Free IIA-CIA-Part3 Exam Dumps

Question 21

- (Exam Topic 2)
An organization's headquarters is centrally located and the organization runs numerous computer applications in multiple sites. Which of the following would be the most appropriate approach for conducting an audit of the mainframe computer'

A. Conduct an individual audit of the mainframe general controls and separate application control audits of the individual applications in a phased manner
B. Conduct a single consolidated audit of both the mainframe general controls and the application controls for all of the applications that use the mainframe
C. Conduct individual audits of each application and include in each audit the general controls of the mainframe relevant to the individual application
D. Conduct a series of location-based audits that cover both the general and application IT controls m an systems across the location

Correct Answer:A

Question 22

- (Exam Topic 1)
Which of the following conditions could lead an organization to enter into a new business through internal development rather than through acquisition?

A. It is expected that there will be slow retaliation from incumbents.
B. The acquiring organization has information that the selling organization is weak.
C. The number of bidders to acquire the organization for sale is low.
D. The condition of the economy is poor.

Correct Answer:A

Question 23

- (Exam Topic 2)
Which of the following is the first step an internal audit activity should undertake when executing a data analytics process'?

A. Conduct a risk assessment regarding the effectiveness of the data analytics process.
B. Analyze possible and available sources of raw data
C. Define the purpose and the anticipated value
D. Select data for cleaning and normalization procedures.

Correct Answer:B

Question 24

- (Exam Topic 2)
New data privacy laws require an organization to use collected customer information for me sole purpose of meeting the organization's business requirements. Which of the following best addresses the risk of the organization not complying with this objective?

A. Provide training on social engineering attacks
B. Encrypt the customer information retained by the organization
C. Establish policies that discipline those who misuse customer information
D. Allocate access profiles for each end user of the information

Correct Answer:B

Question 25

- (Exam Topic 1)
Which of the following budgets must be prepared first?

A. Cash budget.
B. Production budget.
C. Sales budget.
D. Selling and administrative expenses budget.

Correct Answer:C