IIA IIA-CIA-Part3 Quiz 1 Topic 9 Questions 1-5

Question: 1

Which of the following distinguishes the added-value negotiation method from traditional negotiating methods?

AEach party's negotiator presents a menu of options to the other party.

BEach party adopts one initial position from which to start.

CEach negotiator minimizes the information provided to the other party.

DEach negotiator starts with an offer, which is optimal from the negotiator's perspective.

Show Answer

Question: 2

Which of the following is a strategy that organizations can use to stimulate innovation?

1) Source from the most advanced suppliers.

2) Establish employee programs that reward initiative.

3) Identify best practice competitors as motivators.

4) Ensure that performance targets are always achieved.

A1 and 3 only

B2 and 4 only

C1, 2, and 3 only

D1, 2, 3, and 4

Show Answer

Question: 3

An internal auditor performed a review of IT outsourcing and found that the service provider was failing to meet the terms of the service level agreement. Which of the following approaches is most appropriate to address this concern?

AThe organization should review the skill requirements and ensure that the service provider is maintaining sufficient expertise and retaining skilled resources.

BThe organization should proactively monitor the performance of the service provider, escalate concerns, and use penalty clauses in the contract where necessary.

CThe organization should ensure that there is a clear management communication strategy and path for evaluating and reporting on all outsourced services concerns.

DThe organization should work with the service provider to review the current agreement and
expectations relating to objectives, processes, and overall performance.

Show Answer

Question: 4

According to MA guidance on IT. which of the following best describes a logical access control?

ARequire complex passwords to be established and changed quarterly

BRequire swipe cards to control entry into secure data centers

CMonitor access to the data center with closed circuit camera surveillance.

DMaintain current role definitions to ensure appropriate segregation of duties

Show Answer

Question: 5

An internal audit activity is piloting a data analytics model, which aims to identify anomalies in payments to vendors and potential fraud indicators Which of the following would be the most appropriate criteria for assessing the success of the piloted model?

AThe percentage of cases flagged by the model and confirmed as positives.

BThe development and maintenance costs associated with the model

CThe feedback of auditors involved with developing the model

DThe number of criminal investigations initiated based on the outcomes of the model

Show Answer

IIA IIA-CIA-Part3 Quiz:1 Topic:9 Questions:1-5