Exam 5: Business Analysis and Information Technology

Which of the following is an example of a physical control?

Which of the following are included in ISO 31000 risk principles and guidelines?

During which phase of disaster recovery planning should an organization identify the business units, assets, and systems that are critical to continuing an acceptable level of operations?

Which of the following statements is most accurate concerning the management and audit of a web server?

For an engineering department with a total quality management program, important elements of quality management include all of the following except:

According to the COSO enterprise risk management (ERM) framework, which of the following is not a typical responsibility of the chief risk officer?

According to IIA guidance, which of the following is a typical risk associated with the tender process and contracting stage of an organization's IT outsourcing life cycle?

A capital investment project will have a higher net present value, everything else being equal, if it has:

Which of the following IT strategies is most effective for responding to competitive pressures created by the marketplace?

According to Porter's model of competitive strategy, which of the following is a generic strategy? 1. Differentiation. 2. Competitive advantage. 3. Focused differentiation. 4. Cost focus.

A global business organization is selecting managers to post to various international (expatriate) assignments. In the screening process, which of the following traits would be required to make a manager a successful expatriate? 1. Superior technical competence. 2. Willingness to attempt to communicate in a foreign language. 3. Ability to empathize with other people.

Which of the following describes a typical desktop workstation used by most employees in their daily work?

Which of the following phases of a business cycle are marked by an underuse of resources? 1. The trough. 2. The peak. 3. The recovery. 4. The recession.

Which of the following techniques would be least effective in resolving the conflict created by an internal audit client's perception of the audit report as a personal attack on his management performance?

Which of the following is a disadvantage of selecting a commercial software package rather than developing an application internally?

An organization had three large centralized divisions: one that received customer orders for service work; one that scheduled the service work at customer locations; and one that answered customer calls about service problems. These three divisions were restructured into seven regional groups, each of which performed all three functions. One advantage of this restructuring would be:

A small furniture-manufacturing firm with 100 employees is located in a two-story building and does not plan to expand. The furniture manufactured is not special-ordered or custom-made. The most likely structure for this organization would be:

Which of the following is not a potential area of concern when an internal auditor places reliance on spreadsheets developed by users?

The activity that involves a trial run of a product in a typical segment of the market before proceeding to a national launch is referred to as:

Which of the following statements are true regarding the use of heat maps as risk assessment tools? 1. They focus primarily on known risks, limiting the ability to identify new risks. 2. They rely heavily on objective assessments and related risk tolerances. 3. They are too complex to provide an easily understandable view of key risks. 4. They are helpful but limited in value in a rapidly changing environment.