Exam 5: Business Analysis and Information Technology

Which of the following are typical responsibilities for operational management within a risk management program? 1. Implementing corrective actions to address process deficiencies. 2. Identifying shifts in the organization's risk management environment. 3. Providing guidance and training on risk management processes. 4. Assessing the impact of mitigation strategies and activities.

Which of the following statements about market signaling is correct? 1. The organization releases information about a new product generation. 2. The organization limits a challenger's access to the best source of raw materials or labor. 3. The organization announces that it is fighting a new process technology. 4. The organization makes exclusive arrangements with the channels.

Which of the following is a systems software control?

Which of the following statements best describes the frameworks set forth by the International Standards Organization?

Which of the following statements is true regarding the "management-by-objectives" method?

An organization needs to borrow a large amount of cash to fund its expansion plan. Which of the following annual interest rates is least expensive?

Which of the following statements is true regarding the capital budgeting procedure known as discounted payback period?

Which of the following is the best approach to overcome entry barriers into a new business?

Which of the following best describes the concept of relevant cost?

Which of the following is the primary benefit of including end users in the system development process?

The cost to enter a foreign market would be highest in which of the following methods of global expansion?

An internal auditor was asked to review an equal equity partnership. In one sampled transaction, Partner A transferred equipment into the partnership with a self-declared value of $10,000, and Partner B contributed equipment with a self-declared value of $15,000. The capital accounts of each partner were subsequently credited with $12,500. Which of the following statements is true regarding this transaction?

An internal auditor is reviewing physical and environmental controls for an IT organization. Which control activity should not be part of this review?

A software that translates hypertext markup language (HTML) documents and allows a user to view a remote web page is called:

Which of the following statements accurately describes the responsibility of the internal audit activity (IAA) regarding IT governance? 1. The IAA does not have any responsibility because IT governance is the responsibility of the board and senior management of the organization. 2. The IAA must assess whether the IT governance of the organization supports the organization's strategies and objectives. 3. The IAA may assess whether the IT governance of the organization supports the organization's strategies and objectives. 4. The IAA may accept requests from management to perform advisory services regarding how the IT governance of the organization supports the organization's strategies and objectives.

Which of the following application software features is the least effective control to protect passwords?

An organization facing rapid growth decides to employ a third party service provider to manage its customer relationship management function. Which of the following is true regarding the supporting application software used by that provider compared to an in-house developed system? 1. Updating documentation is always a priority. 2. System availability is usually more reliable. 3. Data security risks are lower. 4. Overall system costs are lower.

An organization that sells products to a foreign subsidiary wants to charge a price that will decrease import tariffs. Which of the following is the best course of action for the organization?

Senior management has decided to implement the Three Lines of Defense model for risk management. Which of the following best describes senior management's duties with regard to this model?

A rapidly expanding retail organization continues to be tightly controlled by its original small management team. Which of the following is a potential risk in this vertically centralized organization?