Free IIA-CIA-PART3-3P Exam Braindumps
Certified Internal Auditor - Part 3, Business Analysis and Information Technology Questions 636–640 (page: 129)

Updated On: 10-Feb-2026

Because of competitive pressures to be more responsive to their customers, some organizations have connected their internal personal computer networks through a host computer to outside networks. A risk of this practice is that:

  1. Viruses may gain entry to one or more company systems.
  2. Uploaded files may not be properly edited and validated.
  3. Data downloaded to the personal computers may not be sufficiently timely
  4. Software maintenance on the personal computers may become more costly.

Answer(s): A

Explanation:

Viruses are harmful programs that disrupt memory and processing functions and may destroy data. They spread from network to network, from infected diskettes, or from infected machines. Hence, connecting all networked personal computers through a host computer to outside networks increases the exposure of all of a company's computers to viruses.



Attacks on computer networks may take many forms.
Which of the following uses the computers of innocent parties infected with Trojan horse programs?

  1. A distributed denial-of-service attack.
  2. A man-in-the-middle attack.
  3. A brute-force attack.
  4. A password-cracking attack.

Answer(s): A

Explanation:

A denial-of-service DOS) attack is an attempt to overload a system e.g., a network or Web server) with false messages so that it cannot function a system crash). A distributed DOS attack comes from multiple sources, for example, the machines of innocent parties infected by Trojan horses.
When activated, these programs send messages to the target and leave the connection open. A DOS may establish as many network connections as possible to exclude other users, overload primary memory, or corrupt file systems.



Spoofing is one type of online activity used to launch malicious attacks. Spoofing is:

  1. Trying large numbers of letter and number combinations to access a network.
  2. Eaves dropping on information sent by a user to the host computer of a website.
  3. Accessing packets flowing through a network.
  4. Identity misrepresentation in cyberspace.

Answer(s): D

Explanation:

Passwords, user account numbers, and other information may be stolen using techniques such as Trojan horses, IP spoofing, and packet sniffers. Spoofing is identity misrepresentation in cyberspace, for example, by using a false website to obtain information about visitors.



An organization's computer system should have an intrusion detection system IDS if it has external connections An AIDs

  1. Must monitor every call on the system as it occurs.
  2. May examine only packets with certain signatures.
  3. Uses only knowledge-based detection.
  4. Uses only behavior-based detection.

Answer(s): B

Explanation:

A network IDS works by using sensors to examine packets traveling on the network. Each sensor monitors only the segment of the network to which it is attached. A packet is examined if it matches a signature. String signatures certain strings of text) are potential signs of attack. Port signatures alert the IDS that a point subject to frequent intrusion attempts may be under attack. A header signature is a .I suspicious combination in a packet header.



Which of the following is the best program for the protection of a company's vital information resources from computer viruses?

  1. Stringent corporate hiring policies for staff working with computerized functions_
  2. Existence of a software program for virus prevention.
  3. Prudent management policies and procedures instituted in conjunction with technological safeguards.
  4. Physical protection devices in use for hardware, software, and library facilities.

Answer(s): C

Explanation:

Acceptably safe computing can be achieved by carefully crafted policies and procedures used in conjunction with antivirus and access control software.



Viewing page 129 of 312
Viewing questions 641 - 645 out of 1555 questions


Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!