Exam 5: Business Analysis and Information Technology

In order to provide useful information for an organization's risk management decisions, which of the following factors is least important to assess?

What is the primary purpose of an integrity control?

The head of the research and development department at a manufacturing organization believes that his team lacks expertise in some areas, and he decides to hire more experienced researchers to assist in the development of a new product. Which of the following variances are likely to occur as the result of this decision? 1. Favorable labor efficiency variance. 2. Adverse labor rate variance. 3. Adverse labor efficiency variance. 4. Favorable labor rate variance.

According to IIA guidance, which of the following statements is true regarding analytical procedures?

Which of the following is true regarding the COSO enterprise risk management framework?

If a bank's activities are categorized under such departments as community banking, institutional banking, and agricultural banking, what kind of departmentalization is being utilized?

What kind of strategy would be most effective for an organization to adopt in order to implement a unique advertising campaign for selling identical product lines across all of its markets?

An internal auditor has been asked to conduct an investigation involving allegations of independent contractor fraud. Which of the following controls would be least effective in detecting any potential fraudulent activity?

The economic order quantity for inventory is higher for an organization that has:

According to the waterfall cycle approach to systems development, which of the following sequence of events is correct?

An internal auditor identified a database administrator with an incompatible dual role. Which of the following duties should not be performed by the identified administrator?

Which of the following statements is true regarding the relationship between an individual's average tax rate and marginal tax rate?

Based on test results, an IT auditor concluded that the organization would suffer unacceptable loss of data if there was a disaster at its data center. Which of the following test results would likely lead the auditor to this conclusion?

An organization is considering mirroring the customer data for one regional center at another center. A disadvantage of such an arrangement would be:

A new manager received computations of the internal rate of return regarding his project proposal. What should the manager compare the computation results to in order to determine whether the project is potentially acceptable?

Which of the following is an example of a nonfinancial internal failure quality cost?

According to IIA guidance, which of the following corporate social responsibility (CSR) activities is appropriate for the internal audit activity to perform?

Which of the following controls helps protect externally stored sensitive or confidential data from cyberthreats?

An organization uses the management-by-objectives method, whereby employee performance is based on defined goals. Which of the following statements is true regarding this approach?

Which of the following statements accurately describes one of the characteristics that distinguishes a multinational company from a domestic company?