Free IIA-CIA-PART3-3P Exam Braindumps
Certified Internal Auditor - Part 3, Business Analysis and Information Technology Questions 726–730 (page: 147)

Updated On: 10-Feb-2026

A client installed the most sophisticated controls using biometric attributes of employees to gain access to their computer system. This technology most likely replaced which of the following controls?

  1. Use of security specialists.
  2. Reasonableness tests.
  3. Passwords.
  4. Virus protection software.

Answer(s): C

Explanation:

The purpose of passwords is to prevent ac o s by unauthorized users just as the more sophistic- cited control of employee biometric attributes. The use of passwords is an effective control in an online system to prevent unauthorized access to computer systems. However, biometric technologies are more sophisticated and difficult to compromise.



Computer program libraries should be kept secure by:

  1. Installing a logging system or program access.
  2. Monitoring physical access to program library media.
  3. Restricting physical and logical access.
  4. Denying remote access via terminals.

Answer(s): C

Explanation:

An important operating control is to establish a library to preclude misplacement. misuse, or theft of data files, programs, and documentation. A librarian should perform this custodianship function and be appropriately accountable. Restricting physical and logical access secures programs from unauthorized use, whether in person or remotely via terminals.



Data access security related to applications may be enforced through all of the following except:

  1. User identification and authentication functions incorporated in the application.
  2. Utility software functions.
  3. User identification and authentication functions in access control software.
  4. Security functions provided by a database management system.

Answer(s): B

Explanation:

Utility programs perform routine functions e.g.. sorting and copying), are available to all users, and are promptly available for many different applications. Utility programs are one of the more serious weaknesses in data access security because some can bypass normal access controls.



Which of the following would provide the least security for sensitive data stored on a notebook computer?

  1. Encrypting data files on the notebook computer.
  2. Using password protection for the screen-saver program on the notebook computer.
  3. Using a notebook computer with a removable hard disk drive.
  4. Locking the notebook computer in a case when not in use.

Answer(s): B

Explanation:

Password protection for a screen-saver program can be easily bypassed.



Which of the following would be of greatest concern to an auditor reviewing a policy regarding the sale of a company's used personal computers to outside parties?

  1. Whether deleted files on the hard disk drive have been completely erased.
  2. Whether the computer has viruses.
  3. Whether all software on the computer is properly licensed.
  4. Whether there is terminal emulation software on the computer.

Answer(s): A

Explanation:

While most delete programs erase file pointers, they do not remove the underlying data. The company must use special utilities that fully erase the data. This is important because of the potential for confidential data on the microcomputers.



Viewing page 147 of 312
Viewing questions 731 - 735 out of 1555 questions


Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!