Internal Audit Function IIA-CIA-Part3 Dumps (V17.03) for Guaranteed Success: IIA-CIA-Part3 Free Dumps (Part 2, Q41-Q80) Are Available

1. Which of the following can be viewed as a potential benefit of an enterprisewide resource planning system?

2. Which of the following items best describes the strategy of outsourcing?

3. Internal auditors want to increase the likelihood of identifying very small control and transaction anomalies in their testing that could potentially be exploited to cause material breaches.

Which of the following techniques would best meet this objective?

4. Which of the following situations best illustrates a "false positive" in the performance of a spam filter?

5. Which of the following is the best example of IT governance controls?

6. Which of the following best describes a man-in-the-middle cyber-attack?

7. Which of the following purchasing scenarios would gain the greatest benefit from implementing electronic cate interchange?

8. An internal auditor is assessing the risks related to an organization's mobile device policy. She notes that the organization allows third parties (vendors and visitors) to use outside smart devices to access its proprietary networks and systems.

Which of the following types of smart device risks should the internal Auditor be most concerned about?

9. Which of the following capital budgeting techniques considers the tune value of money?

10. With increased cybersecurity threats, which of the following should management consider to ensure that there is strong security governance in place?

11. A multinational organization allows its employees to access work email via personal smart devices. However, users are required to consent to the installation of mobile device management (MDM) software that will remotely wipe data in case of theft or other incidents.

Which of the following should the organization ensure in exchange for the employees' consent?

12. If an organization has a high amount of working capital compared to the industry average, which of the following is most likely true?

13. Which of the following best describes a cyberattacK in which an organization faces a denial-of-service threat created through malicious data encryption?

14. Which of the following should be established by management during implementation of big data systems to enable ongoing production monitoring?

15. Which of the following bring-your-own-device (BYOD) practices is likely to increase the risk of Infringement on local regulations, such as copyright or privacy laws?

16. Which of the following is most influenced by a retained earnings policy?

17. Which of the following represents a basis for consolidation under the International Financial Reporting Standards?

18. Which of the following is true of matrix organizations?

19. Which of the following disaster recovery plans includes recovery resources available at the site, but they may need to be configured to support the production system?

20. Which of following best demonstrates the application of the cost principle?

21. Which of the following statements is true regarding the term "flexible budgets" as it is used in accounting?

22. At what stage of project integration management would a project manager and project management team typically coordinate the various technical and organizational interfaces that exist in the project?

23. Which of the following is the best example of a compliance risk that Is likely to arise when adopting a bring-your-own-device (BYOD) policy?

24. When would a contract be dosed out?

25. Which of the following biometric access controls uses the most unique human recognition characteristic?

26. A small software development firm designs and produces custom applications for businesses. The application development team consists of employees from multiple departments who all report to a single project manager.

Which of the following organizational structures does this situation represent?

27. When reviewing application controls using the four-level model, which of the following processes are associated with level 4 of the business process method?

28. According to IIA guidance, which of the following statements is true regarding penetration testing?

29. For which of the following scenarios would the most recent backup of the human resources database be the best source of information to use?

30. Which of the following application controls is the most dependent on the password owner?

31. Management is designing its disaster recovery plan. In the event that there is significant damage to the organization's IT systems this plan should enable the organization to resume operations at a recovery site after some configuration and data restoration.

Which of the following is the ideal solution for management in this scenario?

32. According to I1A guidance on IT. which of the following activities regarding information security Is most likely to be the responsibility of line management as opposed to executive management, internal auditors, or the board?

33. The head of the research arid development department at a manufacturing organization believes that his team lacks expertise in some areas, and he decides to hire more experienced researchers to assist in the development of a new product.

Which of the following variances are likely to occur as the result of this decision?

1. Favorable labor efficiency variance.

2. Adverse labor rate variance.

3. Adverse labor efficiency variance.

4. Favorable labor rate variance.

34. An internal auditor was assigned to test for ghost employees using data analytics. The auditor extracted employee data from human resources and payroll. Using spreadsheet functions, the auditor matched data sets by name and assumed that employees who were not present in each data set should be investigated further. However, the results seemed erroneous, as very few employees matched across all data sets.

Which of the following data analytics steps has the auditor most likely omitted?

35. A financial institution receives frequent and varied email requests from customers for funds to be wired out of their accounts.

Which verification activity would best help the institution avoid falling victim to phishing?

36. Which of the following authentication device credentials is the most difficult to revoke when an employee s access rights need to be removed?

37. An organization buys equity securities for trading purposes and sells them within a short time period.

Which of the following is the correct way to value and report those securities at a financial statement date?

38. An organization created a formalized plan for a large project.

Which of the following should be the first step in the project management plan?

39. An organization's board of directors is particularly focused on positioning, the organization as a leader in the industry and beating the competition.

Which of the following strategies offers the greatest alignment with the board's focus?

40. An intruder posing as the organization's CEO sent an email and tricked payroll staff into providing employees' private tax information.

What type of attack was perpetrated?