IIA-CIA-Part3 sample questions

Question 1

Which of the following is a systems software control?

Accepted Answer

Ensuring that all user requirements are documented.

Answer

Restricting server room access to specific individuals.

Answer

Housing servers with sensitive software away from environmental hazards.

Answer

Performing of intrusion testing on a regular basis.

Question 2

Which of the following is true of matrix organizations?

Accepted Answer

a combination of product and functional departments allows management to utilize personnel from various functions.

Answer

a unity-of-command concept requires employees to report technically, functionally, and administratively to the same manager.

Answer

Authority, responsibility, and accountability of the units involved may vary based on the project's life, or the organization's culture.

Answer

it is best suited for firms with scattered lC. tions or for multi-line, large-scale firms.

Question 3

During her annual performance review, a sales manager admits that she experiences significant stress due to her job but stays with the organization because of the high bonuses she earns.

Which of the following best describes her primary motivation to remain in the job?

Accepted Answer

Extrinsic reward.

Answer

Intrinsic reward.

Answer

Job enrichment.

Answer

The hierarchy of needs.

Question 4

What must be monitored in order to manage risk of consumer product inventory obsolescence?

1. Inventory balances.
2. Market share forecasts.
3. Sales returns.
4. Sales trends.

Accepted Answer

1 and 4 only

Answer

1 only

Answer

4 only

Answer

1,2, and 3 only

Question 5

Which of the following are typical responsibilities for operational management within a risk management program?

1. Implementing corrective actions to a ddress process deficiencies.
2. Identifying shifts in the organization's risk management environment.
3. Providing guidance and training on risk management processes.
4. Assessing the impact of mitigation strategies and activities.

Accepted Answer

1 and 4 only

Answer

1 and 2 only

Answer

2 and 3 only

Answer

3 and 4 only

Question 6

According to HA guidance, which of the following would be a primary reason for an internal auditor to test the organization's IT contingency plan?

Accepted Answer

To ensure that tests contribute to improvement of the program.

Answer

To ensure that adequate controls exist to prevent any significant business interruptions.

Answer

To identify and address potential security weaknesses within the system.

Answer

To ensure that deficiencies identified by the audit are promptly addressed.

Question 7

According to HA guidance, which of the following statements is true with regard to workstation computers that access company information stored on the network?

Accepted Answer

Cybersecurity issues can be controlled at an enterprise level, making workstation level controls redundant.

Answer

Individual workstation computer controls are not as important as companywide server controls.

Answer

Particular attention should be paid to housing workstations away from environmental hazards.

Answer

With security risks near an all-time high, workstations should not be connected to the company network.

Question 8

Which of the following statements regarding program change management is not correct?

Accepted Answer

The degree of risk associated with a proposed change determines if the change request requires authorization.

Answer

The goal of the change management process is to sustain and improve organizational operations.

Answer

in order to protect the production environment, changes must be managed in a repeatable, defined, and predictable manner.

Answer

All changes should be tested in a non-production environment before migrating to the production environment.

Question 9

If a bank's activities are categorized under such departments as community banking, institutional banking, and agricultural banking, what kind of departmentalization is being utilized?

Accepted Answer

Customer departmentalization.

Answer

Product departmentalization.

Answer

Process departmentalization.

Answer

Functional departmentalization.

Question 10

Which of the following is a characteristic of just-in-time inventory management systems?

Accepted Answer

They rely heavily on high quality materials.

Answer

Users determine the optimal level of safety stocks.

Answer

They are applicable only to large organizations.

Answer

They do not really increase overall economic efficiency because they merely shift inventory levels further up the supply chain.

Free IIA-CIA-Part3 sample questions

Which of the following is a systems software control?

Which of the following is true of matrix organizations?

During her annual performance review, a sales manager admits that she experiences significant stress due to her job but stays with the organization because of the high bonuses she earns. Which of the following best describes her primary motivation to remain in the job?

What must be monitored in order to manage risk of consumer product inventory obsolescence? 1. Inventory balances. 2. Market share forecasts. 3. Sales returns. 4. Sales trends.

According to HA guidance, which of the following would be a primary reason for an internal auditor to test the organization's IT contingency plan?

According to HA guidance, which of the following statements is true with regard to workstation computers that access company information stored on the network?

Which of the following statements regarding program change management is not correct?

If a bank's activities are categorized under such departments as community banking, institutional banking, and agricultural banking, what kind of departmentalization is being utilized?

Which of the following is a characteristic of just-in-time inventory management systems?

10 more free samples are waiting