Free Access to IIA.IIA-CIA-Part3-3P.v2024-04-30.q121 with Valid Practice Test (Page 9)

In which of the following plans is an employee most likely to find guidance on action and performance standards?

Organizational activities that complement each other and create a competitive advantage are called a:

Which of me following statements is most accurate concerning me management and audit of a web server?

A.The number of ports and protocols allowed to access the web server should be maximized
B.Secure protocols for confidential pages should be used instead of clear-text protocol such as HTTP or FTP
C.The file transfer protocol (FTP) should always be enabled
D.The simple mail transfer protocol (SMTP) should be operating under me most privileged accounts

According to the ISO 14001 standard, which of the following is not included in the requirements for a quality management system?

A.Management must review the quality policy, analyze data about quality management system performance, and assess opportunities for improvement and the need for change.
B.Key processes across the entity which impact quality must be identified and included.
C.The quality management system must be documented in the articles of incorporation, quality manual, procedures, work instructions, and records.
D.The entity must have processes for inspections, testing, measurement, analysis, and improvement.

Which of the following best describes a detective control designed to protect an organization from cyberthreats and attacks?

A.Firewall and other network penmeter protection tools.
B.Comprehensive service level agreements with vendors.
C.A list of trustworthy good traffic and a list of unauthorized blocked traffic.
D.Monitoring for vulnerabilities based on industry intelligence

Download PDF File