Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the IIA CIA IIA-CIA-Part3 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam IIA-CIA-Part3 Premium Access

View all detail and faqs for the IIA-CIA-Part3 exam

Go to Exam

782 Students Passed

94% Average Score

90% Same Questions

Viewing page 10 out of 16 pages

Viewing questions 136-150 out of questions

Questions # 136:

Which of the following statements is most accurate concerning the management and audit of a web server?

Options:

The file transfer protocol (FTP) should always be enabled

The simple mail transfer protocol (SMTP) should be operating under the most privileged accounts

The number of ports and protocols allowed to access the web server should be maximized

Secure protocols for confidential pages should be used instead of clear-text protocols such as HTTP or FTP

Questions # 137:

During a payroll audit, the internal auditor is assessing the security of the local area network of the payroll department computers. Which of the following IT controls should the auditor test?

Options:

IT application-based controls

IT systems development controls

Environmental controls

IT governance controls

Questions # 138:

What is the primary purpose of an integrity control?

Options:

To ensure data processing is complete, accurate, and authorized

To ensure data being processed remains consistent and intact

To monitor the effectiveness of other controls

To ensure the output aligns with the intended result

Questions # 139:

Which of the following statements is true regarding data backup?

Options:

System backups should always be performed in real-time.

Backups should be stored in a secured location onsite for easy access.

The tape rotation schedule affects how long data is retained.

Backup media should be restored only in case of a hardware or software failure.

Questions # 140:

Which of the following situations best applies to an organization that uses a project, rather than a process, to accomplish its business activities?

Options:

A clothing company designs, makes, and sells a new item

A commercial construction company is hired to build a warehouse

A city department sets up a new firefighter training program

A manufacturing organization acquires component parts from a contracted vendor

Questions # 141:

According to IIA guidance, which of the following are typical physical and environmental IT controls?

Options:

Locating servers in locked rooms with restricted admission.

Applying encryption where confidentiality is a stated requirement.

Allocating and controlling access rights according to the organization's stated policy.

Ensuring a tightly controlled process for applying all changes and patches to software, systems, network components, and data.

Questions # 142:

Which of the following is an advantage of a decentralized organizational structure, as opposed to a centralized structure?

Options:

Greater cost-effectiveness

Increased economies of scale

Larger talent pool

Strong internal controls

Questions # 143:

A retail organization mistakenly did not include $10,000 of inventory in the physical count at the end of the year. What was the impact to the organization’s financial statements?

Options:

Cost of sales and net income are understated

Cost of sales and net income are overstated

Cost of sales is understated and net income is overstated

Cost of sales is overstated and net income is understated

Questions # 144:

Which of the following authentication device credentials is the most difficult to revoke when an employee's access rights need to be removed?

Options:

A traditional key lock.

A biometric device.

A card-key system.

A proximity device.

Questions # 145:

Which type of bond sells at a discount from face value, then increases in value annually until it reaches maturity and provides the owner with the total payoff?

Options:

High-yield bonds

Commodity-backed bonds

Zero-coupon bonds

Junk bonds

Questions # 146:

Which of the following IT-related activities is most commonly performed by the second line of defense?

Options:

Block unauthorized traffic.

Encrypt data.

Review disaster recovery test results.

Provide an independent assessment of IT security.

Questions # 147:

A large retail customer made an offer to buy 10,000 units at a special price of $7 per unit. The manufacturer usually sells each unit for $10. Variable manufacturing costs are $5 per unit and fixed manufacturing costs are $3 per unit. For the manufacturer to accept the offer, which of the following assumptions needs to be true?