IIA IIA-CIA-Part3 Dumps Questions Answers

A key benefit of data analytics is reduced audit risk because auditors can focus risk assessment more precisely, stratify populations, identify anomalies, test larger data sets, and direct procedures toward higher-risk transactions. This improves the relevance and depth of audit testing. Option A is not a benefit by itself; more data extracts may increase complexity if not controlled. Option C incorrectly links analytics to increased staff. Analytics may broaden coverage, but not because more staff are added. Option D is too broad because analytics may support planning, but its primary value is improved risk focus and testing precision. Internal auditors should use analytics to identify outliers, trends, duplicates, unusual relationships, and control exceptions. Therefore, Option B is correct.

Unauthorized external changes to data are best prevented through layered preventive controls. A firewall restricts unauthorized network access from external sources. Antivirus software helps prevent malicious code from modifying or corrupting data. Data encryption protects data confidentiality and can reduce unauthorized use or alteration when combined with proper key controls. Backup procedures are important recovery controls, but they do not prevent unauthorized changes from occurring. Change logs are detective controls because they record activity after changes occur. Internal auditors evaluating data protection should distinguish preventive, detective, and corrective controls. The best preventive combination listed is antivirus software, firewall, and encryption. Therefore, Option A is correct.

Understanding Computer Communication Systems:

Computers communicate with each other using network infrastructure, which allows data transfer, resource sharing, and remote access.

A network connects multiple devices, enabling them to exchange information, access shared resources, and collaborate efficiently.

Why Option D (Networks) Is Correct?

A computer network consists of hardware (routers, switches, and cables) and software (protocols like TCP/IP) that facilitate communication.

Networks can be local (LAN), wide-area (WAN), or cloud-based, providing the backbone for IT operations.

IIA GTAG 11 – Developing the IT Audit Plan emphasizes auditing network security and communication controls.

Why Other Options Are Incorrect?

Option A (Application program code):

Application programs allow users to perform specific tasks but do not link computers for communication.

Option B (Database system):

A database stores and retrieves data, but it does not enable direct communication between computers.

Option C (Operating system):

The operating system manages a single computer’s resources but does not connect multiple computers.

Networks are responsible for linking computers and enabling communication, making option D the correct choice.

IIA GTAG 11 highlights the importance of network infrastructure in IT auditing.

Final Justification:IIA References:

IIA GTAG 11 – Developing the IT Audit Plan

ISO 27001 – IT Network Security Management

NIST SP 800-53 – Network Security Controls