IIA-CIA-Part3 exam

Which of the following disaster recovery plans includes recovery resources available at the site, but they may need to be configured to support the production system?A . Warm site recovery plan.B . Hot site recovery plan.C . Cool site recovery plan.D . Cold site recovery plan.View AnswerAnswer: A

An organization decided to reorganize into a flatter structure. Which of the following changes would be expected with this new structure?A . Lower costs.B . Slower decision making at the senior executive level.C . Limited creative freedom in lower-level managers.D . Senior-level executives more focused on short-term, routine decision makingView...

Which of the following is the best example of IT governance controls?A . Controls that focus on segregation of duties, financial, and change management,B . Personnel policies that define and enforce conditions for staff in sensitive IT areas.C . Standards that support IT policies by more specifically defining required actionsD...

Which of the following statements is true regarding a bring-your-own-device (BYOD) environment?A . There is a greater need for organizations to rely on users to comply with policies and procedures.B . With fewer devices owned by the organization, there is reduced need to maintain documented policies and procedures.C . Incident...

When reviewing application controls using the four-level model, which of the following processes are associated with level 4 of the business process method?A . ActivityB . SubprocessC . Major processD . Mega processView AnswerAnswer: A

Which of the following application controls is the most dependent on the password owner?A . Password selectionB . Password agingC . Password lockoutD . Password rotationView AnswerAnswer: A

Internal auditors want to increase the likelihood of identifying very small control and transaction anomalies in their testing that could potentially be exploited to cause material breaches. Which of the following techniques would best meet this objective?A . Analysis of the full population of existing data.B . Verification of the...

Which of the following controls would be most efficient to protect business data from corruption and errors?A . Controls to ensure data is unable to be accessed without authorization.B . Controls to calculate batch totals to identify an error before approval.C . Controls to encrypt the data so that corruption...

Which of the following is a primary driver behind the creation and prloritteation of new strategic Initiatives established by an organization?A . Risk toleranceB . PerformanceC . Threats and opportunitiesD . GovernanceView AnswerAnswer: C

Which of the following statements is true regarding the term "flexible budgets" as it is used in accounting?A . The term describes budgets that exclude fixed costs.B . Flexible budgets exclude outcome projections, which are hard to determine, and instead rely on the most recent actual outcomes.C . The term...