IIA-CIA-Part3 Exam Dumps - Business Knowledge for Internal Auditing

Go to page:

<< First
Prev
1
2
3
4
5
6
7
Next
Last >>

Question # 41

When reviewing application controls using the four-level model, which of the following processes are associated with level 4 of the business process method?

Activity

Subprocess

Major process

Mega process

Full Access

Question # 42

Which of the following intangible assets is considered to have an indefinite life?

Underground oil deposits

Trademark

Land

Full Access

Question # 43

Which of the following measures would best protect an organization from automated attacks whereby the attacker attempts to identify weak or leaked passwords in order to log into employees' accounts?

Requiring users to change their passwords every two years.

Requiring two-step verification for all users

Requiring the use of a virtual private network (VPN) when employees are out of the office.

Requiring the use of up-to-date antivirus, security, and event management tools.

Full Access

Question # 44

An internal auditor discusses user-defined default passwords with the database administrator. Such passwords will be reset as soon as the user logs in for the first time, but the initial value of the password is set as "123456." Which of the following are the auditor and the database administrator most likely discussing in this situation?

Whether it would be more secure to replace numeric values with characters.

What happens in the situations where users continue using the initial password.

What happens in the period between the creation of the account and the password change.

Whether users should be trained on password management features and requirements.

Full Access

Question # 45

Which of the following is classified as a product cost using the variable costing method?

1. Direct labor costs.

2. Insurance on a factory.

3. Manufacturing supplies.

4. Packaging and shipping costa.

1 and 2

1 and 3

2 and 4

3 and 4

Full Access

Question # 46

An internal auditor identified a database administrator with an incompatible dual role. Which of the following duties should not be performed by the identified administrator?

Designing and maintaining the database.

Preparing input data and maintaining the database.

Maintaining the database and providing its security,

Designing the database and providing its security

Full Access

Question # 47

Which of the following statements is true regarding a bring-your-own-device (BYOD) environment?

There is a greater need for organizations to rely on users to comply with policies and procedures.

With fewer devices owned by the organization, there is reduced need to maintain documented policies and procedures.

Incident response times are less critical in the BYOD environment, compared to a traditional environment

There is greater sharing of operational risk in a BYOD environment

Full Access