CIMA CIMAPRA19-P03-1 Exam Practice Test Instant Access

Question 1

The Head of IT Security has been asked to conduct a detailed forensic analysis of a suspected data breach that ted to customer credit card details being intercepted.

Which TWO of the following would be suitable objectives for such a forensic analysis?

ARecovering the stolen credit card details before they can be abused by criminals

BDeveloping an understanding of the vulnerabilities that led to the breach

CIdentifying customers whose details have been stolen

DThe collection of evidence that can be used to convict the perpetrators of the breach.

EPreventing the credit card companies from blaming the entity for fraudulent charges

Answer : B, C

Question 2

JKL is a retailer with more than 45 shops around the country. The directors suspect that a serious fraud has occurred at one of the branches and a team of internal auditors has been sent to investigate

An analytical review investigation shows that sales revenue is in line with budget, but overtime payments to shop staff exceed budget by 20%.

How should the internal audit team proceed?

AIncrease the evaluation of control risk

BConduct additional detailed testing on overtime payments

CIncrease the evaluation of inherent risk

DConduct additional detailed testing of all figures.

Answer : B

Question 3

Company directors who exercise executive share options generally resell the shares immediately, rather than holding them Which of the following best explains this behavior?

AThe directors receive a risk-free gain

BShareholders become nervous when the directors hold shares

CThe shares are out of the money at the exercise date

DIt is a conflict of interest for directors to be shareholders.

Answer : A

Question 4

YY is a company which generates electricity from alternative energy sources It has just begun constructing a wind farm near a well-known beauty spot The protect has been controversial as campaigners say it will be noisy and unsightly.

The campaigners took legal action but lost the case Some of them have started a campaign of direct action against YY and are physically blocking roads leading to the site and attempting to intimidate YY's staff

YY has hired a security company to help it to protect its staff

Which of the following statements are view in relation to the ethics of this scenario''

Select ALL that apply.

AYY is within its rights to hire the security firm because it has duty of care to its employees

BThe security firm must take care not to use more force against the protestors than is absolutely necessary.

CYY no longer has any duty of care to the protestors since their actions are illegal because they lost their court case

DThe generation of electricity from clean renewable and sustainable sources is too important for the protestors' concerns to be considered

ESince the protestors have already lost their court case they would no longer be ethically justified in engaging in political lobbying to try to get the government to change the law in this area

Answer : A, B, D

Question 5

WTW is a global company which produces high-tech equipment such as smart televisions and mobile phones The CFO has just resigned, having been offered a post at a competitor The CFO was well regarded and WTWs share price has fallen in response to the announcement

At a board meeting the production director commented that the share price fall is the fault of the nomination committee

Which THREE of the following statements are correct?

AThe nomination committee should prepare a description of the role and capabilities required for the CFO's replacement

BIf the nomination committee had been working effectively the CFO would not have resigned

CWhen planning the CFO's replacement the nominations committee should consider the diversity of the board

DThe nomination committee should have considered succession planning for directors before the CFO resigned

EMost of the members of the nomination committee should be executive directors as they are responsible for ensuring the share price recovers quickly.

Answer : A, C, D

Question 6

CDE an online ticket sales agent, has unwittingly become an accomplice in cyber crime and is suffering attacks on its own business as a result CDE's website was poorly designed and cyber-attackers have managed to inject the site with malware, so that it collects all of CDE's customer log-in information and enables the cyber-attackers to retrieve it

The cyber-attackers subsequently use this information to set up Botnet agents in the customers' devices which are then used in a Distributed Denial of Service (DDoS) attack whenever very popular tickets are being placed on sale such as international football matches

The cyber-attackers secure access to a single portal on the site and buy multiple tickets for subsequent sale on the black market while the DDoS causes all other portals to be overloaded preventing real fans acquiring the tickets at face value

Which TWO of the following apply in this scenario?

ACDE customers will turn to other ticket sources for their tickets

BCDE is likely to face significant fines for the breach.

CCDE is likely to lose the ticket franchise for international football events

DCDE will need to implement a new firewall to prevent this type of attack.

ECDE will remain just as profitable selling to the black market as to real fans

Answer : A, D

Question 7

T has its computer facilities in a building adjacent to its headquarters Severe structural problems have been discovered with this building and T has been advised that the only option is demolition and rebuild This leaves T with strategic decisions to make about its IT provision and it has decided to investigate the outsourcing of its services

Which TWO of the following factors should T consider as most important at this stage?

AA supplier who can act as a partner in considering all its business needs

BA supplier who can act as its agent in choosing the cheapest options

CA supplier who provides a wide range of services

DA supplier with a long history of providing outsourcing services

EA supplier who has facilities conveniently located close to its headquarters

Answer : D, E

CIMAPRA19-P03-1 P3 Risk Management (Online) Exam Practice Test