Free IIA-CIA-PART3-3P Exam Braindumps
Certified Internal Auditor - Part 3, Business Analysis and Information Technology Questions 561–565 (page: 114)

Updated On: 10-Feb-2026

Which of the following is usually a benefit of using electronic funds transfer EFT) for international cash transactions?

  1. Improvement of the audit trail for cash receipts and disbursements.
  2. Creation of self-monitoring access controls.
  3. Reduction of the frequency of data entry errors.
  4. Off-site storage of source documents for cash transactions.

Answer(s): C

Explanation:

The processing and transmission of electronic transactions, such as EFTs, virtually eliminates human interaction. This process not only helps eliminate errors but also allows for the rapid detection and recovery from errors when they do occur.



Which of the following is a risk that is higher when an electronic funds transfer EFT system is used?

  1. Improper change control procedures.
  2. Unauthorized access and activity.
  3. Insufficient online edit checks.
  4. Inadequate bad -ups and disaster recovery procedures.

Answer(s): B

Explanation:

Unauthorized access to money transfer activities or data is an inherent and unique risk of EFT systems. An unauthorized person may attempt to read, alter, or delete information in data files or to enter authorized fund transfers. Hence, in the financial services industry, protection of confidential customer transactions is especially important. Moreover, unauthorized transfers subject a financial institution to a direct risk of serious loss.



If electronic funds transfer EFT) is used to pay vendor invoices, which of the following computer- assisted audit procedures would an auditor use to determine if any payments were made twice?

I). Testing of EFT transactions for reasonableness.
II). Identification of EFT transactions to the same vendor for the same dollar amount.
III). Extraction of EFT transactions with unauthorized vendor codes.
IV). Searching for EFT transactions with duplicate purchase order numbers.

  1. I and II only.
  2. I and IV only.
  3. II and Ill only.
  4. III and IV only.

Answer(s): B

Explanation:

EFT is a service provided by financial institutions worldwide that is based on EDI technology. EFT transaction costs are lower than for manual systems because documents and human intervention are eliminated from the transactions process.
Inaccurate transaction processing including duplication) is a risk specific to EFT. Thus, an auditor should 1) review transactions with the same vendor for the same amount and 2) search for transactions with duplicate purchase order numbers. However, selection of transactions with unauthorized vendor codes and testing of transactions for reasonableness do not identify duplicate payments.



All of the following are potential security issues for e-commerce except:

  1. Correct identification of transacting parties.
  2. Proliferation of computer viruses.
  3. Determining who may rightfully make transaction decisions.
  4. Verification of payment data.

Answer(s): B

Explanation:

E-commerce is the purchase and sale of goods and services by electronic means. Ecommerce may occur via online transactions on public networks electronic data interchange EDI), and email. E- commerce security issues include the correct identification of transacting parties authentication), determining who may rightfully make decisions authorization), and verification of payment data.
While proliferation of computer viruses is a general security issue with regard to information systems, it is not a specific risk associated with e- commerce.



ABC Company is a clothing retailer. Greg is an employee of ABC Company and has recently purchased a leather jacket from ABC Company's website. This activity is:

  1. An e-commerce activity characterized as B2C
  2. An e-commerce activity characterized as B2E.
  3. An e-commerce activity characterized as B2B.
  4. Not an e-commerce activity because Greg is an employee of ABC Company.

Answer(s): A

Explanation:

Electronic commerce e-commerce) is generally defined as "conducting commercial activities over the Internet. These commercial activities can be business-to-business B2B), because-to-consumer B2C), and business-to-employee B2E). The activity that took place between Greg and ABC Company is hest characterized as a business-to-consumer activity.
The transaction was with an individual who was not performing an employee function.



Viewing page 114 of 312
Viewing questions 566 - 570 out of 1555 questions


Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!