IIA IIA Certifications IIA-CIA-PART3 Questions & Answers

• Question 151:

  Which of the following risks would involve individuals attacking an oil company's IT system as a sign of solidarity against drilling in a local area?

  A. Tampering.

  B. Hacking.

  C. Phishing.

  D. Piracy.

  Correct Answer: B

• Question 152:

  With regard to project management, which of the following statements about project crashing is true?

  A. It leads to an increase in risk and often results in rework.

  B. It is an optimization technique where activities are performed in parallel rather than sequentially.

  C. It involves a revaluation of project requirements and/or scope.

  D. It is a compression technique in which resources are added to the project.

  Correct Answer: D

  Reference: https://www.simplilearn.com/fast-tracking-vs-crashing-article#:~:text=What%20is%20Crashing %3F,for%20the%20least%20cost%20possible

• Question 153:

  An organization has instituted a bring-your-own-device (BYOD) work environment. Which of the following policies best addresses the increased risk to the organization's network incurred by this environment?

  A. Limit the use of the employee devices for personal use to mitigate the risk of exposure to organizational data.

  B. Ensure that relevant access to key applications is strictly controlled through an approval and review process.

  C. Institute detection and authentication controls for all devices used for network connectivity and data storage.

  D. Use management software to scan and then prompt patch reminders when devices connect to the network.

  Correct Answer: D

• Question 154:

  Which of the following is true of matrix organizations?

  A. A unity-of-command concept requires employees to report technically, functionally, and administratively to the same manager.

  B. A combination of product and functional departments allows management to utilize personnel from various functions.

  C. Authority, responsibility, and accountability of the units involved may vary based on the project's life, or the organization's culture.

  D. It is best suited for firms with scattered locations or for multi-line, large-scale firms.

  Correct Answer: B

  Reference: https://www.referenceforbusiness.com/encyclopedia/Man-Mix/Matrix-Management-andStructure.html

• Question 155:

  Which of the following would most likely be found in an organization that uses a decentralized organizational structure?

  A. There is a higher reliance on organizational culture.

  B. There are clear expectations set for employees.

  C. There are electronic monitoring techniques employed.

  D. There is a defined code for employee behavior.

  Correct Answer: B

• Question 156:

  A new manager received computations of the internal rate of return regarding his project proposal. What should the manager compare the computation results to in order to determine whether the project is potentially acceptable?

  A. Compare to the annual cost of capital.

  B. Compare to the annual interest rate.

  C. Compare to the required rate of return

  D. Compare to the net present value.

  Correct Answer: D

• Question 157:

  Which of the following statements is true regarding cost-volume-profit analysis?

  A. Contribution margin is the amount remaining from sales revenue after fixed expenses have been deducted.

  B. Breakeven point is the amount of units sold to cover variable costs.

  C. Breakeven occurs when the contribution margin covers fixed costs.

  D. Following breakeven, net operating income will increase by the excess of fixed costs less the variable costs per units sold.

  Correct Answer: A

  Reference: https://courses.lumenlearning.com/acctmgrs/chapter/5-3-the-contribution-margin-incomestatement/#:~:text=The%20contribution%20margin%20represents%20sales,%2C%20the%20name% 20contribution%20margin

• Question 158:

  A technology developer has entered a two-year contract with another organization to design new software. According to IIA guidance, which of the following provisions of this agreement would be the most effective to protect the developer's product knowledge and expertise?

  A. The right to audit.

  B. A performance measurement system.

  C. Defined roles and responsibilities.

  D. Intellectual property rights.

  Correct Answer: D

• Question 159:

  Which of the following statements is true regarding the data dictionary?

  A. The data dictionary includes system tables and program files of a database.

  B. The data dictionary describes the content of information stored in the database.

  C. The data dictionary specifies objects such as users, permissions, and groups.

  D. The data dictionary includes system backup and encryption keys.

  Correct Answer: B

  Reference: https://docs.oracle.com/cd/B10501_01/server.920/a96524/c05dicti.htm

• Question 160:

  Which of the following statements is true regarding the "management-by-objectives" method?

  A. Management by objectives is most helpful in organizations that have rapid changes.

  B. Management by objectives is most helpful in mechanistic organizations with rigidly defined tasks.

  C. Management by objectives helps organizations to keep employees motivated.

  D. Management by objectives helps organizations to distinguish clearly strategic goals from operational goals.

  Correct Answer: D

  Reference: https://www.investopedia.com/terms/m/management-by-objectives.asp