Free IIA IIA-CIA-Part3 Practice Questions 2026 - Page 20

Timed Practice Test

Ready for IIA-CIA-Part3 Exam?

This practice test is your final exam before the REAL exam
Dare to Take It?




Practice Questions

An organization has 10,000 units of a defect item in stock, per unit, market price is $10$; production cost is $4; and defect selling price is $5. What is the carrying amount (inventory value) of defects at your end?

A. $0

B. $4,000

C. $5,000

D. $10,000

C.   $5,000

Which of the following is a systems software control?

A. Restricting server room access to specific individuals

B. Housing servers with sensitive software away from environmental hazards

C. Ensuring that all user requirements are documented

D. Performing of intrusion testing on a regular basis

D.   Performing of intrusion testing on a regular basis

Which of the following IT disaster recovery plans includes a remote site designated for recovery with available space for basic services, such as internet and telecommunications, but does not have servers or infrastructure equipment?

A. Frozen site

B. Cold site

C. Warm site

D. Hot site

B.   Cold site

Which of the following practices circumvents administrative restrictions on smart devices, thereby increasing data security risks?

A. Rooting.

B. Eavesdropping.

C. Man in the middle.

D. Session hijacking.

A.   Rooting.

Which of the following Issues would be a major concern for internal auditors when using a free software to analyze a third-party vendor's big data?

A. The ability to use the software with ease to perform the data analysis to meet the engagement objectives.

B. The ability to purchase upgraded features of the software that allow for more In-depth analysis of the big data.

C. The ability to ensure that big data entered into the software is secure from potential compromises or loss.

D. The ability to download the software onto the appropriate computers for use in analyzing the big data.

C.   The ability to ensure that big data entered into the software is secure from potential compromises or loss.

An attacker, posing as a bank representative, convinced an employee to release certain, financial information that ultimately resulted in fraud. Which of the following best describes this cybersecurity risk?

A. Shoulder suiting

B. Pharming,

C. Phishing.

D. Social engineering

D.   Social engineering

According to IIA guidance on IT, which of the following controls the routing of data packets to link computers?

A. Operating system

B. Control environment

C. Network.

D. Application program code

C.   Network.

Which of the following is a characteristic of using a hierarchical control structure?

A. Less use of policies and procedures.

B. Less organizational commitment by employees.

C. Less emphasis on extrinsic rewards.

D. Less employee’s turnover.

B.   Less organizational commitment by employees.

If an organization has a high amount of working capital compared to the industry average, which of the following is most likely true?

A. Settlement of short-term obligations may become difficult.

B. Cash may be bed up in items not generating financial value.

C. Collection policies of the organization are ineffective.

D. The organization is efficient in using assets to generate revenue.

B.   Cash may be bed up in items not generating financial value.

Which of the following performance measures disincentives engaging in earnings management?

A. Linking performance to profitability measures such as return on investment.

B. Linking performance to the stock price.

C. Linking performance to quotas such as units produced.

D. Linking performance to nonfinancial measures such as customer satisfaction and employees training

A.   Linking performance to profitability measures such as return on investment.

Page 20 out of 62 Pages