IIA-CIA-PART3 practice questions 261–270

1. Question 261 · 336 in bank

   Which of the following is true regarding the use of remote wipe for smart devices?

   • AIt can restore default settings and lock encrypted data when necessary
   • BIt enables the erasure and reformatting of secure digital (SD) cards
   • CIt can delete data backed up to a desktop for complete protection if required
   • DIt can wipe data that is backed up via cloud computing

   Show answer

   Answer: C

   Next question

2. Question 262 · 336 in bank

   An organization is considering integration of governance, risk, and compliance (GRC) activities into a centralized technology-based resource. In implementing this GRC resource, which of the following is a key enterprise governance concern that should be fulfilled by the final product?

   • AThe board should be fully satisfied that there is an effective system of governance in place through accurate quality information provided
   • BCompliance, audit, and risk management can find and seek efficiencies between their functions through integrated information reporting.
   • CKey compliance and risk metrics can be tracked and compared throughout the enterprise aiding in identifying problem departments
   • DData analytics can be utilized for trending of the data to ensure that patterns and ongoing monitoring occurs throughout the organization

   Show answer

   Answer: B

   Next question

3. Question 263 · 336 in bank

   An organization that relies heavily on IT wants to contain the impact of potential business disruption to a period of approximately four to seven days. Which of the following business recovery strategies would most efficiently meet this organization’s needs?

   • AA recovery strategy whereby a separate site has not yet been determined but hardware has been reserved for purchase and data backups
   • BA recovery strategy whereby a separate site has been secured and is ready for use. with fully configured hardware and real-time synchronized data
   • CA recovery strategy whereby a separate site has been secured and the necessary funds for hardware and data backups have been reserved
   • DA recovery strategy whereby a separate site has been secured with configurable hardware and data backups

   Show answer

   Answer: C

   Next question

4. Question 264 · 336 in bank

   Which of the following controls would be most efficient to protect business data from corruption and errors?

   • AControls to ensure data is unable to be accessed without authorization
   • BControls to calculate batch totals to identify an error before approval
   • CControls to encrypt the data so that corruption is likely ineffective
   • DControls to quickly identify malicious intrusion attempts

   Show answer

   Answer: C

   Next question

5. Question 265 · 336 in bank

   Which of the following describes a mechanistic organizational structure?

   • APrimary direction of communication tends to be lateral
   • BDefinition of assigned tasks tends to be broad and general
   • CType of knowledge required tends to be broad and professional
   • DReliance on self-control tends to be low

   Show answer

   Answer: D

   Next question

6. Question 266 · 336 in bank

   An organization's technician was granted a role that enables him to prioritize projects throughout the organization. Which type of authority will the technician most likely be exercising?

   • ALegitimate authority
   • BCoercive authority
   • CReferent authority
   • DExpert authority

   Show answer

   Answer: A

   Next question

7. Question 267 · 336 in bank

   The comparable uncontrolled price (CUP) method may be used when setting transfer prices in an organization. What is a common limitation of the CUP method?

   • AIt may be difficult to find a transaction between independent companies that is similar enough to a controlled transaction
   • BThe CUP method is likely to lead to management decisions that are not optimal for the company
   • CThis approach to setting transfer prices is not flexible, as the CUP method does not allow for adjustments
   • DIt offers only an indirect way of ascertaining an arm’s-length price of a controlled transaction

   Show answer

   Answer: B

   Next question

8. Question 268 · 336 in bank

   During a visit to an oil production plant, an internal auditor was surprised to see the accounting employees shopping online using work computers. The auditor knew that the company's policy did not allow access to certain webpages, including those being used for online shopping. Which of the following should the auditor study next to explore the observation further?

   • AThe company’s training policy on social media
   • BThe company’s firewall configuration rules.
   • CThe company’s access point encryption settings
   • DThe company’s software installation controls

   Show answer

   Answer: B

   Next question

9. Question 269 · 336 in bank

   An internal auditor is assigned to perform data analytics. Which of the following is the next step the auditor should undertake after she has ascertained the value expected from the review?

   • ANormalize the data
   • BObtain the data
   • CIdentify the risks
   • DAnalyze the data

   Show answer

   Answer: B

   Next question

10. Question 270 · 336 in bank

    Which of the following actions would senior management need to consider as part of new IT guidelines regarding the organization's cybersecurity policies?

    • AAssigning new roles and responsibilities for senior IT management
    • BGrowing use of bring your own devices for organizational matters
    • CExpansion of operations into new markets with limited IT access
    • DHiring new personnel within the IT department for security purposes

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

IIA-CIA-PART3 practice, question 261. 336 questions available.