Free IIA IIA-CIA-Part3-3P Practice Exam with Questions & Answers | Set: 6

Knowledge/skills gap

Monitoring gap

Accountability/reward failure.

Communication failure.

Facilitates communication between primary functions.

Helps to focus on the achievement of organizational goals.

Provides for efficient use of specialized knowledge .

Accommodates geographically dispersed companies

Operational plans.

Tactical plans.

Strategic plans.

Mission plans.

An employee receives an email that appears to be from the organization's bank, though it is not. The employee replies to the email and sends the requested confidential information.

An organization's website has been hacked. The hacker added political content that is not consistent with the organization's views.

An organization's systems have been compromised by malicious software. The software locks the organization's operating system until d ransom is paid.

An organization's communication systems have been intercepted. A communication session is controlled by an unauthorized third party.

Troubleshoot end user problems

Provide production support.

Provide physical security of databases

Maintain database integrity

Export strategy

Transnational strategy.

Multi-domestic strategy

Globalization strategy.

Data relationships are assumed to exist and to continue where no known conflicting conditions exist.

Analytical procedures are intended primarily to ensure the accuracy of the information being examined.

Data relationships cannot include comparisons between operational and statistical data

Analytical procedures can be used to identify unexpected differences but cannot be used to identify the absence of differences

The maximum tolerable downtime after the occurrence of an incident.

The maximum tolerable data loss after the occurrence of an incident.

The maximum tolerable risk related to the occurrence of an incident.

The minimum recovery resources needed after the occurrence of an incident.

Application input controls

Firewall controls.

Transmission encryption controls

Change management controls

Identity requests are approved in two steps.

Logs are checked for misaligned identities and access rights.

Users have to validate their identity with a smart card.

Functions can be performed based on access rights.