IIA-CIA-Part3 exam

When executive compensation is based on the organization's financial results, which of the following situations is most likely to arise?A . The organization reports inappropriate estimates and accruals due to poof accounting controls.B . The organization uses an unreliable process forgathering and reporting executive compensation data.C . The organization experiences...

Which of the following should software auditors do when reporting internal audit findings related to enterprisewide resource planning?A . Draft separate audit reports for business and IT management.B . Conned IT audit findings to business issues.C . Include technical details to support IT issues.D . Include an opinion on financial...

A small software development firm designs and produces custom applications for businesses. The application development team consists of employees from multiple departments who all report to a single project manager. Which of the following organizational structures does this situation represent?A . Functional departmentalization.B . Product departmentalizationC . Matrix organization.D ....

Which of the following controls would enable management to receive timely feedback and help mitigate unforeseen risks?A . Measure product performance against an established standard.B . Develop standard methods for performing established activities.C . Require the grouping of activities under a single manager.D . Assign each employee a reasonable workload.View...

An analytical model determined that on Friday and Saturday nights the luxury brands stores should be open for extended hours and with a doubled number of employees present; while on Mondays and Tuesdays costs can be minimized by reducing the number of employees to a minimum and opening only for...

Which of the following IT disaster recovery plans includes a remote site dessgnated for recovery with available space for basic services, such as internet and telecommunications, but does not have servers or infrastructure equipment?A . Frozen siteB . Cold siteC . Warm siteD . Hot siteView AnswerAnswer: B

Which of the following would be the best method to collect information about employees' job satisfaction?A . Online surveys sent randomly to employees.B . Direct onsite observations of employees.C . Town hall meetings with employees.D . Face-to-face interviews with employees.View AnswerAnswer: D

With increased cybersecurity threats, which of the following should management consider to ensure that there is strong security governance in place?A . Inventory of information assetsB . Limited sharing of data files with external parties.C . Vulnerability assessmentD . Clearly defined policiesView AnswerAnswer: C

Which of the following would be a concern related to the authorization controls utilized for a system?A . Users can only see certain screens in the system.B . Users are making frequent password change requests.C . Users Input Incorrect passwords and get denied system accessD . Users are all permitted...

Which of the following data security policies is most likely to be the result of a data privacy law?A . Access to personally identifiable information is limited to those who need It to perform their job.B . Confidential data must be backed up and recoverable within a 24-hour period.C ....