Right IIA-CIA-Part3 Dumps – Best Way To Pass CIA Exam Part Three: Business Knowledge for Internal Auditing Exam

1. Which of the following best describes the purpose of fixed manufacturing costs?

2. Which of the following is a characteristic of using a hierarchical control structure?

3. An internal auditor is reviewing key phases of a software development project.

Which of the following would; the auditor most likely use to measure the project team's performance related to how project tasks are completed?

4. According to 11A guidance on IT, which of the following spreadsheets is most likely to be considered a high-risk user-developed application?

5. Which of the following scenarios indicates an effective use of financial leverage?

6. Which of the following is the most appropriate beginning step of a work program for an assurance engagement involving smart devices?

7. Which of the following situations best illustrates a "false positive" in the performance of a spam filter?

8. Which of the following parties is most likely to be responsible for maintaining the infrastructure required to prevent the failure of a real-time backup of a database?

9. Which of the following security controls would provide the most efficient and effective authentication for customers to access these online shopping account?

10. An organization decided to outsource its human resources function. As part of its process migration, the organization is implementing controls over sensitive employee data.

What would be the most appropriate directive control in this area?

11. An organization is considering integration of governance, risk., and compliance (GRC) activities into a centralized technology-based resource.

In implementing this GRC resource, which of the following is a key enterprise governance concern that should be fulfilled by the final product?

12. At one organization, the specific terms of a contract require both the promisor and promisee to sign the contract in the presence of an independent witness.

What is the primary role to the witness to these signatures?

13. An internal auditor is assigned to perform data analytics.

Which of the following is the next step the auditor should undertake after she has ascertained the value expected from the review?

14. Which of the following actions is likely to reduce the risk of violating transfer pricing regulations?

15. Which of the following statements is true regarding user-developed applications (UDAs)?

16. Which of the following represents a basis for consolidation under the International Financial Reporting Standards?

17. Which of the following scenarios best illustrates a spear phishing attack?

18. An organization discovered fraudulent activity involving the employee time-tracking system. One employee regularly docked in and clocked out her co-worker friends on their days off, inflating their reported work hours and increasing their wages.

Which of the following physical authentication devices would be most effective at disabling this fraudulent scheme?

19. Which of the following best describes owner's equity?

20. Which of the following describes a mechanistic organizational structure?

21. When determining the level of physical controls required for a workstation, which of the following factors should be considered?

22. During her annual performance review, a sales manager admits that she experiences significant stress due to her job but stays with the organization because of the high bonuses she earns.

Which of the following best describes her primary motivation to remain in the job?

23. During an audit of the payroll system, the internal auditor identifies and documents the following condition:

"Once a user is logged into the system, the user has access to all functionality within the system."

What is the most likely root cause for tins issue?

24. Which of the following attributes of data is most likely to be compromised in an organization with a weak data governance culture?

25. Which of the following lists best describes the classification of manufacturing costs?

26. Which of the following is an effective preventive control for data center security?

27. According to IIA guidance on IT, which of the following strategies would provide the most effective access control over an automated point-of-sale system?

28. Which of the following data security policies is most likely to be the result of a data privacy law?

29. Which of the following techniques would best detect an inventory fraud scheme?

30. Which of the following is most influenced by a retained earnings policy?

31. A newly appointed board member received an email that appeared to be from the company's CEO.

The email stated:

“Good morning. As you remember, the closure of projects is our top priority. Kindly organize prompt payment of the attached invoice for our new solar energy partners.” The board member quickly replied to the email and asked under which project the expense should be accounted. Only then did he realize that the sender 's mail domain was different from the company's.

Which of the following cybersecurity risks nearly occurred in the situation described?

32. Management has decided to change the organizational structure from one that was previously decentralized to one that is now highly centralized.

As such: which of the following would be a characteristic of the now highly centralized organization?

33. Which of the following types of accounts must be closed at the end of the period?

34. Which of the following would most likely serve as a foundation for individual operational goats?

35. Unavailability of critical services.

36. An analytical model determined that on Friday and Saturday nights the luxury brands stores should be open for extended hours and with a doubled number of employees present; while on Mondays and Tuesdays costs can be minimized by reducing the number of employees to a minimum and opening only for evening hours

Which of the following best categorizes the analytical model applied?

37. Which of the following biometric access controls uses the most unique human recognition characteristic?

38. An organization has an agreement with a third-party vendor to have a fully operational facility, duplicate of the original site and configured to the organization's needs, in order to quickly recover operational capability in the event of a disaster, Which of the following best describes this approach to disaster recovery planning?

