IIA-CIA-PART3 practice questions 191–200

1. Question 191 · 336 in bank

   Which of the following statements regarding program change management is not correct?

   • AThe goal of the change management process is to sustain and improve organizational operations.
   • BThe degree of risk associated with a proposed change determines if the change request requires authorization.
   • CIn order to protect the production environment, changes must be managed in a repeatable, defined, and predictable manner.
   • DAll changes should be tested in a non-production environment before migrating to the production environment.

   Show answer

   Answer: B

   Next question

2. Question 192 · 336 in bank

   Which of the following statements is true regarding user-developed applications (UDAs)?

   • AUDAs are less flexible and more difficult to configure than traditional IT applications.
   • BUpdating UDAs may lead to various errors resulting from changes or corrections.
   • CUDAs typically are subjected to application development and change management controls.
   • DUsing UDAs typically enhances the organization's ability to comply with regulatory factors.

   Show answer

   Answer: B

   Next question

3. Question 193 · 336 in bank

   During which of the following phases of contracting does the organization analyze whether the market is aligned with organizational objectives?

   • AInitiation phase.
   • BBidding phase.
   • CDevelopment phase.
   • DNegotiation phase.

   Show answer

   Answer: C

   Next question

4. Question 194 · 336 in bank

   A clothing company sells shirts for $8 per shirt. In order to break even, the company must sell 25,000 shirts. Actual sales total $300,000. What is margin of safety sales for the company?

   • A$100,000
   • B$200,000
   • C$275,000
   • D$500,000

   Show answer

   Answer: A

   Next question

5. Question 195 · 336 in bank

   Which of the following is an example of internal auditors applying data mining techniques for exploratory purposes?

   • AInternal auditors perform reconciliation procedures to support an external audit of financial reporting.
   • BInternal auditors perform a systems-focused analysis to review relevant controls.
   • CInternal auditors perform a risk assessment to identify potential audit subjects as input for the annual internal audit plan.
   • DInternal auditors test IT general controls with regard to operating effectiveness versus design.

   Show answer

   Answer: B

   Next question

6. Question 196 · 336 in bank

   A holding company set up a centralized group technology department, using a local area network with a mainframe computer to process accounting information for all companies within the group. An internal auditor would expect to find all of the following controls within the technology department except:

   • AAdequate segregation of duties between data processing controls and file security controls.
   • BDocumented procedures for remote job entry and for local data file retention.
   • CEmergency and disaster recovery procedures and maintenance agreements in place to ensure continuity of operations.
   • DEstablished procedures to prevent and detect unauthorized changes to data files.

   Show answer

   Answer: B

   Next question

7. Question 197 · 336 in bank

   Which of the following best describes a detective control designed to protect an organization from cyberthreats and attacks?

   • AA list of trustworthy, good traffic and a list of unauthorized, blocked traffic.
   • BMonitoring for vulnerabilities based on industry intelligence.
   • CComprehensive service level agreements with vendors.
   • DFirewall and other network perimeter protection tools.

   Show answer

   Answer: B

   Next question

8. Question 198 · 336 in bank

   In reviewing an organization's IT infrastructure risks, which of the following controls is to be tested as part of reviewing workstations?

   • AInput controls.
   • BSegregation of duties.
   • CPhysical controls.
   • DIntegrity controls.

   Show answer

   Answer: D

   Next question

9. Question 199 · 336 in bank

   Which of the following local area network physical layouts is subject to the greatest risk of failure if one device fails?

   • AStar network.
   • BBus network.
   • CToken ring network.
   • DMesh network.

   Show answer

   Answer: B

   Next question

10. Question 200 · 336 in bank

    Which of the following should software auditors do when reporting internal audit findings related to enterprisewide resource planning?

    • ADraft separate audit reports for business and IT management.
    • BConnect IT audit findings to business issues.
    • CInclude technical details to support IT issues.
    • DInclude an opinion on financial reporting accuracy and completeness.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

IIA-CIA-PART3 practice, question 191. 336 questions available.