Question 1

The acronym VPN stands for.

Options :

A : Verified Private Network

B : Virtual Private Network

C : Very Personal Network

D : Virtual Personal Network

Answer: B

Question 2

R is a company running gas-fired power stations in Western Europe. The Risk Committee hasjust received a reportthata power station built to the same design and specification in a developing country has recently collapsed. The causes of the collapse are unclear,but if something similiar were to happen in Europe the consequencesfor Rcould be catastrophic.

Which of the following actions being considered by the Risk Committee are ethical?

Options :

A : Commission a reputable firm of structural engineers to carry out a review of all power stations owned by R.

B : Decide that the information available to date is too uncertain to take any action for now.

C : Send experts employed by R to the site of the collapse so that they can gather information first hand on what happened.

D : Issue a press release confirming that all R-s power stations are 'entirely safe'.

E : Attempt to increase the level of insurance cover against this type of eventuality.

F : Draw up contingency plans in case some ofR-s power stations need to be shut down.

Answer: A,C

Question 3

Which method of quantifying risk exposure can be used to calculate the maximum loss on a portfolio occurring within a period of time with a given probability?

Options :

A : Value at Risk

B : Regression analysis

C : Simulation

D : Expected value

Answer: D

Question 4

DFR is an online retailer that sells picture frames The software running on DFR's website enables customers to log in and make purchases by inputting an email address as a user name and a password that must contain at least eight characters, including upper and lower case letters, numbers and punctuation marks (e.g. , $ or!) Once logged in, customers can check previous orders that they have placed.

Customers can also use DFR's website to change personal details, including credit card numbers and delivery addresses Whenever they wish to use those facilities, the software sends a text message containing a six-digit number to their mobile phones They must input that number before the system will accept changes to their personal details

Which TWO of the following statements are correct?

Options :

A : It is illogical to have different security measures in place for orders and for access to personal details.

B : The software treats customers' personal details as being more sensitive than their ordering histories

C : The arrangement with the text message will have no effect on the security associated with changing personal details

D : Customers should be able to update the mobile phone numbers in their DFR accounts using only their email addresses and passwords for access

E : The software should never show the whole of a customer-s credit card number on screen, even if the customer has logged in and input the six-digit number.

Answer: A,C

Question 5

Which of the following are objectives of the audit planning procedure?

Options :

A : To work out the time and resources required for the audit.

B : To perform substantive tests.

C : To work out how audit evidence will be obtained.

D : To perform analytical review to identify possible areas for investigation.

E : To set out how audit objectives will be achieved.

Answer: A,C

Free CIMAPRO19-P03-1-ENG Mock Exam – Practice Online Confidently

Buying Options: