IIA-CIA-Part3試験無料問題集「IIA Business Knowledge for Internal Auditing 認定」

A. Encryption.

B. Firewall.

C. Antivirus.

D. Biometrics.

A. Data center operations manager

B. Response and support team.

C. Network administrator

D. Database administrator,

A. There is greater sharing of operational risk in a BYOD environment.

B. With fewer devices owned by the organization, there is reduced need to maintain documented policies and procedures.

C. There is a greater need for organizations to rely on users to comply with policies and procedures.

D. Incident response times are less critical in the BYOD environment compared to a traditional environment.

A. Lawfulness.

B. Agreement.

C. Consideration.

D. Discharge

A. Matrix organization.

B. Divisional organization

C. Product departmentalization

D. Functional departmentalization.

A. Secure protocols for confidential pages should be used instead of clear-text protocols such as HTTP or FTP

B. The simple mail transfer protocol (SMTP) should be operating under the most privileged accounts

C. The file transfer protocol (FTP) should always be enabled

D. The number of ports and protocols allowed to access the web server should be maximized

A. Boundary attack.

B. Spear phishing attack.

C. Brute force attack.

D. Spoofing attack.

A. Acquisition of common stock of a corporation

B. Investments in the capital stock of a corporation

C. Contents of an investment portfolio,

D. Acquisition of government bonds.

A. Validation of intrusion prevention controls is performed to ensure intended functionality and data integrity.

B. User role requirements are documented in accordance with appropriate application-level control needs.

C. Interfaces reinforce segregation of duties between operations administration and database development.

D. Change management practices to ensure operating system patch documentation is retained.

A. A supplier of electrical parts analyzed sales and stock information and modelled different scenarios for making decisions on stock reordering and delivery

B. A supplier of electrical parts analyzed an instances where different types of spare parts were out of stock prior to scheduled deliveries of those parts.

C. A supplier of electrical parts analyzed all instances of a part being, out of stock poor to its scheduled delivery date and discovered that increases in sales of that part consistently correlated with stormy weather.

D. A supplier of electrical parts analyzed sales, applied assumptions related to weather conditions, and identified locations where stock levels would decrease more quickly.

A. Visibility, validity, vulnerability

B. Continuity, control, convenience

C. Complexity, completeness, constancy

D. Velocity, variety, volume

A. The file transfer protocol (FTP) should always be enabled.

B. The number of ports and protocols allowed to access the web server should be maximized.

C. Secure protocols for confidential pages should be used instead of dear-text protocols such as HTTP or FTP.

D. The simple mail transfer protocol (SMTP) should be operating under the most privileged accounts.

A. A retina characteristics reader

B. A card-key scanner

C. A fingerprint scanner

D. A P3M code reader

A. Prioritizing the order in which business systems would be restored.

B. Determining the frequency with which backups will be performed.

C. Assessing the resources needed to meet the data recovery objectives.

D. Assigning who in the IT department would be involved in the recovery procedures.

A. An intranet.

B. The internet.

C. An extranet.

D. A local area network (LAN).