QUESTION 20
During which phase of the contacting process ate contracts drafted for a proposed business activity?

QUESTION 21
Which of the following statements is true regarding an investee that received a dividend distribution from an entity and is presumed to have little influence over the entity?

QUESTION 22
An organization had a gross profit margin of 40 percent in year one and in year two. The net profit margin was 18 percent in year one and 13 percent in year two.
Which of the following could be the reason for the decline in the net profit margin for year two?

QUESTION 23
A manager at a publishing company received an email that appeared to be from one of her vendors with an attachment that contained malware embedded in an Excel spreadsheet. When the spreadsheet was opened, the cybercriminal was able to attack the company’s network and gain access to an unpublished and highly anticipated book.
Which of the following controls would be most effective to prevent such an attack?

QUESTION 24
An organization has a complex systems infrastructure consisting of multiple internally developed, off the shelf, and purchased but significantly customized applications. Some of these applications share databases or process data that is used by another stand-alone application, and interfaces have been written to move data between these applications as needed through batch processing Which of the following situations presents the greatest risk exposure given this environment?

QUESTION 25
Which of the following assumptions regarding cost-volume-profit analysis is true?

QUESTION 26
Which of the following local area network physical layouts is subject to the greatest risk of failure if one device fails?

QUESTION 27
Which of the following describes a typical desktop workstation used by most employees in their daily work?

QUESTION 28
Which of the following methods, if used in conjunction with electronic data interchange (EDI), will improve the organization’s cash management program, reduce transaction data input time and errors, and allow the organization to negotiate discounts with EDI vendors based on prompt payment?

QUESTION 29
In which type of business environment are price cutting strategies and franchising strategies most appropriate?

QUESTION 30
Which of the following is the best approach to overcome entry barriers into a new business?

QUESTION 31
Which of the following practices circumvents administrative restrictions on smart devices, thereby increasing data security risks?

QUESTION 32
Which of the following engagement observations would provide the least motivation for management to amend or replace an existing cost accounting system?

QUESTION 33
When assessing the adequacy of a risk mitigation strategy, an internal auditor should consider which of the following?
1) Management’s tolerance for specific risks.
2) The cost versus benefit of implementing a control.
3) Whether a control can mitigate multiple risks.
4) The ability to test the effectiveness of the control.

QUESTION 34
A global business organization is selecting managers to post to various international (expatriate) assignments.
In the screening process, which of the following traits would be required to make a manager a successful expatriate?
1) Superior technical competence.
2) Willingness to attempt to communicate in a foreign language.
3) Ability to empathize with other people.

QUESTION 35
Which of the following statements is true regarding the use of public key encryption to secure data while it is being transmitted across a network?

QUESTION 36
An organization is experiencing a high turnover. Which of the following can human resources deploy to effectively detect the root cause of turnover?

QUESTION 37
Which of the following are likely indicators of ineffective change management?
1) IT management is unable to predict how a change will impact interdependent systems or business processes.
2) There have been significant increases in trouble calls or in support hours logged by programmers.
3) There is a lack of turnover in the systems support and business analyst development groups.
4) Emergency changes that bypass the normal control process frequently are deemed necessary.

QUESTION 38
During disaster recovery planning, the organization established a recovery point objective. Which of the following best describes this concept?

QUESTION 39
Which of the following is a project planning methodology that involves a complex series ot required simulations to provide information about schedule risk?

QUESTION 40
Which of me following statements is most accurate concerning me management and audit of a web server?

QUESTION 41
A multinational organization involved in online business has planned to set up a help desk service. Which of the following best describes the role performed by the help desk?

QUESTION 42
Which of the following are the most common characteristics of big data?