Certified Internal Auditor Technology & Digital Applications 4

Question 1

Which framework is MOST widely used to guide IT governance and management of enterprise IT?

Accepted Answer

COBIT

Answer

COBIT (Control Objectives for Information and Related Technologies) is the leading framework specifically designed for IT governance and management.

Question 2

What does the term 'data integrity' mean in an IT audit context?

Accepted Answer

Data is accurate, complete, and unaltered during processing

Answer

Data integrity ensures that data remains accurate, complete, and consistent throughout its lifecycle and is not improperly modified.

Question 3

An organization uses multi-factor authentication (MFA). Which scenario represents a residual risk DESPITE MFA being in place?

Accepted Answer

SIM-swapping attacks compromising SMS-based MFA tokens

Answer

SIM-swapping allows attackers to redirect SMS tokens to themselves, bypassing SMS-based MFA and representing a residual risk even when MFA is deployed.

Question 4

When reviewing an organization's API security, an internal auditor should MOST be concerned about which vulnerability?

Accepted Answer

Exposed APIs lacking authentication and authorization controls

Answer

APIs without proper authentication and authorization can be exploited to access sensitive data or functionality without valid credentials.

Question 5

Which recovery metric defines the maximum acceptable data loss measured in time after a disaster?

Accepted Answer

Recovery Point Objective (RPO)

Answer

The Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss measured in time, determining backup frequency requirements.

Certified Internal Auditor Practice Test

Certified Internal Auditor Practice Test

Certified Internal Auditor Technology & Digital Applications 4