IIA-CIA-Part3 Practice Test

IIA-CIA-Part3 Practice Test practice questions, page 26 of 26, with answer review and explanations.

Question 126

Which of the following are typical responsibilities for operational management within a risk management program? 1. Implementing corrective actions to address process deficiencies. 2. Identifying shifts in the organization's risk management environment. 3. Providing guidance and training on risk management processes. 4. Assessing the impact of mitigation strategies and activities.

  1. 1 and 2 only
  2. 1 and 4 only
  3. 2 and 3 only
  4. 3 and 4 only

Question 127

Which of the following statements about COBIT is not true?

  1. COBIT helps management understand and manage the risks associated with information technology (IT) processes.
  2. Management needs to determine the cost-benefit ratio of adopting COBIT control objectives.
  3. COBIT control objectives are specific to various IT platforms and help determine minimum controls.
  4. COBIT provides management with the capability to conduct self-assessments against industry best practices.

Question 128

In order to provide useful information for an organization's risk management decisions, which of the following factors is least important to assess?

  1. The underlying causes of the risk.
  2. The impact of the risk on the organization's objectives.
  3. The risk levels of current and future events.
  4. The potential for eliminating risk factors.