IIA-CIA-Part3-3P 無料問題集「IIA CIA Exam Part Three: Business Knowledge for Internal Auditing」

（A）$540,000

（B）$280,000

（C）$300,000

（D）$170,000

（A）A unity-of-command concept requires employees to report technically, functionally, and administratively to the same manager

（B）It is best suited for firms with scattered locations or for multi-lira. large-scale firms

（C）Authority responsibility and accountability of the units involved may vary based on the project's life, or the organization's culture

（D）A combination of product and functional departments allows management lo utilize personnel from various functions

（A）Strategic

（B）Privacy

（C）Compliance

（D）Physical security.

（A）Decline.

（B）Maturity.

（C）Introduction.

（D）Growth.

（A）Parallel.

（B）Pilot.

（C）Test.

（D）Direct cutover.

（A）Ensuring that the other party has a personal stake in the agreement.

（B）Focusing on interests rather than on obtaining a winning position.

（C）Considering a few select choices during the settlement phase.

（D）Basing the agreement on negotiating power and positioning leverage.

（A）Encrypt the customer information retained by the organization

（B）Allocate access profiles for each end user of the information

（C）Establish policies that discipline those who misuse customer information

（D）Provide training on social engineering attacks

（A）There are several internationally recognized standards for dealing with financial donors.

（B）Legal representation should be consulted before releasing internal audit information to other assurance

（C）Disclosure laws tend to be consistent from one jurisdiction to another.

（D）Specific guidance must be followed when interacting with nongovernmental organizations.

（A）Complexity completeness constancy

（B）Continuity, control convenience

（C）Velocity, variety volume.

（D）Visibility, validity, vulnerability

（A）Data is synchronized in real lime

（B）Servers are not available and need to be procured

（C）Recovery resources and data restore processes have not been defined

（D）Recovery time is expected to be less than one week

（A）System requirements, analysis, coding, software design, program design, testing, operations.

（B）System requirements, software design, analysis, program design, testing, coding, operations.

（C）System requirements, software design, analysis, program design, coding, testing, operations.

（D）Program design, system requirements, software design, analysis, coding, testing, operations.

（A）To help ensure that the team members who are required to recover systems and data understand their roles.

（B）To help validate the contact information of key personnel required to recover systems and data

（C）To help property configure mass communication notification tools

（D）To help identify training needs across the functional areas required to recover systems and data.

（A）Task-oriented style

（B）Goal-oriented style

（C）People-oriented style

（D）Achievement-oriented style

（A）Emerging industries.

（B）Mature industries.

（C）Declining industries.

（D）Fragmented industries.

（A）Review the list of people with access badges to the room containing the workstation and a log of those who accessed the room.

（B）Review the list of people who attempted to access the workstation and failed, as well as error messages.

（C）Review the passwords of those who attempted unsuccessfully to access the workstation and the log of their activity.

（D）Review the password length, frequency of change, and list of users for the workstation's login process.

（A）The leader searches for deviations from the rules and standards and intervenes when deviations exist.

（B）The leader intervenes to communicate high expectations.

（C）The leader intervenes only when performance standards are not met.

（D）The leader does not intervene to promote problem-solving.

（A）A variable volume sensitive to material cost.

（B）A large volume of custom purchases.

（C）A time-sensitive just-in-time purchase environment.

（D）A currently inefficient purchasing process.

（A）The global positioning system (GPS) capability of smart devices could be exploited to plan cyberattacks

（B）When the user fads to perform jailbreaking or rooting, data security and privacy risks we increased

（C）The Bluetooth and WI-FI features of smart devices enhance the security of data while in transit

（D）Due to their small size and portability smart devices and their associated data are typically less susceptible to physical loss

（A）Internally encrypted passwords

（B）Logon passwords

（C）Protocol controls.

（D）System access privileges.

（A）Encourage periodic rotation of employee duties.

（B）Require regular performance appraisals

（C）Ensure mandatory vacations

（D）Perform exit interviews