Certified Internal Auditor Technology & Digital Applications 3

Question 1

When auditing an organization's use of artificial intelligence, which concern is MOST unique compared to traditional software audits?

Accepted Answer

Model bias and explainability of automated decisions

Answer

AI introduces unique risks around algorithmic bias and the inability to fully explain model decisions, which are not present in deterministic software.

Question 2

A company migrating its ERP system to the cloud should ensure which control is in place to prevent unauthorized data access during migration?

Accepted Answer

Data encryption in transit

Answer

Encrypting data in transit protects sensitive information from interception during the cloud migration process.

Question 3

Which metric best measures the effectiveness of an organization's patch management program?

Accepted Answer

Percentage of critical vulnerabilities remediated within defined SLAs

Answer

Measuring the percentage of critical vulnerabilities patched within SLAs directly assesses whether the patch management program is timely and effective.

Question 4

What is the role of a Security Information and Event Management (SIEM) system?

Accepted Answer

Aggregating and correlating security log data for threat detection

Answer

A SIEM collects, aggregates, and correlates security event data from multiple sources to identify potential threats and support incident response.

Question 5

Which type of IT audit procedure would BEST verify that terminated employees' access has been revoked?

Accepted Answer

Comparing active user accounts to current employee records

Answer

Comparing active system accounts against current HR records directly tests whether terminated employee access has actually been removed.

Certified Internal Auditor Practice Test

Certified Internal Auditor Practice Test

Certified Internal Auditor Technology & Digital Applications 3