Question 1

In reviewing an organization's IT infrastructure risks, which of the following controls is to be tested as part of reviewing workstations?

Options :

A : Input controls.

B : Segregation of duties.

C : Physical controls.

D : Integrity controls.

Answer: D

Question 2

Which of the following application software features is the least effective control to protect passwords?

Options :

A : Suspension of user IDs after a user-s repeated attempts to sign on with an invalid password.

B : Encryption of passwords prior to their transmission or storage.

C : Forced change of passwords after a designated number of days.

D : Automatic logoff of inactive users after a specified time period of inactivity.

Answer: C

Question 3

A large pharmaceutical company would most likely use which of the following to determine liquidity?

Options :

A : Earnings per share

B : Asset turnover ratio

C : Net income

D : Current ratio

Answer: D

Question 4

Which of the following statements is most accurate concerning the management and audit of a web server?

Options :

A : The file transfer protocol (FTP) should always be enabled.

B : The simple mail transfer protocol (SMTP) should be operating under the most privileged accounts.

C : The number of ports and protocols allowed to access the web server should be maximized.

D : Secure protocols for confidential pages should be used instead of clear-text protocols such as HTTP or FTP.

Answer: D

Question 5

Which of the following scenarios best illustrates a spear phishing attack?

Options :

A : Numerous and consistent attacks on the company’s website caused the server to crash and service was disrupted

B : A person posing as a representative of the company’s IT help desk called several employees and played a generic prerecorded message requesting password data

C : A person received a personalized email regarding a golf membership renewal, and he clicked a hyperlink to enter his credit card data into a fake website

D : Many users of a social network service received fake notifications of a unique opportunity to invest in a new product

Answer: C

Free IIA-CIA-Part3 Mock Exam – Practice Online Confidently

Buying Options: