Free IIA-CIA-Part3-3P Practice Test Questions 2026

For an engineering department with a total quality management program, important elements of quality management include all of the following except:

A. Basing performance evaluations on the number of projects completed.

B. Comparing results with those of other engineering departments.

C. Creating a quality council within the engineering department.

D. Conducting post-project surveys on performance.

Which of the following is not a method for implementing a new application system?

A. Direct cutover.

B. Parallel.

C. Pilot.

D. Test.

Where complex problems need to be addressed, which of the following communication networks would be most appropriate?

A. Chain.

B. All-channel.

C. Circle.

D. Wheel.

In mergers and acquisitions, which of the following is an example of a horizontal combination?

A. Dairy manufacturing company taking over a large dairy farm.

B. A movie producer acquires movie theaters.

C. A petroleum processing company acquires an agro-processing firm.

D. A baker taking over a competitor.

According to IIA guidance, which of the following is a typical risk associated with the tender process and contracting stage of an organization's IT outsourcing life cycle?

A. The process is not sustained and is not optimized as planned.

B. There is a lack of alignment to organizational strategies.

C. The operational quality is less than projected.

D. There is increased potential for loss of assets.

Which of the following is true regarding an organization's relationship with external stakeholders?

A. Specific guidance must be followed when interacting with nongovernmental organizations.

B. Disclosure laws tend to be consistent from one jurisdiction to another.

C. There are several internationally recognized standards for dealing with financial donors.

D. Legal representation should be consulted before releasing internal audit information to other assurance

Which of the following corporate social responsibility strategies is likely to be most effective in minimizing confrontations with influential activists and lobbyists?

A. Continually evaluate the needs and opinions of all stakeholder groups.

B. Ensure strict compliance with applicable laws and regulations to avoid incidents.

C. Maintain a comprehensive publicity campaign that highlights the organization's efforts.

D. Increase goodwill through philanthropic activities among stakeholder communities.

An organization uses a database management system (DBMS) as a repository for data. The DBMS, in turn, supports a number of end-user developed applications which were created using fourth-generation programming languages. Some of the applications update the database. Which of the following is the most important control related to the integrity of the data in the database?

A. End users have their read-only applications approved by the information systems department before accessing the database.

B. Concurrency update controls are in place.

C. nd-user applications are developed on personal computers before being implemented on the mainframe.

D. A hierarchical database model is adopted so that multiple users can be served at the same time.

Which of the following is a characteristic of just-in-time inventory management systems?

A. Users determine the optimal level of safety stocks.

B. They are applicable only to large organizations.

C. They do not really increase overall economic efficiency because they merely shift inventory levels further up the supply chain.

D. They rely heavily on high quality materials.

Which of the following performance measures would be appropriate for evaluating an investment center, which has responsibility for its revenues, costs, and investment base, but would not be appropriate for evaluating cost, revenue, or profit centers?

A. A flexible budget.

B. Variance analysis.

C. A contribution margin income statement by segment.

D. Residual income.

The first step in determining product price is:

A. Determining the cost of the product.

B. Developing pricing objectives.

C. Evaluating prices set by the competitors.

D. Selecting a pricing method.

Which of the following control techniques would minimize the risk of interception during transmission in an electronic data interchange system?

1) Encryption.

2) Traffic padding.

3) Edit checks.

4) Structured data format.

A. 1 and 2 only

B. 2 and 3 only

C. 3 and 4 only

D. 1, 2, and 3 only