IIA-CIA-PART3 Online Practice Questions and Answers

A country has a comparative advantage in international trade when

A. Firms in the country have a lower cost of production because of natural resources.

B. It has an absolute advantage with respect to at least one input to production.

C. Firms in the country have a lower cost of production because of transportation and other geographic factors.

D. It produces whatever it can produce most efficiently.

According to Arthur D Little, a competitor firm that can act independently and sustain itslong-termstatus irrespective of the behavior of others holds which of the following competitive positions?

A. A dominant position.

B. A strong position.

C. A favorable position.

D. A tenable position.

Which approach to understanding leadership focuses on the social skills, judgment, and maturity of the leader?

A. Behavioral styles theory.

B. Emotional intelligence theory.

C. The Ohio State model.

D. Path-goal theory.

A likely effect of a bureaucratic structure on employee motivation is that:

A. Employee performance will be mediocre because of inflexible standards and impersonal surroundings.

B. An employee will pursue organizational goals because of his/her participation in establishing them.

C. Morale will be high because of each employee's feeling of belonging and ownership.

D. Job enrichment will be high because of each employee's involvement in developing and adapting his/ her job description and required tasks.

The competitive factor that may lead to industry overcapacity is

A. A favorable interest rate charged by suppliers of capital.

B. A short lead time for capacity expansion.

C. The existence of first mover advantages.

D. Integration of competitors.

Which of the following statements is correct regarding risk analysis?

A. The extent to which management judgments are required in an area could serve as a risk factor in assisting the auditor in making a comparative risk analysis.

B. The highest risk assessment should always be assigned to the area with the largest potential loss.

C. The highest risk assessment should always be assigned to the area with the highest probability of occurrence.

D. Risk analysis must be reduced to quantitative terms in order to provide meaningful comparisons across an organization.

One change control function that is required in client/server environments, but is not required in mainframe environments, is to ensure that:

A. Program versions are synchronized across the network.

B. Emergency move procedures are documented and followed.

C. Appropriate users are involved in program change testing.

D. Movement from the test library to the production library is controlled.

Which of the following is the primary benefit of including end users in the system development process?

A. Improved integrity of programs and processing.

B. Enhanced ongoing maintenance of the system.

C. Greater accuracy of the testing phase.

D. Reduced need for unexpected software changes.

At what point during the systems development process should an internal auditor verify that the new application's connectivity to the organization's other systems has been established correctly?

A. Prior to testing the new application.

B. During testing of the new application.

C. During implementation of the new application.

D. During maintenance of the new application.

Which component of an organization's cybersecurity risk assessment framework would allow management to implement user controls based on a user's role?

A. Prompt response and remediation policy.

B. Inventory of information assets.

C. Information access management.

D. Standard security configurations.