Free IIA IIA-CIA-Part3 Practice Questions 2026 - Page 23

Which of the following biometric access controls uses the most unique human recognition characteristic?

A. Facial comparison using photo identification.

B. Signature comparison.

C. Voice comparison.

D. Retinal print comparison.

Which of the following types of accounts must be closed at the end of the period?

A. Income statement accounts.

B. Balance sheet accounts.

C. Permanent accounts

D. Real accounts

Which of the following storage options would give the organization the best chance of recovering data?

A. Encrypted physical copies of the data, and their encryption keys are stored together at the organization and are readily available upon request.

B. Encrypted physical copies of the data are stored separately from their encryption keys, and both are held in secure locations a few hours away from the organization.

C. Encrypted reports on usage and database structure changes are stored on a cloudbased, secured database that is readily accessible.

D. Encrypted copies of the data are stored in a separate secure location a few hours away, while the encryption keys are stored at the organization and are readily available.

According to IIA guidance on IT, which of the following strategies would provide the most effective access control over an automated point-of-sale system?

A. Install and update anti-virus software.

B. Implement data encryption techniques

C. Set data availability by user need.

D. Upgrade firewall configuration

Which of the following types of date analytics would be used by a hospital to determine which patients are likely to require remittance for additional treatment?

A. Predictive analytics

B. Prescriptive analytics.

C. Descriptive analytics

D. Diagnostic analytics

An employee was promoted within the organization and relocated to a new office in a different building. A few months later, security personnel discovered that the employee's smart card was being used to access the building where she previously worked. Which of the following security controls could prevent such an incident from occurring?

A. Regular review of logs.

B. Two-level authentication.

C. Photos on smart cards

D. Restriction of access hours

Which of the following techniques would best detect an inventory fraud scheme?

A. Analyze Invoice payments just under individual authorization limits.

B. Analyze stratification of inventory adjustments by warehouse location.

C. Analyze inventory invoice amounts and compare with approved contract amounts.

D. Analyze differences discovered during duplicate payment testing

Which of the following actions would senior management need to consider as part of new IT guidelines regarding the organization's cybersecurity policies?

A. Assigning new roles and responsibilities for senior IT management.

B. Growing use of bring your own devices for organizational matters.

C. Expansion of operations into new markets with limited IT access

D. Hiring new personnel within the IT department for security purposes

Which of the following statements is true regarding data backup?

A. System backups should always be performed real time.

B. Backups should be stored in a secured location onsite for easy access.

C. The tape rotation schedule affects how long data is retained

D. Backup media should be restored only m case of a hardware or software failure

An organization decided to reorganize into a flatter structure. Which of the following changes would be expected with this new structure?

A. Lower costs.

B. Slower decision making at the senior executive level.

C. Limited creative freedom in lower-level managers.

D. Senior-level executives more focused on short-term, routine decision making