- (Exam Topic 2)
According to IIA guidance, which of the following best describes the activities that occur during the conversion phase of an IT project?

1. A. Conversion of user requirements into system specifications
2. B. Conversion of user requirements into program codes
3. C. Conversion of test data into production data
4. D. Conversion of data from the old system into the new system

Correct Answer: D

- (Exam Topic 2)
Which of the following cybersecurity-related activities is most likely to be performed by the second line of defense?

1. A. Deploy intrusion detection systems and conduct penetration testing
2. B. Administer security procedures, training, and testing.
3. C. Monitor incidents, key risk indicators, and remediation
4. D. implement vulnerability management with internal and external scans.

Correct Answer: D

- (Exam Topic 1)
According to the Standards, the internal audit activity must evaluate risk exposures relating to which of the following when examining an organization's risk management process?
* 1. Organizational governance.
* 2. Organizational operations.
* 3. Organizational information systems.
* 4. Organizational structure.

1. A. 1 and 3 only
2. B. 2 and 4 only
3. C. 1, 2, and 3 only
4. D. 1, 2, and 4 only

Correct Answer: C

- (Exam Topic 1)
In order to provide useful information for an organization's risk management decisions, which of the following factors is least important to assess?

1. A. The underlying causes of the risk.
2. B. The impact of the risk on the organization's objectives.
3. C. The risk levels of current and future events.
4. D. The potential for eliminating risk factors.

Correct Answer: D

- (Exam Topic 1)
According to Porter's model of competitive strategy, which of the following is a generic strategy?
* 1. Differentiation.
* 2. Competitive advantage.
* 3. Focused differentiation.
* 4. Cost focus.

1. A. 2 only
2. B. 3 and 4 only
3. C. 1, 3, and 4 only
4. D. 1, 2, 3, and 4

Correct Answer: C