Question 1

Which of the following statements is true regarding the use of public key encryption to secure data while it is being transmitted across a network?

Options :

A : Both the key used to encrypt the data and the key used to decrypt the data are made public.

B : The key used to encrypt the data is kept private but the key used to decrypt the data is made public.

C : The key used to encrypt the data is made public but the key used to decrypt the data is kept private.

D : Both the key used to encrypt the data and the key used to decrypt the data are made private.

Answer: C

Question 2

An internal auditor discovered that several unauthorized modifications were made to the production version of an organization's accounting application. Which of the following best describes this deficiency?

Options :

A : Production controls weakness.

B : Application controls weakness.

C : Authorization controls weakness.

D : Change controls weakness.

Answer: D

Question 3

Which of the following describes the most effective control that restricts access to secure areas?

Options :

A : Employee security policy.

B : Access log reviews.

C : Biometric authorization.

D : Security cameras.

Answer: C

Question 4

Which of the following activities would come last in the development and implementation of a privacy and data protection program?

Options :

A : Selecting the privacy and data protection framework

B : Establishing an assessment and communication format

C : Defining the scope of implementation procedures

D : Defining the privacy and data protection risks

Answer: B

Question 5

According to IIA guidance, a business impact analysis would include which of the following steps?

Options :

A : Defining staffing alternatives needed for recovery.

B : Selecting recovery solutions and recovery sites.

C : Identifying the business processes.

D : Defining alternative sourcing of critical functions.

Answer: C

Free IIA-CIA-Part3 Mock Exam – Practice Online Confidently

Buying Options: