IIA-CIA-Part3 exam

Which of the following statements. Is most accurate concerning the management and audit of a web server?A . The file transfer protocol (FTP) should always be enabled. B. The simple mail transfer protocol (SMTP) should be operating under the most privileged accounts. C. The number of ports and protocols allowed...

Which of the following is the best example of a compliance risk that Is likely to arise when adopting a bring-your-own-device (BYOD) policy?A . The risk that users try to bypass controls and do not install required software updates. B. The risk that smart devices can be lost or stolen...

Which of the following should be established by management during implementation of big data systems to enable ongoing production monitoring?A . Key performance indicators. B. Reports of software customization. C. Change and patch management. D. Master data managementView AnswerAnswer: A

Which of the following would be classified as IT general controls?A . Error listings. B. Distribution controls. C. Transaction logging. D. Systems development controls.View AnswerAnswer: C

A large retail customer made an offer to buy 10.000 units at a special price of $7 per unit. The manufacturer usually sells each unit for §10, Variable Manufacturing costs are 55 per unit and fixed manufacturing costs are $3 per unit. For the manufacturer to accept the offer, which...

An organization's board of directors is particularly focused on positioning, the organization as a leader in the industry and beating the competition. Which of the following strategies offers the greatest alignment with the board's focus?A . Divesting product lines expected to have negative profitability. B. Increasing the diversity of strategic...

According to Maslow's hierarchy of needs theory, which of the following best describes a strategy where a manager offers an assignment to a subordinate specifically to support his professional growth and future advancement?A . Esteem by colleagues. B. Self-fulfillment C. Series of belonging in the organization D. Job securityView AnswerAnswer:...

Which of the following network types should an organization choose if it wants to allow access only to its own personnel?A . An extranet B. A local area network C. An Intranet D. The internetView AnswerAnswer: B

Which of the following should software auditors do when reporting internal audit findings related to enterprisewide resource planning?A . Draft separate audit reports for business and IT management. B. Conned IT audit findings to business issues. C. Include technical details to support IT issues. D. Include an opinion on financial...

Which of the following is most influenced by a retained earnings policy?A . Cash. B. Dividends. C. Gross margin. D. Net income.View AnswerAnswer: D