Question 1

A multinational organization allows its employees to access work email via personal smart devices. However, users are required to consent to the installation of mobile device management (MDM) software that will remotely wipe data in case of theft or other incidents.Which of the following should the organization ensure in exchange for the employees' consent?

Options :

A : That those employees who do not consent to MDM software cannot have an email account.

B : That personal data on the device cannot be accessed and deleted by system administrators.

C : That monitoring of employees' online activities is conducted in a covert way to avoid upsetting them.

D : That employee consent includes appropriate waivers regarding potential breaches to their privacy.

Answer: D

Question 2

Which of the following statements is true regarding the use of public key encryption to secure data while it is being transmitted across a network?

Options :

A : Both the key used to encrypt the data and the key used to decrypt the data are made public.

B : The key used to encrypt the data is kept private but the key used to decrypt the data is made public.

C : The key used to encrypt the data is made public but the key used to decrypt the data is kept private.

D : Both the key used to encrypt the data and the key used to decrypt the data are made private.

Answer: C

Question 3

Which of the following is an example of a key systems development control typically found in the in-house development of an application system?

Options :

A : Logical access controls monitor application usage and generate audit trails.

B : The development process is designed to prevent, detect, and correct errors that may occur.

C : A record is maintained to track the process of data from input, to output, to storage.

D : Business users' requirements are documented, and their achievement is monitored.

Answer: C

Question 4

A brand manager in a consumer food products organization suspected that several days of the point-of-sale data on the spreadsheet from one grocery chain were missing. The best approach for detecting missing rows in spreadsheet data would be to:

Options :

A : Sort on product identification code and identify missing product identification codes.

B : Review store identification code and identify missing product identification codes.

C : Compare product identification codes for consecutive periods.

D : Compare product identification codes by store for consecutive periods.

Answer: D

Question 5

An internal auditor is reviewing physical and environmental controls for an IT organization. Which control activity should not be part of this review?

Options :

A : Develop and test the organization-s disaster recovery plan.

B : Install and test fire detection and suppression equipment.

C : Restrict access to tangible IT resources.

D : Ensure that at least one developer has access to both systems and operations.

Answer: D

Free IIA-CIA-Part3 Mock Exam – Practice Online Confidently

Buying Options: