IIA IIA-CIA-Part3 Quiz 62 Topic 6 Questions 306-310

Question: 1

Much of the following authentication device credentials is the most difficult to revoke when an employee's access rights need to be removed?

AA traditional key lock

BA biometric device.

CA card-key system

DA proximity device

Show Answer

Question: 2

According to IIA guidance, which of the following best describes the activities that occur during the conversion phase of an IT project?

AConversion of user requirements into system specifications

BConversion of user requirements into program codes

CConversion of test data into production data

DConversion of data from the old system into the new system

Show Answer

Question: 3

Which of the following statements is true with regard to information protection?

AAll personal information, by definition is considered to be sensitive, requiring specialized controls.

BInformation is not considered personal if it can only be linked to or used to identify an individual indirectly.

CIndividuals who provide personal information to organizations share in the risk of inappropriate
disclosure.

DGood protection controls remove any restrictions on the quantity of personal information that can be collected

Show Answer

Question: 4

Which of the following methods is most closely associated to year over year trends?

AHorizontal analysis

BVertical analysis

CCommon-size analysis

DRatio analysis

Show Answer

Question: 5

A large hospital has an existing contract with a vendor in another country to provide software support and maintenance of the hospital's patient records information system. From the hospital management's perspective, which of the following controls would be most effective to address privacy risks related to this outsourcing arrangement?

AConduct periodic reviews of the privacy policy to ensure that the existing policy meets current
legislation requirements in both regions.

BInclude a 'right to audit' clause in the contract and impose detailed security obligations on the
outsourced vendor

CImplement mandatory privacy training for management to help with identifying privacy risks when outsourcing services

DDevelop an incident monitoring and response plan to track breaches from internal and external sources

Show Answer

IIA IIA-CIA-Part3 Quiz:62 Topic:6 Questions:306-310