevance of the data.

62. Which of the following best describes a man-in-the-middle cyber-attack?

The perpetrator is able to delete data on the network without physical access to the device.

The perpetrator is able to exploit network activities for unapproved purposes.

The perpetrator is able to take over control of data communication in transit and replace traffic.

The perpetrator is able to disable default security controls and introduce additional vulnerabilities

63. Which of the following controls would be the most effective in preventing the disclosure of an organization's confidential electronic information?

Nondisclosure agreements between the firm and its employees.

Logs of user activity within the information system.

Two-factor authentication for access into the information system.

limited access so information, based on employee duties

64. During her annual performance review, a sales manager admits that she experiences significant stress due to her job but stays with the organization because of the high bonuses she earns.

Which of the following best describes her primary motivation to remain in the job?

Intrinsic reward.

Job enrichment

Extrinsic reward.

The hierarchy of needs.

65. Which of the following is a disadvantage in a centralized organizational structure?

Communication conflicts

Slower decision making.

Loss of economies of scale

Vulnerabilities in sharing knowledge

66. If an organization has a high amount of working capital compared to the industry average, which of the following is most likely true?

Settlement of short-term obligations may become difficult.

Cash may be bed up in items not generating financial value.

Collection policies of the organization are ineffective.

The organization is efficient in using assets to generate revenue.

67. Which of the following best describes a cyberattacK in which an organization faces a denial-of-service threat created through malicious data encryption?

Phishing.

Ransomware.

Hacking.

Makvare

68. An organization's board of directors is particularly focused on positioning, the organization as a leader in the industry and beating the competition.

Which of the following strategies offers the greatest alignment with the board's focus?

Divesting product lines expected to have negative profitability.

Increasing the diversity of strategic business units.

Increasing investment in research and development for a new product.

Relocating the organization's manufacturing to another country.

69. Which of the following IT disaster recovery plans includes a remote site dessgnated for recovery with available space for basic services, such as internet and telecommunications, but does not have servers or infrastructure equipment?

Frozen site

Cold site

Warm site

Hot site

70. A company produces water buckets with the following costs per bucket:

Direct labor = 82

Direct material = $5

Fixed manufacturing = 83.50

Variable manufacturing = 82.50

The water buckets are usually sold for $15. However, the company received a special order for 50.000 water buckets at 311 each.

Assuming there is adequate manufacturing capacity and ail other variables are constant, what is the relevant cost per unit to consider when deciding whether to accept this special order at the reduced price?

$9.50

$10.50

$11

$13

Page 8 of 10

71. Which of the following would be the best method to collect information about employees' job satisfaction?

Online surveys sent randomly to employees.

Direct onsite observations of employees.

Town hall meetings with employees.

Face-to-face interviews with employees.

72. Which of the following statements is true regarding activity-based costing (ABC)?

An ABC costing system is similar to conventional costing systems in how it treats the allocation of manufacturing overhead.

An ABC costing system uses a single unit-level basis to allocate overhead costs to products.

An ABC costing system may be used with either a job order or a process cost accounting system.

The primary disadvantage of an ABC costing system is less accurate product costing.

73. Which of the following would be classified as IT general controls?

Error listings.

Distribution controls.

Transaction logging.

Systems development controls.

74. Which of the following statements is true regarding a bring-your-own-device (BYOD) environment?

There is a greater need for organizations to rely on users to comply with policies and procedures.

With fewer devices owned by the organization, there is reduced need to maintain documented policies and procedures.

Incident response times are less critical in the BYOD environment, compared to a traditional environment

There is greater sharing of operational risk in a BYOD environment

75. Favorable labor rate variance.

1 and 2

1 and 4

3 and A

2 and 3

76. With increased cybersecurity threats, which of the following should management consider to ensure that there is strong security governance in place?

Inventory of information assets

Limited sharing of data files with external parties.

Vulnerability assessment

Clearly defined policies

77. Which of the following backup methodologies would be most efficient in backing up a database in the production environment?

Disk mirroring of the data being stored on the database.

A differential backup that is performed on a weekly basis.

An array of independent disks used to back up the database.

An incremental backup of the database on a daily basis.

78. Which of the following disaster recovery plans includes recovery resources available at the site, but they may need to be configured to support the production system?

Warm site recovery plan.

Hot site recovery plan.

Cool site recovery plan.

Cold site recovery plan.

79. Which of the following purchasing scenarios would gain the greatest benefit from implementing electronic cate interchange?

A just-in-time purchasing environment

A Large volume of custom purchases

A variable volume sensitive to material cost

A currently inefficient purchasing process

80. Internal auditors want to increase the likelihood of identifying very small control and transaction anomalies in their testing that could potentially be exploited to cause material breaches.

Which of the following techniques would best meet this objective?

Analysis of the full population of existing data.

Verification of the completeness and integrity of existing data.

Continuous monitoring on a repetitive basis.

Analysis of the databases of partners, such as suppliers.

Page 9 of 10

81. Which of the following can be classified as debt investments?

Investments in the capital stock of a corporation

Acquisition of government bonds.

Contents of an investment portfolio,

Acquisition of common stock of a corporation

82. Which of the following application controls is the most dependent on the password owner?

Password selection

Password aging

Password lockout

Password rotation

83. An organization with a stable rating, as assessed by International rating agencies, has issued a bond not backed by assets or collateral. Payments of the interests and the principal to bondholders are guaranteed by the organization.

Which type of bond did the organization issue?

A sinking fund bond.

A secured bond.

A junk bond.

A debenture bond

84. A large retail customer made an offer to buy 10.000 units at a special price of $7 per unit. The manufacturer usually sells each unit for §10, Variable Manufacturing costs are 55 per unit and fixed manufacturing costs are $3 per unit.

For the manufacturer to accept the offer, which of the following assumptions needs to be true?

Fixed and Variable manufacturing costs are less than the special offer selling price.

The manufacturer can fulfill the order without expanding the capacities of the production facilities.

Costs related to accepting this offer can be absorbed through the sale of other products.

The manufacturer’s production facilities are currently operating at full capacity.

85. According to Maslow's hierarchy of needs theory, which of the following best describes a strategy where a manager offers an assignment to a subordinate specifically to support his professional growth and future advancement?

Esteem by colleagues.

Self-fulfillment

Series of belonging in the organization

Job security

86. A multinational organization allows its employees to access work email via personal smart devices. However, users are required to consent to the installation of mobile device management (MDM) software that will remotely wipe data in case of theft or other incidents.

Which of the following should the organization ensure in exchange for the employees' consent?

That those employees who do not consent to MDM software cannot have an email account.

That personal data on the device cannot be accessed and deleted by system administrators.

That monitoring of employees' online activities is conducted in a covert way to avoid upsetting them.

That employee consent includes appropriate waivers regarding potential breaches to their privacy.

87. For which of the following scenarios would the most recent backup of the human resources database be the best source of information to use?

An incorrect program fix was implemented just prior to the database backup.

The organization is preparing to train all employees on the new self-service benefits system.

There was a data center failure that requires restoring the system at the backup site.

There is a need to access prior year-end training reports for all employees in the human resources database

88. Which of the following is an indicator of liquidity that is more dependable than working capital?

Acid-test (quick) ratio

Average collection period

Current ratio.

Inventory turnover.

89. Which of the following facilitates data extraction from an application?

Application program code.

Database system.

Operating system.

Networks.

90. Which of the following statements describes the typical benefit of using a flat organizational structure for the internal audit activity, compared to a hierarchical structure?

A flat structure results in lower operating and support costs than a hierarchical structure.

A flat structure results in a stable and very collaborative environment.

A flat structure enables field auditors to report to and learn from senior auditors.

A flat structure is more dynamic and offers more opportunities for advancement than a hierarchical structure.

Page 10 of 10

91. Which of the following statements. Is most accurate concerning the management and audit of a web server?

The file transfer protocol (FTP) should always be enabled.

The simple mail transfer protocol (SMTP) should be operating under the most privileged accounts.

The number of ports and protocols allowed to access the web server should be maximized.

Secure protocols for confidential pages should be used instead of dear-text protocols such as HTTP or FT

92. When executive compensation is based on the organization's financial results, which of the following situations is most likely to arise?

The organization reports inappropriate estimates and accruals due to poof accounting controls.

The organization uses an unreliable process forgathering and reporting executive compensation data.

The organization experiences increasing discontent of employees, if executives are eligible for compensation amounts that are deemed unreasonable.

The organization encourages employee behavior that is inconsistent with the interests of relevant stakeholders.

93. Which of the following should software auditors do when reporting internal audit findings related to enterprisewide resource planning?

Draft separate audit reports for business and IT management.

Conned IT audit findings to business issues.

Include technical details to support IT issues.

Include an opinion on financial reporting accuracy and completeness.

94. A organization finalized a contract in which a vendor is expected to design, procure, and construct a power substation for $3,000,000.

In this scenario, the organization agreed to which of the following types of contracts?

A cost-reimbursable contract.

A lump-sum contract.

A time and material contract.

A bilateral contract.

95. Which of the following IT-related activities is most commonly performed by the second line of defense?

Block unauthorized traffic.

Encrypt data.

Review disaster recovery test results.

Provide independent assessment of IT security.

96. A financial institution receives frequent and varied email requests from customers for funds to be wired out of their accounts.

Which verification activity would best help the institution avoid falling victim to phishing?

Reviewing the customer's wire activity to determine whether the request is typical.

Calling the customer at the phone number on record to validate the request.

Replying to the customer via email to validate the sender and request.

Reviewing the customer record to verify whether the customer has authorized wire requests from that email address.

97. While conducting an audit of the accounts payable department, an internal auditor found that 3% of payments made during the period under review did not agree with the submitted invoices.

Which of the following key performance indicators (KPIs) for the department would best assist the auditor in determining the significance of the test results?

A KPI that defines the process owner's tolerance for performance deviations.

A KPI that defines the importance of performance levels and disbursement statistics being measured.

A KPI that defines timeliness with regard to reporting disbursement data errors to authorized personnel.

A KPI that defines operating ratio objectives of the disbursement process.

98. Which of the following is a characteristic of big data?

Big data is being generated slowly due to volume.

Big data must be relevant for the purposes of organizations.

Big data comes from a single type of formal.

Big data is always changing

99. An intruder posing as the organization's CEO sent an email and tricked payroll staff into providing employees' private tax information.

What type of attack was perpetrated?

Boundary attack.

Spear phishing attack.

Brute force attack.

Spoofing attack.

100. With regard to project management, which of the following statements about project crashing Is true?

It leads to an increase in risk and often results in rework.

It is an optimization technique where activities are performed in parallel rather than sequentially.

It involves a revaluation of project requirements and/or scope.

It is a compression technique in which resources are added so the project.

Add IIA Certified Internal Auditor (CIA) IIA-CIA-Part3 Exam Dumps In Preparation: Pass IIA-CIA-Part3 Exam With Full Confidence

Add IIA Certified Internal Auditor (CIA) IIA-CIA-Part3 Exam Dumps In Preparation: Pass IIA-CIA-Part3 Exam With Full Confidence

Check IIA Certified Internal Auditor (CIA) IIA-CIA-Part3 Free Demo Questions

Share this post

Author

Related Posts