39. Which of the following actions would senior management need to consider as part of new IT guidelines regarding the organization's cybersecurity policies?

40. Employees at an events organization use a particular technique to solve problems and improve processes. The technique consists of five steps: define, measure, analyze,

improve, and control.

Which of the following best describes this approach?

41. A manufacturer ss deciding whether to sell or process materials further.

Which of the following costs would be relevant to this decision?

42. Which of the following best explains the matching principle?

43. An attacker, posing as a bank representative, convinced an employee to release certain, financial information that ultimately resulted in fraud.

Which of the following best describes this cybersecurity risk?

44. An organization decided to reorganize into a flatter structure.

Which of the following changes would be expected with this new structure?

45. An internal auditor identified a database administrator with an incompatible dual role.

Which of the following duties should not be performed by the identified administrator?

46. Which of the following should software auditors do when reporting internal audit findings related to enterprise wide resource planning?

47. After purchasing shoes from an online retailer, a customer continued to receive additional unsolicited offers from the retailer and other retailers who offer similar products.

Which of the following is the most likely control weakness demonstrated by the seller?

48. Which of the following represents an inventory costing technique that can be manipulated by management to boost net income by selling units purchased at a low cost?

49. Which of the following is an established systems development methodology?

50. An organization's technician was granted a role that enables him to prioritize projects throughout the organization.

Which type of authority will the technician most likely be exercising?

51. When reviewing application controls using the four-level model, which of the following processes are associated with level 4 of the business process method?

52. Which of the following security controls focuses most on prevention of unauthorized access to the power plant?

53. Which of the following best describes a transformational leader, as opposed to a transactional leader?

54. Which of the following concepts of managerial accounting is focused on achieving a point of low or no inventory?

55. Which of the following would an organization execute to effectively mitigate and manage risks created by a crisis or event?

56. An organization has a declining inventory turnover but an increasing gross margin rate.

Which of the following statements can best explain this situation?

57. A company records income from an investment in common stock when it does which of the following?

58. Which of the following best describes a detective control designed to protect an organization from cyberthreats and attacks?

59. Which of the following disaster recovery plans includes recovery resources available at the site, but they may need to be configured to support the production system?

60. Which of the following actions should an internal auditor take to clean the data obtained for analytics purposes?

61. Which of the following controls would be most efficient to protect business data from corruption and errors?

62. Several organizations have developed a strategy to open co-owned shopping malls.

What would be the primary purpose of this strategy?

63. Which of the following best describes the primary objective of cybersecurity?

64. An organization that relies heavily on IT wants to contain the impact of potential business disruption to a period of approximately four to seven days.

Which of the following

business recovery strategies would most efficiently meet this organization's needs?

65. Which of the following capital budgeting techniques considers the tune value of money?

66. Which of the following should be established by management during implementation of big data systems to enable ongoing production monitoring?

67. An internal auditor is reviewing results from software development integration testing.

What is the purpose of integration testing?

68. Which of the following contract concepts is typically given in exchange for the execution of a promise?

69. Which of the following accounting methods is an investor organization likely to use when buying 40 percent of the stock of another organization?

70. An organization created a formalized plan for a large project.

Which of the following should be the first step in the project management plan?

71. A restaurant decided to expand its business to include delivery services, rather than relying on third-party food delivery services.

Which of the following best describes the restaurants strategy?

72. For which of the following scenarios would the most recent backup of the human resources database be the best source of information to use?

73. According to Herzberg's Two-Factor Theory of Motivation, which of the following is a factor mentioned most often by satisfied employees?

74. Which of the following is a characteristic of big data?

75. Which of the following activities best illustrates a user's authentication control?

76. In light of increasing emission taxes in the European Union, a car manufacturer introduced a new middle-class hybrid vehicle specifically for the European market only.

Which of the following competitive strategies has the manufacturer used?

77. A company produces water buckets with the following costs per bucket:

Direct labor = 82

Direct material = $5

Fixed manufacturing = 83.50

Variable manufacturing = 82.50

The water buckets are usually sold for $15. However, the company received a special order for 50.000 water buckets at 311 each.

Assuming there is adequate manufacturing capacity and ail other variables are constant , what is the relevant cost per unit to consider when deciding whether to accept this special order at the reduced price?

78. Which of the following best describes depreciation?

79. Which of the following is a sound network configuration practice to enhance information security?

80. Which of the following describes a third-party network that connects an organization specifically with its trading partners?