Exam 5: Business Analysis and Information Technology

Which of the following are typical audit considerations for a review of authentication? 1. Authentication policies and evaluation of controls transactions. 2. Management of passwords, independent reconciliation, and audit trail. 3. Control self-assessment tools used by management. 4. Independent verification of data integrity and accuracy.

Which of the following principles is shared by both hierarchical and open organizational structures? 1. A superior can delegate the authority to make decisions but cannot delegate the ultimate responsibility for the results of those decisions. 2. A supervisor's span of control should not exceed seven subordinates. 3. Responsibility should be accompanied by adequate authority. 4. Employees at all levels should be empowered to make decisions.

Which of the following must be adjusted to index a progressive tax system to inflation?

According to IIA guidance, which of the following would be a primary reason for an internal auditor to test the organization's IT contingency plan?

Which of the following distinguishes the added-value negotiation method from traditional negotiating methods?

Which of the following contract concepts is typically given in exchange for the execution of a promise?

Which of the following statements is true regarding cost-volume-profit analysis?

During her annual performance review, a sales manager admits that she experiences significant stress due to her job but stays with the organization because of the high bonuses she earns. Which of the following best describes her primary motivation to remain in the job?

According to Herzberg's Two-Factor Theory of Motivation, which of the following factors are mentioned most often by satisfied employees?

Which of the following are appropriate functions for an IT steering committee? 1. Assess the technical adequacy of standards for systems design and programming. 2. Continually monitor of the adequacy and accuracy of software and hardware in use. 3. Assess the effects of new technology on the organization's IT operations. 4. Provide broad oversight of implementation, training, and operation of new systems.

Which of the following are likely indicators of ineffective change management? 1. IT management is unable to predict how a change will impact interdependent systems or business processes. 2. There have been significant increases in trouble calls or in support hours logged by programmers. 3. There is a lack of turnover in the systems support and business analyst development groups. 4. Emergency changes that bypass the normal control process frequently are deemed necessary.

An organization accomplishes its goal to obtain a 40 percent share of the domestic market, but is unable to get the desired return on investment and output per hour of labor. Based on this information, the organization is most likely focused on which of the following?

Which of the following best explains why an organization would enter into a capital lease contract?

Which of the following IT layers would require the organization to maintain communication with a vendor in a tightly controlled and monitored manner?

Which of the following is a project planning methodology that involves a complex series of required simulations to provide information about schedule risk?

An internal auditor performed a review of IT outsourcing and found that the service provider was failing to meet the terms of the service level agreement. Which of the following approaches is most appropriate to address this concern?

Which of the following is the best reason for considering the acquisition of a nondomestic organization?

Which of the following statements regarding program change management is not correct?

Which of the following statements is false regarding the internal audit approach when a set of standards other than The IIA's Standards is applicable to a specific engagement?

Which of the following is a strategy that organizations can use to stimulate innovation? 1. Source from the most advanced suppliers. 2. Establish employee programs that reward initiative. 3. Identify best practice competitors as motivators. 4. Ensure that performance targets are always achieved.