Free IIA-CIA-PART3-3P Exam Braindumps
Certified Internal Auditor - Part 3, Business Analysis and Information Technology Questions 681–685 (page: 138)

Updated On: 10-Feb-2026

The process of monitoring evaluating, and modifying a system as needed is referred to as systems:

  1. Analysis.
  2. Feasibility study.
  3. Maintenance.
  4. Implementation.

Answer(s): C

Explanation:

Systems maintenance must be undertaken by systems analysts and applications programmers continually throughout the life of a system. Maintenance is the redesign of the system and programs to meet new needs or to correct design flaws. These changes should be part of a regular program of preventive maintenance.



Change control typically includes procedures for separate libraries for production programs and for test versions of programs. The reason for this practice is to:

  1. Promote efficiency of system development
  2. Segregate incompatible duties.
  3. Facilitate user input on proposed changes.
  4. Permit unrestricted a access to programs.

Answer(s): B

Explanation:

Separating production and test versions of programs facilitates restricting access to production programs to the individuals, such as computer operators, who need access. The effect is to separate the incompatible functions of operators and programmers.



A company often revises its production processes. The changes may entail revisions to processing programs. Ensuring that changes have a minimal impact on processing and result in minimal risk to the system is a function of:

  1. Security administration.
  2. Change control.
  3. Problem tracking.
  4. Problem-escalation procedures.

Answer(s): B

Explanation:

Change control is the process of authorizing, developing, testing, and installing coded II changes so as to minimize the impact on processing and the risk to the system.



Minimizing the likelihood of unauthorized editing of production programs, job control language, and operating system software best be accomplished by:

  1. Database access reviews
  2. Compliance reviews.
  3. Change control procedures.
  4. Network security audits.

Answer(s): C

Explanation:

Program change control includes 1) maintaining records of change authorizations, code changes, and test results, 2) adhering to a systems development methodology including documentation); 3) authorizing changeovers of subsidiary and headquarters' interfaces; and 4) restricting access to authorized source and executable codes.



A control for ensuring that the source code and the executable code for a program match is:

  1. Verifying that the program move request is authorized.
  2. Requiring program, system, and parallel testing of the code.
  3. Authorizing programmer access to test libraries only.
  4. Recompiling source code into the production load library.

Answer(s): D

Explanation:

Recompiling source code into the production load library ensures that the source and executable codes match because the executable code is created from the source code.



Viewing page 138 of 312
Viewing questions 686 - 690 out of 1555 questions


Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!