IIA Internal Audit Function - IIA-CIA-Part3 Exam Practice Test

A. Defined roles and responsibilities.

B. A performance measurement system.

C. The right to audit.

D. Intellectual property rights.

A. Users are making frequent password change requests.

B. Users can only see certain screens in the system.

C. Users are all permitted uniform access to the system.

D. Users Input Incorrect passwords and get denied system access

A. The company ' s code of ethics.

B. The third-party management risk register.

C. The signed service-level agreement.

D. The subcontractors ' annual satisfaction survey.

A. $300,000

B. $540,000

C. $170,000

D. $280,000

A. That employee consent includes appropriate waivers regarding potential breaches to their privacy.

B. That monitoring of employees ' online activities is conducted in a covert way to avoid upsetting them.

C. That personal data on the device cannot be accessed and deleted by system administrators.

D. That those employees who do not consent to MDM software cannot have an email account.

A. Internal auditors work with the independent consultant and the CAE forms the opinion

B. The engagement is wholly performed by the independent consultant and the CAE forms the opinion

C. Internal auditors carry out the entire engagement and the independent consultant forms the opinion

D. The independent consultant accomplishes the entire engagement and forms the opinion

A. Applying a weak password for access to a mobile device.

B. JoIIbreaking a locked smart device

C. Updating operating software in a haphazard manner,

D. Not installing anti-malware software

A. Better sales activity.

B. Worse inventory usage.

C. Worse sales activity.

D. Better inventory usage.

A. Follow-up activities must be performed on an ongoing basis, such as quarterly, rather than being scheduled as specific assignments in the internal audit plan

B. The primary purpose of the CAE's follow-up activities is to verify whether the audit issues raised in the audit report are valid

C. Where management believes certain action plans are no longer necessary, the CAE must resolve the matter with the board and if the matter remains unresolved, communicate to senior management

D. The CAE may plan follow-up activities on a selective basis, depending on risk significance, to verify whether management action plans were completed

A. Perform a risk assessment to determine the likelihood that risk could occur due to insufficient patch application.

B. Validate that only authorized personnel can migrate changes into the production environment.

C. Publish a schedule that lists all approved changes and planned implementation dates.

D. Update change management processes on a consistent basis to keep up with changing technologies.

A. Keeping an offsite backup of the organization ' s critical data

B. Establishing a physical security policy and promoting it throughout the organization

C. Providing fire detection and suppression equipment

D. Performing business continuity and disaster recovery planning

A. It provides a better alignment with revenue.

B. It is the preferred method according to The IIA.

C. It states receivables at net realizable value on the balance sheet.

D. It is useful when losses are considered insignificant.

A. Video surveillance.

B. Card key readers.

C. Biometric devices

D. Authentication logs.