IIA-CIA-PART3 practice questions 271–280

1. Question 271 · 336 in bank

   To assess the effectiveness of an organization's privacy program, which of the following approaches should an internal auditor take?

   • AConduct a series of employee interviews
   • BConduct penetration tests
   • CReview privacy policies and procedures
   • DAnalyze the life cycle of sensitive data

   Show answer

   Answer: B

   Next question

2. Question 272 · 336 in bank

   A newly appointed board member received an email that appeared to be from the company’s CEO. The email stated: “Good morning. As you remember, the closure of projects is our top priority. Kindly organize prompt payment of the attached invoice for our new solar energy partners.” The board member quickly replied to the email and asked under which project the expense should be accounted. Only then did he realize that the sender’s mail domain was different from the company’s. Which of the following cybersecurity risks nearly occurred in the situation described?

   • AA risk of spyware and malware
   • BA risk of corporate espionage
   • CA ransomware attack risk
   • DA social engineering risk

   Show answer

   Answer: D

   Next question

3. Question 273 · 336 in bank

   Which of the following best describes the use of predictive analytics?

   • AA supplier of electrical parts analyzed all instances where different types of spare parts were out of stock prior to scheduled deliveries of those parts.
   • BA supplier of electrical parts analyzed sales, applied assumptions related to weather conditions, and identified locations where stock levels would decrease more quickly.
   • CA supplier of electrical parts analyzed all instances of a part being out of stock prior to its scheduled delivery date and discovered that increases in sales of that part consistently correlated with stormy weather.
   • DA supplier of electrical parts analyzed sales and stock information and modelled different scenarios for making decisions on stock reordering and delivery.

   Show answer

   Answer: D

   Next question

4. Question 274 · 336 in bank

   An organization was forced to stop production unexpectedly, as raw materials could not be delivered due to a military conflict in the region. Which of the following plans have most likely failed to support the organization?

   • AJust-in-time delivery plans.
   • BBackup plans.
   • CContingency plans.
   • DStanding plans.

   Show answer

   Answer: A

   Next question

5. Question 275 · 336 in bank

   Which of the following can be viewed as a potential benefit of an enterprisewide resource planning system?

   • AReal-time processing of transactions and elimination of data redundancies.
   • BFewer data processing errors and more efficient data exchange with trading partners.
   • CExploitation of opportunities and mitigation of risks associated with e-business.
   • DIntegration of business processes into multiple operating environments and databases.

   Show answer

   Answer: A

   Next question

6. Question 276 · 336 in bank

   An organization's internal audit activity performed an engagement regarding recent contract bidding. Who should the internal audit activity meet with in order to obtain reliable and relevant information about potential questionable practices related to the contract bidding?

   • ASenior management, to obtain an understanding about the justification for contract bidding.
   • BPersonnel responsible for the organization's fraud and ethics hotline, to obtain information related to contract bidding.
   • CPotential vendors, to obtain information about the bid packages related to contract bidding.
   • DContracting department personnel to obtain information related to contract bidding practices.

   Show answer

   Answer: D

   Next question

7. Question 277 · 336 in bank

   Which of the following statements describes the typical benefit of using a flat organizational structure for the internal audit activity, compared to a hierarchical structure?

   • AA flat structure results in lower operating and support costs than a hierarchical structure.
   • BA flat structure results in a stable and very collaborative environment.
   • CA flat structure enables field auditors to report to and learn from senior auditors.
   • DA flat structure is more dynamic and offers more opportunities for advancement than a hierarchical structure.

   Show answer

   Answer: C

   Next question

8. Question 278 · 336 in bank

   Which of the following statements is accurate regarding the use of Secure Sockets Layer (SSL) as a control?

   • AIt supports the authentication of information sent to a server.
   • BIt prevents phishing attacks that redirect users to malicious sites.
   • CIt prevents malware infections.
   • DIt identifies each client-server session using temporary tokens.

   Show answer

   Answer: A

   Next question

9. Question 279 · 336 in bank

   An organization selected a differentiation strategy to compete at the business level. Which of the following structures best fits this strategic choice?

   • AFunctional structure.
   • BDivisional structure.
   • CMechanistic structure.
   • DFunctional structure with cross-functional teams.

   Show answer

   Answer: B

   Next question

10. Question 280 · 336 in bank

    A one-time password would most likely be generated in which of the following situations?

    • AWhen an employee accesses an online digital certificate.
    • BWhen an employee's biometrics have been accepted.
    • CWhen an employee creates a unique digital signature.
    • DWhen an employee uses a key fob to produce a token.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

IIA-CIA-PART3 practice, question 271. 336 questions available.