Free IIA-CIA-Part3 Questions for IIA IIA-CIA-Part3 Exam

Question #1

After identifying and reporting a control deficiency, which of the following actions should an internal auditor perform next?

A. Design a remediation plan and ensure operational management follows through

B. Follow up on the remediation status with business management periodically

C. Ensure full documentation of the control deficiency and close out the audit file

D. Note this control area "audited" and mark it as out-of-scope for the following year

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #2

Which of the following statements is in accordance with COBIT?
* Pervasive controls are general while detailed controls are specific.
* Application controls are a subset of pervasive controls.
* Implementation of software is a type of pervasive control.
* Disaster recovery planning is a type of detailed control.

A. 2 and 3 only

B. 1, 2, and 4 only

C. 2, 3, and 4 only

D. 1 and 4 only

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #3

An organization has instituted a bring-your-own-device (BYOD) work environment. Which of the following policies best addresses the increased risk to the organization ' s network incurred by this environment?

A. Ensure that relevant access to key applications is strictly controlled through an approval and review process.

B. Institute detection and authentication controls for all devices used for network connectivity and data storage.

C. Use management software scan and then prompt parch reminders when devices connect to the network

D. Limit the use of the employee devices for personal use to mitigate the risk of exposure to organizational data.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #4

Which of the following are the most appropriate measures for evaluating the change in an organization ' s liquidity position?

A. Accounts receivable turnover, inventory turnover in days, and the current ratio.

B. Accounts receivable turnover, return on assets, and the current ratio.

C. Times interest earned, return on assets, and inventory turnover.

D. Inventory turnover in days, the current ratio, and return on equity.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #5

Management has established a performance measurement focused on the accuracy of disbursements. The disbursement statistics, provided daily to ail accounts payable and audit staff, include details of payments stratified by amount and frequency. Which of the following is likely to be the greatest concern regarding this performance measurement?

A. Articulation of the data

B. Availability of the data.

C. Measurability of the data

D. Relevance of the data.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #6

An internal auditor discusses user-defined default passwords with the database administrator. Such passwords will be reset as soon as the user logs in for the first time, but the initial value of the password is set as "
123456. " Which of the following are the auditor and the database administrator most likely discussing in this situation?

A. Whether users should be trained on password management features and requirements.

B. What happens in the period between the creation of the account and the password change.

C. Whether it would be more secure to replace numeric values with characters.

D. What happens in the situations where users continue using the initial password.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #7

An organization and its trading partner rely on a computer-to-computer exchange of digital business documents. Which of the following best describes this scenario?

A. Use of a central processing unit

B. Use of a local area network

C. Use of electronic data Interchange

D. Use of a database management system

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #8

Which of the following organization structures would most likely be able to cope with rapid changes and uncertainties?

A. Centralized

B. Tall structure

C. Departmentalized

D. Decentralized

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #9

A rapidly expanding retail organization continues to be tightly controlled by its original small management team. Which of the following is a potential risk in this vertically centralized organization?

A. Suboptimal decision-making

B. Duplication of business activities

C. Lack of coordination among different business units

D. Operational decisions are inconsistent with organizational goals

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #10

An internal auditor observed that the organization ' s disaster recovery solution will make use of a cold site in a town several miles away. Which of the following is likely to be a characteristic of this disaster recovery solution?

A. Data is synchronized in real time.

B. Recovery resources and data restore processes have been defined.

C. Servers are not available and need to be procured.

D. Recovery time is expected to be less than one week.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Free IIA-CIA-Part3 Questions for IIA Internal Audit Function IIA-CIA-Part3 Exam as PDF & Practice Test Engine

Download Free IIA IIA-CIA-Part3 Demo