2023 Updated Verified Pass IIA-CIA-Part3-3P Study Guides & Best Courses [Q11-Q28]

Rate this post

2023 Updated Verified Pass IIA-CIA-Part3-3P Study Guides & Best Courses

Ultimate Guide to the IIA-CIA-Part3-3P – Latest Edition Available Now

NO.11 According to IIA guidance on IT auditing, which of the following would not be an area examined by the internal audit activity?

Access system security.

Policy development.

Change management.

Operations processes.

NO.12 According to IIA guidance, which of the following best describes the activities that occur during the conversion phase of an IT project?

Conversion of user requirements into system specifications

Conversion of user requirements into program codes

Conversion of test data into production data

Conversion of data from the old system into the new system

NO.13 Multinational organizations generally spend more time and effort to identify and evaluate:

Internal strengths and weaknesses.

Break-even points.

External trends and events.

Internal risk factors.

NO.14 The cost to enter a foreign market would be highest in which of the following methods of global expansion?

Joint ventures.

Licensing.

Exporting.

Overseas production.

NO.15 According to IIA guidance, which of the following statements is true with regard to workstation computers that access company information stored on the network?

individual workstation computer controls are not as important as companywide server controls.

Particular attention should be paid to housing workstations away from environmental hazards.

Cybersecurity issues can be controlled at an enterprise level making workstation level controls redundant

With security risks near an all-time high workstations should not be connected to the company network

NO.16 A software that translates hypertext markup language (HTML) documents and allows a user to view a remote web page is called:

A transmission control protocol/Internet protocol (TCP/IP).

An operating system.

A web browser.

A web server.

NO.17 According to the waterfall cycle approach to systems development, which of the following sequence of events is correct?

Program design, system requirements, software design, analysis, coding, testing, operations.

System requirements, software design, analysis, program design, testing, coding, operations.

System requirements, software design, analysis, program design, coding, testing, operations.

System requirements, analysis, coding, software design, program design, testing, operations.

NO.18 Which of the following local area network physical layouts is subject to the greatest risk of failure if one device fails?

Star network.

Bus network.

Token ring network.

Mesh network.

NO.19 The economic order quantity for inventory is higher for an organization that has:

Lower annual unit sales.

Higher fixed inventory ordering costs.

Higher annual carrying costs as a percentage of inventory value.

A higher purchase price per unit of inventory.

NO.20 Which of the following is a characteristic of just-in-time inventory management systems?

Users determine the optimal level of safety stocks.

They are applicable only to large organizations.

They do not really increase overall economic efficiency because they merely shift inventory levels further up the supply chain.

They rely heavily on high quality materials.

NO.21 A bond that matures after one year has a face value of $250,000 and a coupon of $30,000. If the market price of the bond is $265,000, which of the following would be the market interest rate?

Less than 12 percent.

12 percent.

Between 12.01 percent and 12.50 percent.

More than 12.50 percent.

NO.22 The board has requested that the internal audit activity be involved in all phases of the organization’s outsourcing of its network management. During which of the following stages is the internal auditor most likely to verify that the organization’s right-to-audit clause is drafted effectively?

Implementation and transition phase.

Monitoring and reporting phase

Decision-making and business-case phase.

Tendering and contracting phase.

NO.23 Which of the following is a likely result of outsourcing?

Decreased focus on costs.

Increased importance of market strategy.

Increased dependence on suppliers.

Decreased sensitivity to government regulation.

NO.24 When is an organic organizational structure likely to be more successful than a mechanistic organizational structure?

When a manufacturing organization has stable demand for its products.

When an organization is subjected to strong political and social pressures

When a manufacturer has reliable resources and suppliers

When an organization is infrequently affected by technological advances

NO.25 Which of the following is not a method for implementing a new application system?

Direct cutover.

Parallel.

Pilot.

Test.

NO.26 Which of the following professional organizations sets standards for quality and environmental audits?

The Committee of Sponsoring Organizations of the Treadway Commission.

The Board of Environmental, Health, and Safety Auditor Certifications.

The International Organization of Supreme Audit Institutions.

The International Standards Organization.

NO.27 An organization’s headquarters is centrally located and the organization runs numerous computer applications in multiple sites. Which of the following would be the most appropriate approach for conducting an audit of the mainframe computer?

Conduct an individual audit of the mainframe general controls and separate application control audits of the individual applications in a phased manner

Conduct a single consolidated audit of both the mainframe general controls and the application controls for all of the applications that use the mainframe

Conduct individual audits of each application and include in each audit the general controls of the mainframe relevant to the individual application

Conduct a series of location-based audits that cover both the general and application IT controls an systems across the location

NO.28 Which of the following statements is correct regarding risk analysis?

The extent to which management judgments are required in an area could serve as a risk factor in assisting the auditor in making a comparative risk analysis.

The highest risk assessment should always be assigned to the area with the largest potential loss.

The highest risk assessment should always be assigned to the area with the highest probability of occurrence.

Risk analysis must be reduced to quantitative terms in order to provide meaningful comparisons across an organization.

Loading …