CIA Part 3: Internal Audit Function Free Sample Questions

Initiation phase.

Bidding phase.

Development phase.

Management phase.

Cost of goods sold will be understated and net income will be overstated.

Cost of goods sold will be overstated and net income will be understated.

Cost of goods sold will be understated and there will be no impact on net income.

There will be no impact on cost of goods sold and net income will be overstated.

Restricting server room access to specific individuals.

Housing servers with sensitive software away from environmental hazards.

Ensuring that all user requirements are documented.

Performing of intrusion testing on a regular basis.

a unity-of-command concept requires employees to report technically, functionally, and administratively to the same manager.

a combination of product and functional departments allows management to utilize personnel from various functions.

Authority, responsibility, and accountability of the units involved may vary based on the project's life, or the organization's culture.

it is best suited for firms with scattered lC. tions or for multi-line, large-scale firms.

Intrinsic reward.

Job enrichment.

Extrinsic reward.

The hierarchy of needs.

1 only

4 only

1 and 4 only

1,2, and 3 only

1 and 2 only

1 and 4 only

2 and 3 only

3 and 4 only

To ensure that adequate controls exist to prevent any significant business interruptions.

To identify and address potential security weaknesses within the system.

To ensure that tests contribute to improvement of the program.

To ensure that deficiencies identified by the audit are promptly addressed.

Individual workstation computer controls are not as important as companywide server controls.

Particular attention should be paid to housing workstations away from environmental hazards.

Cybersecurity issues can be controlled at an enterprise level, making workstation level controls redundant.

With security risks near an all-time high, workstations should not be connected to the company network.

The goal of the change management process is to sustain and improve organizational operations.

The degree of risk associated with a proposed change determines if the change request requires authorization.

in order to protect the production environment, changes must be managed in a repeatable, defined, and predictable manner.

All changes should be tested in a non-production environment before migrating to the production environment.