Free CIMAPRA19-P03-1 Exam Braindumps
P3 Risk Management (Online) Questions 269–273 (page: 21)

Updated On: 1-Feb-2026

A junior sales clerk at BCD, a wholesale jewellers, received an email which appeared to be from a well known parcel delivery company informing her that a delivery had been attempted outside office hours and had consequently failed She was asked to click on a link and complete some seemingly innocent but logical questions to effect the delivery on the next day She thought no more about it but was very surprised the next month to be awarded salesperson of the month as her sales had doubled
Unfortunately, on investigation it was found that this was as a result of several fraudulent orders for high-value items that had seemingly been placed by an existing customer but delivered to a new address, which turned out to be a temporary box number The existing customer's credit card had been fraudulently charged for these orders
Which of the following types of cyber-attack had the sales clerk been a victim of?

  1. Botnets
  2. Malvertising
  3. Trojan
  4. Ransomware

Answer(s): B



DFR is an online retailer that sells picture frames The software running on DFR's website enables customers to log in and make purchases by inputting an email address as a user name and a password that must contain at least eight characters, including upper and lower case letters, numbers and punctuation marks (e.g. £, $ or!) Once logged in, customers can check previous orders that they have placed.
Customers can also use DFR's website to change personal details, including credit card numbers and delivery addresses Whenever they wish to use those facilities, the software sends a text message containing a six-digit number to their mobile phones They must input that number before the system will accept changes to their personal details
Which TWO of the following statements are correct?

  1. It is illogical to have different security measures in place for orders and for access to personal details.
  2. The software treats customers' personal details as being more sensitive than their ordering histories
  3. The arrangement with the text message will have no effect on the security associated with changing personal details
  4. Customers should be able to update the mobile phone numbers in their DFR accounts using only their email addresses and passwords for access
  5. The software should never show the whole of a customer's credit card number on screen, even if the customer has logged in and input the six-digit number.

Answer(s): C,E



JHG manufactures inexpensive cars that compete largely on price Its cars have very basic equipment and small but economical engines JHG's Board is considering launching a luxury brand of cars that will be far better equipped, more comfortable and have much better performance Which THREE of the following would be relevant factors to incorporate into the stress testing of this new strategy to create a luxury brand?

  1. Reductions m motorway speed limits
  2. The need for consumer research
  3. Increased tax on vehicle emissions
  4. The cost of designing new cars.
  5. Potential changes in interest rates.
  6. Sales of JHG's existing range of cars

Answer(s): C,D,F



TDC is a company which runs gas-fired power stations in western Europe. The Risk Committee has just received a report that a power station built to the same design and specification in a developing country has recently collapsed. The causes of the collapse are unclear but the consequences for TDC would be catastrophic if something similar were to happen in Europe

Which of the following actions being considered by the Risk Committee are ethical? Select ALL that apply

  1. Commission a reputable firm of structural engineers to carry out a review of all power stations owned by TDC
  2. Send experts employed by TDC to the site of the collapse so that they can gather information first hand on what happened
  3. Draw up contingency plans in case some of TDC's power stations need to be shut down
  4. Decide that the information available to date is too uncertain to take any action for now
  5. Attempt to increase the level of insurance cover against this type of eventuality
  6. Issue a press release confirming that all TDC's power stations are "entirely safe'.

Answer(s): A,B,C



UJK manufactures garden machinery. The company is dependent upon another manufacturer for the motors that power its products.
One of the factors that is being considered in a stress test requested by UJK's Board is the possibility that the motor manufacturer increases its selling prices by 10% The motor accounts for a significant proportion of the overall manufacturing cost of UJK's products Which of the following are correct?

  1. The motor manufacturer should be contacted and told that a substantial increase in selling prices would have a drastic impact on UJK
  2. The possibility of an increase in selling prices due to increased costs should be noted in the stress test report
  3. UJK should estimate the impact on demand of increasing selling prices to pass on the increased cost of the motors.
  4. The impact of absorbing the increased cost of motors on UJK's profits should be calculated.
  5. UJK should identify an alternative vendor of suitable motors as part of its stress test

Answer(s): C,D



Viewing page 21 of 56
Viewing questions 101 - 105 out of 275 questions


Post your Comments and Discuss CIMA CIMAPRA19-P03-1 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!