IIA-CIA-PART3 practice questions 101–110

1. Question 101 · 336 in bank

   An organization allows employees to use their personal mobile devices to access its database. Which of the following best maintains the confidentiality of different records within the database?

   • ARegular remote wiping of the mobile devices accessing the database.
   • BEncrypted data transmissions between mobile devices and the database.
   • CRestrictions on the access permissions when mobile devices are used.
   • DThe use of two-factor authentication algorithms for those who use remote access.

   Show answer

   Answer: B

   Next question

2. Question 102 · 336 in bank

   Organizations use matrix management to accomplish which of the following?

   • ATo improve the chain of command.
   • BTo strengthen corporate headquarters.
   • CTo focus better on a single market.
   • DTo increase lateral communication.

   Show answer

   Answer: D

   Next question

3. Question 103 · 336 in bank

   According to IIA guidance on IT, which of the following best describes a situation where data backup plans exist to ensure that critical data can be restored at some point in the future, but recovery and restore processes have not been defined?

   • AHot recovery plan.
   • BWarm recovery plan.
   • CCold recovery plan.
   • DAbsence of recovery plan.

   Show answer

   Answer: C

   Next question

4. Question 104 · 336 in bank

   Which of the following describes the most appropriate set of tests for auditing a workstation's logical access controls?

   • AReview the list of people with access badges to the room containing the workstation and a log of those who accessed the room.
   • BReview the password length, frequency of change, and list of users for the workstation's login process.
   • CReview the list of people who attempted to access the workstation and failed, as well as error messages.
   • DReview the passwords of those who attempted unsuccessfully to access the workstation and the log of their activity.

   Show answer

   Answer: B

   Next question

5. Question 105 · 336 in bank

   During which phase of the contracting process are contracts drafted for a proposed business activity?

   • AInitiation phase.
   • BBidding phase.
   • CDevelopment phase.
   • DManagement phase.

   Show answer

   Answer: A

   Next question

6. Question 106 · 336 in bank

   Which of the following is an example of a smart device security control intended to prevent unauthorized users from gaining access to a device's data or applications?

   • AAnti-malware software.
   • BAuthentication.
   • CSpyware.
   • DRooting.

   Show answer

   Answer: B

   Next question

7. Question 107 · 336 in bank

   Which of the following best describes a market signal?

   • AThe bargaining power of buyers is forcing a drop in market prices.
   • BThere is pressure from the competitor's substitute products.
   • CStrategic analysis by the organization indicates feasibility of expanding to new market niches.
   • DThe competitor announces a new warranty program.

   Show answer

   Answer: D

   Next question

8. Question 108 · 336 in bank

   According to IIA guidance on IT, which of the following strategies would provide the most effective access control over an automated point-of-sale system?

   • AInstall and update anti-virus software.
   • BImplement data encryption techniques.
   • CSet data availability by user need.
   • DUpgrade firewall configuration.

   Show answer

   Answer: C

   Next question

9. Question 109 · 336 in bank

   Which of the following is a limiting factor for capacity expansion?

   • AGovernment pressure on organizations to increase or maintain employment.
   • BProduction orientation of management.
   • CLack of credible market leader in the industry.
   • DCompany diversification.

   Show answer

   Answer: D

   Next question

10. Question 110 · 336 in bank

    According to IIA guidance, which of the following statements is true with regard to workstation computers that access company information stored on the network?

    • AIndividual workstation computer controls are not as important as companywide server controls.
    • BParticular attention should be paid to housing workstations away from environmental hazards.
    • CCybersecurity issues can be controlled at an enterprise level, making workstation level controls redundant.
    • DWith security risks near an all-time high, workstations should not be connected to the company network.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

IIA-CIA-PART3 practice, question 101. 336 questions available.