IIA-CIA-PART3 Exam Questions

Which of the following organization structures would most likely be able to cope with rapid changes and uncertainties?

An organization had a gross profit margin of 40 percent in year one and in year two. The net profit margin was 18 percent in year one and 13 percent in year two. Which of the follo...

Which of the following statements is true regarding user developed applications (UDAs) and traditional IT applications?

A multinational organization allows its employees to access work email via personal smart devices. However, users are required to consent to the installation of mobile device manag...

An internal auditor considers the financial statement of an organization as part of a financial assurance engagement. The auditor expresses the organization's electricity and depre...

Which of the following is a cybersecurity monitoring activity intended to deter disruptive codes from being installed on an organizations systems?

During disaster recovery planning, the organization established a recovery point objective. Which of the following best describes this concept?

According to Herzberg's Two-Factor Theory of Motivation, which of the following is a factor mentioned most often by satisfied employees?

Which of the following IT professionals is responsible for providing maintenance to switches and routers to keep IT systems running as intended?

A company that supplies medications to large hospitals relies heavily on subcontractors to replenish any shortages within 24 hours. Where should internal auditors look for evidence...

Which of the following is an example of a contingent liability that a company should record?

Which of the following networks is suitable for an organization that has operations In multiple cities and countries?

An organization has decided to allow its managers to use their own smart phones at work. With this change, which of the following is most important to Include In the IT department'...

What security feature would Identity a legitimate employee using her own smart device to gam access to an application run by the organization?

Which of the following sites would an Internet service provider most likely use to restore operations

Which of the following information security controls has the primary function of preventing unauthorized outside users from accessing an organization's data through the organizatio...

The budgeted cost of work performed is a metric best used to measure which project management activity?

According to UA guidance on IT, at which of the following stages of the project life cycle would the project manager most likely address the need to coordinate project resources?

Which of the following best describes a cyberattacK in which an organization faces a denial-of-service threat created through malicious data encryption?

Which of the following statements Is true regarding the use of centralized authority to govern an organization?

Which of the following physical security controls is able to serve as both a detective and preventive control?

When auditing databases, which of the following risks would an Internal auditor keep In mind In relation to database administrators?

Which of the following controls would enable management to receive timely feedback and help mitigate unforeseen risks?

A new clerk in the managerial accounting department applied the high-low method and computed the difference between the high and low levels of maintenance costs. Which type of main...

An organization with a stable rating, as assessed by International rating agencies, has issued a bond not backed by assets or collateral. Payments of the interests and the principa...

Which of the following is an indicator of liquidity that is more dependable than working capital?

Which of the following Issues would be a major concern for internal auditors when using a free software to analyze a third-party vendor's big data?

Which of the following attributes of data analytics relates to the growing number of sources from which data is being generated?

Which of the following statements is true concerning the basic accounting treatment of a partnership?

According to IIA guidance, which of the following is an IT project success factor?

An organization buys equity securities for trading purposes and sells them within a short time period. Which of the following is the correct way to value and report those securitie...

An IT auditor is evaluating IT controls of a newly purchased information system. The auditor discovers that logging is not configured al database and application levels. Operationa...

An organization contracted a third-party service provider to plan, design, and build a new facility. Senior management would like to transfer all of the risk to the builder. Which...

Which of the following statements distinguishes a router from a typical switch?

According to Maslow's hierarchy of needs theory, which of the following would likely have the most impact on retaining staff, if their lower-level needs are already met?

According to I1A guidance on IT. which of the following activities regarding information security Is most likely to be the responsibility of line management as opposed to executive...

Which of the following best describes the use of predictive analytics?

Which of the following common quantitative techniques used in capital budgeting is best associated with the use of a table that describes the present value of an annuity?

Which of the following is a characteristic of big data?

On the last day of the year, a total cost of S 150.000 was incurred in indirect labor related to one of the key products an organization makes. How should the expense be reported o...

An intruder posing as the organization's CEO sent an email and tricked payroll staff into providing employees' private tax information. What type of attack was perpetrated?

An organization has an immediate need for servers, but no time to complete capital acquisitions. Which of the following cloud services would assist with this situation?

Which of the following would be the strongest control to prevent unauthorized wireless network access?

A chief audit executive wants to implement an enterprisewide resource planning software. Which of the following internal audit assessments could provide overall assurance on the li...

Which of the following is an example of two-factor authentication?

The internal audit activity has identified accounting errors that resulted in the organization overstating its net income for the fiscal year. Which of the following is the most li...

Which of the following is considered a physical security control?

Which of the following business practices promotes a culture of high performance?

An internal auditor has requested the organizational chart in order to evaluate the control environment of an organization. Which of the following is a disadvantage of using the or...

A financial institution receives frequent and varied email requests from customers for funds to be wired out of their accounts. Which verification activity would best help the inst...