IIA IIA-CIA-Part1 Quiz 42 Topic 1 Questions 206-210

Question: 1

According to IIA guidance, which of the following statements is false regarding continuing professional education for the internal audit activity (IAA)?

AContinuing professional education can be obtained through IAA involvement in research projects.

BEmployers are responsible for ensuring that the continuing professional education needs of the IAA are met.

CCompletion of self-study courses fulfills IAA continuing professional education requirements.

DSpecialized education that meets unique organizational needs cannot qualify as IAA professional development.

Show Answer

Question: 2

According to IIA guidance, which of the following best describes processes and tools typically used in ongoing internal assessments?

ABenchmarking of the internal audit activity's practices and performance.

BReport of internal assessment results, response plans, and outcomes.

CAnalysis of performance metrics such as cycle times.

DSelf-assessments and surveys of stakeholder groups.

Show Answer

Question: 3

Which of the following is an example of a transaction-level control?

AHuman resource policies.

BTone at the top.

CReconciliations of primary accounts.

DInventory counts.

Show Answer

Question: 4

An internal auditor notes that employees are able to download files from the internet. According to IIA guidance, which of the following strategies would best protect the organization from the risk of copyright infringement and licensing violations resulting from this practice?

AApply antivirus and patch management software.

BUtilize dedicated and encrypted network connections.

CInstall a software inventory management application.

DUtilize secure socket layer encryption.

Show Answer

Question: 5

According to IIA guidance, which of the following statements is true?

ARisks in IT processes are best mitigated by individual controls.

BThe overall focus of the framework is on significant controls in all critical IT applications.

CIT risks and related controls are operational and best identified using a bottom-up approach.

DControl process risks are found at multiple layers of the IT environment.

Show Answer

IIA IIA-CIA-Part1 Quiz:42 Topic:1 Questions:206-210