CIA Exam Questions and Answers | Exam-Dumps (Page: 10)

QUESTION: 46

A tax consultancy agency retains sensitive personal information regarding its clients. Which of the following is a violation of acceptable privacy practices?

Copies of printed client information not used by the agency are shredded
Employees share client information with coworkers with the permission of the client
The agency only releases client information with management's approval
The agency advises clients of their privacy rights before they commence business with the agency

Answer(s): C

Reveal Solution Next Question

Noncompliance with which of the following would cause a control deficiency related to privacy protection practices?

I). An organization's internal privacy policies
II). Financial accounting standards
III). Privacy laws and regulations
IV). The Standards

I and III only
II and IV only
II, III, and IV only
I, II, III, and IV

Answer(s): A

Reveal Solution Next Question

QUESTION: 48

During a review of data center physical security and environmental controls, an auditor should ensure that

I). Visitors are accompanied by authorized personnel at all times
II). Only developers and operators have access to the data center
III). Fire suppression equipment is tested periodically
IV). Fire and water detectors have been installed

I and III only
II and IV only
I, III, and IV only
II, III, and IV only

Answer(s): C

Reveal Solution Next Question

QUESTION: 49

Which of the following is most likely to be an element of an effective compliance program?

The internal audit activity is assigned responsibility for overseeing the program.
The program is communicated to employees in a video format on a one-time basis.
The organization uses monitoring systems designed to detect improper activity.
The organization obtains as much information as possible when performing background checks on employees.

Answer(s): C

Reveal Solution Next Question

QUESTION: 50

Which of the following statements is correct regarding corporate compensation systems and related bonuses?

I). A bonus system should be considered part of the control environment of an organization and should be considered in formulating a report on internal control.
II). Compensation systems are not part of an organization's control system and should not be reported as such
III). An audit of an organization's compensation system should be performed independently of an audit of the control system over other functions that impact corporate bonuses.

I only
II only
III only
II and III only

Answer(s): A

Reveal Solution Next Question

IIA CIA Exam (page: 10)
IIA Certified Internal Auditor Exam
Updated on: 15-Feb-2026

QUESTION: 46

QUESTION: 47

QUESTION: 48

QUESTION: 49

QUESTION: 50

IIA CIA Exam (page: 10) IIA Certified Internal Auditor Exam Updated on: 15-Feb-2026

QUESTION: 46

QUESTION: 47

QUESTION: 48

QUESTION: 49

QUESTION: 50

IIA CIA Exam (page: 10)
IIA Certified Internal Auditor Exam
Updated on: 15-Feb-2026