[2023] Valid IIA-CIA-Part3-3P test answers & IIA IIA-CIA-Part3-3P exam pdf
Verified IIA-CIA-Part3-3P dumps Q&As - Pass Guarantee or Full Refund
NEW QUESTION 237
The internal audit activity completed an initial risk analysis of the organization's data storage center and found several areas of concern. Which of the following is the most appropriate next step?
- A. Identification of context.
- B. Risk identification.
- C. Risk response.
- D. Risk assessment.
Answer: D
NEW QUESTION 238
A large hospital has an existing contract with a vendor in another country to provide software support and maintenance of the hospital's patient records information system. From the hospital management's perspective, which of the following controls would be most effective to address privacy risks related to this outsourcing arrangement?
- A. Implement mandatory privacy training for management to help with identifying privacy risks when outsourcing services
- B. Conduct periodic reviews of the privacy policy to ensure that the existing policy meets current legislation requirements in both regions.
- C. Develop an incident monitoring and response plan to track breaches from internal and external sources
- D. Include a "right to audit" clause in the contract and impose detailed security obligations on the outsourced vendor
Answer: D
NEW QUESTION 239
Which of the following is false with regard to Internet connection firewalls?
- A. Firewalls monitor attacks from the Internet.
- B. Firewalls provide network administrators tools to retaliate against hackers.
- C. Firewalls can protect against computer viruses.
- D. Firewalls may be software-based or hardware-based.
Answer: C
NEW QUESTION 240
Which of the following data security policies is most likely to be the result of a data privacy law?
- A. Access to personally identifiable information is limited to those who need it to perform their job.
- B. Updates to systems containing sensitive data must be approved before being moved to production.
- C. A record of employees with access to insider information must be maintained and those employees may not trade company stock during blackout periods
- D. Confidential data must be backed up and recoverable within a 24-hour period.
Answer: A
NEW QUESTION 241
Which of me following storage options would give the organization the best chance of recovering data?
- A. Encrypted reports on usage and database structure changes are stored on a cloud-based. secured database that is readily accessible
- B. Encrypted copies of the data are stored in a separate secure location a few hours away while the encryption keys are stored at the organization and are readily available
- C. Encrypted physical copies of the data are stored separately from their encryption keys and both are held in secure locations a few hours away from me organization
- D. Encrypted physical copies of the data and their encryption keys are stored together at the organization and are readily available upon request
Answer: B
NEW QUESTION 242
Which of the following is improved by the use of smart devices?
- A. Secure authentication
- B. Portability
- C. Privacy
- D. Version control
Answer: B
NEW QUESTION 243
An organization's network administrator received an email that appeared to come from the organization's external IT service provider requesting his credentials to perform an update of a server operating system If the IT service provider did not send the email, which of the following best describes the likely purpose of the email?
- A. An attempt to launch malware
- B. An attempt at penetration testing
- C. An attempt to patch the server
- D. An attempt at phishing.
Answer: D
NEW QUESTION 244
Which stage in the industry life cycle is characterized by many different product variations?
- A. Introduction.
- B. Decline.
- C. Maturity.
- D. Growth.
Answer: A
NEW QUESTION 245
Which of the following techniques is the most relevant when an internal auditor conducts a valuation of an organization's physical assets?
- A. Vouching.
- B. Inspection.
- C. Observation.
- D. Original cost.
Answer: B
NEW QUESTION 246
Which of the following is an element of effective negotiating?
- A. Ensuring that the other party has a personal stake in the agreement.
- B. Focusing on interests rather than on obtaining a winning position.
- C. Basing the agreement on negotiating power and positioning leverage.
- D. Considering a few select choices during the settlement phase.
Answer: B
NEW QUESTION 247
Which of the following is an example of a key systems development control typically found in the in-house development of an application system?
- A. Business users' requirements are documented, and their achievement is monitored
- B. Logical access controls monitor application usage and generate audit trails.
- C. A record is maintained to track the process of data from input, to output, to storage
- D. The development process is designed to prevent, detect and correct errors that may occur
Answer: A
NEW QUESTION 248
Which of the following recognized competitive strategies focuses on gaining efficiencies?
- A. Cost leadership
- B. Innovation
- C. Differentiation
- D. Focus
Answer: A
NEW QUESTION 249
Which of the following describes the most appropriate set of tests for auditing a workstation's logical access controls?
