IIA-CIA-PART3 practice questions 111–120

1. Question 111 · 336 in bank

   Which of the following stages of group development is associated with accepting team responsibilities?

   • AForming stage.
   • BPerforming stage.
   • CNorming stage.
   • DStorming stage.

   Show answer

   Answer: C

   Next question

2. Question 112 · 336 in bank

   How do data analysis technologies affect internal audit testing?

   • AThey improve the effectiveness of spot check testing techniques.
   • BThey allow greater insight into high risk areas.
   • CThey reduce the overall scope of the audit engagement.
   • DThey increase the internal auditor's objectivity.

   Show answer

   Answer: B

   Next question

3. Question 113 · 336 in bank

   Which of the following is false with regard to Internet connection firewalls?

   • AFirewalls can protect against computer viruses.
   • BFirewalls monitor attacks from the Internet.
   • CFirewalls provide network administrators tools to retaliate against hackers.
   • DFirewalls may be software-based or hardware-based.

   Show answer

   Answer: A

   Next question

4. Question 114 · 336 in bank

   Which of the following application software features is the least effective control to protect passwords?

   • ASuspension of user IDs after a user's repeated attempts to sign on with an invalid password.
   • BEncryption of passwords prior to their transmission or storage.
   • CForced change of passwords after a designated number of days.
   • DAutomatic logoff of inactive users after a specified time period of inactivity.

   Show answer

   Answer: C

   Next question

5. Question 115 · 336 in bank

   Which of the following bring-your-own-device (BYOD) practices is likely to increase the risk of infringement on local regulations, such as copyright or privacy laws?

   • ANot installing anti-malware software.
   • BUpdating operating software in a haphazard manner.
   • CApplying a weak password for access to a mobile device.
   • DJailbreaking a locked smart device.

   Show answer

   Answer: D

   Next question

6. Question 116 · 336 in bank

   According to IIA guidance, which of the following would be the best first step to manage risk when a third party is overseeing the organization's network and data?

   • ACreating a comprehensive reporting system for vendors to demonstrate their ongoing due diligence in network operations.
   • BDrafting a strong contract that requires regular vendor control reports and a right-to-audit clause.
   • CApplying administrative privileges to ensure right-to-access controls are appropriate.
   • DCreating a standing cybersecurity committee to identify and manage risks related to data security.

   Show answer

   Answer: D

   Next question

7. Question 117 · 336 in bank

   Which of the following are likely indicators of ineffective change management? 1. IT management is unable to predict how a change will impact interdependent systems or business processes. 2. There have been significant increases in trouble calls or in support hours logged by programmers. 3. There is a lack of turnover in the systems support and business analyst development groups. 4. Emergency changes that bypass the normal control process frequently are deemed necessary.

   • A1 and 3 only
   • B2 and 4 only
   • C1, 2, and 4 only
   • D1, 2, 3, and 4

   Show answer

   Answer: C

   Next question

8. Question 118 · 336 in bank

   Which of the following is a security feature that involves the use of hardware and software to filter or prevent specific information from moving between the inside network and the outside network?

   • AAuthorization.
   • BArchitecture model.
   • CFirewall.
   • DVirtual private network

   Show answer

   Answer: A

   Next question

9. Question 119 · 336 in bank

   Which of the following is the primary benefit of including end users in the system development process?

   • AImproved integrity of programs and processing.
   • BEnhanced ongoing maintenance of the system.
   • CGreater accuracy of the testing phase.
   • DReduced need for unexpected software changes.

   Show answer

   Answer: D

   Next question

10. Question 120 · 336 in bank

    Which of the following is most important for an internal auditor to check with regard to the database version?

    • AVerify whether the organization uses the most recent database software version.
    • BVerify whether the database software version is supported by the vendor.
    • CVerify whether the database software version has been recently upgraded.
    • DVerify whether access to database version information is appropriately restricted.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

IIA-CIA-PART3 practice, question 111. 336 questions available.