Free Access IIA.IIA-CIA-Part3.v2023-01-04.q110 Practice Test (Page 16)

Question 71

According to 11A guidance on IT, which of the following are indicators of poor change management?
1. Inadequate control design.
2. Unplanned downtime.
3. Excessive troubleshooting .
4. Unavailability of critical services.

A.1, 2, and 3 only

B.2, 3, and 4 only

C.2 and 3 only.

D.1, 3, and 4 only

Question 72

An internal auditor observed that the organization's disaster recovery solution will make use of a cold site in a town several miles away. Which of the following is likely to be a characteristic of this disaster recover/ solution?

A.Servers are not available and need to be procured

B.Recovery time is expected to be less than one week

C.Data is synchronized in real time

D.Recovery resources end data restore processes have not been defined.

Question 73

Which of the following is the best example of a compliance risk that Is likely to arise when adopting a bring-your-own-device (BYOD) policy?

A.The risk that an organization intrusively monitors personal Information stored on smart devices.

B.The risk that proprietary information is not deleted from the device when an employee leaves.

C.The risk that smart devices can be lost or stolen due to their mobile nature..

D.The risk that users try to bypass controls and do not install required software updates.

Question 74

When auditing databases, which of the following risks would an Internal auditor keep In mind In relation to database administrators?

A.The risk that database administrators do not receive new patches from vendors that support database software in a timely fashion.

B.The risk that database administrators set up personalized accounts for themselves, making the audit time consuming.

C.The risk that database administrators will disagree with temporarily preventing user access to the database for auditing purposes.

D.The risk that database administrators could make hidden changes using privileged access.

Question 75

Which of the following is a sound network configuration practice to enhance information security?

A.Validation of intrusion prevention controls is performed to ensure intended functionality and data integrity.

B.Change management practices to ensure operating system patch documentation is retained.

C.Interfaces reinforce segregation of duties between operations administration and database development.

D.User role requirements are documented in accordance with appropriate application-level control needs.

Other Version: 2903IIA.IIA-CIA-Part3.v2025-05-21.q148; 2673IIA.IIA-CIA-Part3.v2024-11-07.q270; 4719IIA.IIA-CIA-Part3.v2023-09-29.q240; 5133IIA.IIA-CIA-Part3.v2022-08-30.q153; 5563IIA.IIA-CIA-Part3.v2022-01-30.q150; 76IIA.Examboosts.IIA-CIA-Part3.v2021-11-19.by.tess.247q.pdf

Latest Upload: 240PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 332Nokia.4A0-113.v2026-05-01.q69; 338EC-COUNCIL.312-49v11.v2026-04-30.q214; 271Microsoft.MB-820.v2026-04-30.q101; 236Salesforce.MC-202.v2026-04-30.q57; 250BICSI.INSTC_V8.v2026-04-29.q53; 368NMLS.MLO.v2026-04-28.q82; 267NCARB.Project-Management.v2026-04-28.q27; 484EMC.D-AV-DY-23.v2026-04-27.q184; 1236ServiceNow.CSA.v2026-04-27.q483

Question 71

Question 72

Question 73

Question 74

Question 75

Download PDF File