- A. Review the passwords of those who attempted unsuccessfully to access the workstation and the log of their activity.
- B. Review the list of people with access badges to the room containing the workstation and a log of those who accessed the room.
- C. Review the list of people who attempted to access the workstation and failed, as well as error messages.
- D. Review the password length, frequency of change, and list of users for the workstation's login process.
Answer: D
NEW QUESTION 250
An internal auditor performed a review of IT outsourcing and found that the service provider was failing to meet the terms of the service level agreement. Which of the following approaches is most appropriate to address this concern?
- A. The organization should work with the service provider to review the current agreement and
- B. The organization should proactively monitor the performance of the service provider, escalate concerns, and use penalty clauses in the contract where necessary.
- C. The organization should ensure that there is a clear management communication strategy and path for evaluating and reporting on all outsourced services concerns.
- D. The organization should review the skill requirements and ensure that the service provider is maintaining sufficient expertise and retaining skilled resources.
Answer: B
Explanation:
expectations relating to objectives, processes, and overall performance.
NEW QUESTION 251
According to the International Professional Practices Framework, which of the following statements is true regarding a corporate social responsibility (CSR) program?
1) Every employee generally has a responsibility for ensuring the success of CSR objectives.
2) The board has overall responsibility for the effectiveness of internal control processes associated with CSR.
3) Public reporting on the CSR governance process is expected.
4) Organizations generally have flexibility regarding what is included in a CSR program.
- A. 1, 3, and 4 only
- B. 1, 2, and 4 only
- C. 2, 3, and 4 only
- D. 1, 2, and 3 only
Answer: B
NEW QUESTION 252
The activity that involves a trial run of a product in a typical segment of the market before proceeding to a national launch is referred to as:
- A. Experimentation
- B. Segmentation
- C. Test marketing
- D. Positioning
Answer: C
NEW QUESTION 253
An organization has a complex systems infrastructure consisting of multiple internally developed, off the shelf, and purchased but significantly customized applications. Some of these applications share databases or process data that is used by another stand-alone application, and interfaces have been written to move data between these applications as needed through batch processing Which of the following situations presents the greatest risk exposure given this environment?
- A. Documentation of each system and its interactions, interfaces, and dependencies with other systems and databases is not gathered and maintained.
- B. The implementation of a major update for a key application is delayed until any potential interdependencies are identified and analyzed.
- C. The job scheduling tool frequently malfunctions, causing scheduled jobs not to run. An error message is sent to IT personnel when a job fails.
- D. Batch processing jobs include key financial data that is not posted to the accounting system until the next day. preventing real-time queries.
Answer: A
NEW QUESTION 254
The head of the research and development department at a manufacturing organization believes that his team lacks expertise in some areas, and he decides to hire more experienced researchers to assist in the development of a new product. Which of the following variances are likely to occur as the result of this decision?
1) Favorable labor efficiency variance.
2) Adverse labor rate variance.
3) Adverse labor efficiency variance.
4) Favorable labor rate variance.
- A. 2 and 3.
- B. 1 and 4.
- C. 1 and 2.
- D. 3 and 4.
Answer: C
NEW QUESTION 255
Which of the following risks is best addressed by encryption?
- A. Access risk
- B. Software risk
- C. Privacy risk
- D. Information integrity risk.
Answer: C
NEW QUESTION 256
According to the COSO enterprise risk management (ERM) framework, which of the following is not a typical responsibility of the chief risk officer?
- A. Providing the board with an independent, objective risk perspective on financial reporting.
- B. Defining ERM roles and responsibilities.
- C. Establishing risk category definitions and a common risk language for likelihood and impact measures.
- D. Guiding integration of ERM with other management activities.
Answer: A
NEW QUESTION 257
Which of the following stages of contracting focuses on aligning the markets with objectives of the organization?
- A. Bidding stage
- B. Initiation stage
- C. Negotiation stage
- D. Development stage
Answer: C
NEW QUESTION 258
......
IIA-CIA-Part3-3P Exam Questions – Valid IIA-CIA-Part3-3P Dumps Pdf: https://braindumps.exam4tests.com/IIA-CIA-Part3-3P-pdf-braindumps.html