IIA-CIA-Part3-KR 문제 131
경영진 보상이 조직의 재무 결과를 기반으로 할 때 다음 상황 중 가장 발생할 가능성이 높은 상황은 무엇입니까?
정답: D
When executive compensation is tied to financial results, there is a strong incentive to manipulate financial reporting or focus solely on short-term performance at the expense of stakeholders' interests.
* Potential for Unethical Behavior:
* Executives may prioritize profit-driven decisions (e.g., cost-cutting, aggressive revenue recognition) over long-term sustainability.
* As per IIA Standard 2110 - Governance, incentive structures should align with ethical business practices and stakeholder interests.
* Increased Risk of Fraud and Misrepresentation:
* The Committee of Sponsoring Organizations of the Treadway Commission (COSO) Fraud Risk Management Guide highlights how executive incentives can lead to financial statement manipulation.
* This could result in actions like aggressive revenue recognition, improper expense deferrals, or overstating earnings to boost compensation.
* Misalignment with Stakeholder Interests:
* Employees, customers, and investors suffer if executive compensation encourages short-term gains over long-term stability.
* IIA GTAG 3: Continuous Auditing supports monitoring financial reporting risks to detect such inconsistencies.
* A. The organization reports inappropriate estimates and accruals due to poor accounting controls. (Incorrect)
* Reason: While poor controls can contribute to misstatements, the root cause in this scenario is compensation structure, not control weakness.
* B. The organization uses an unreliable process for gathering and reporting executive compensation data. (Incorrect)
* Reason: This issue relates to HR and payroll data integrity, not the impact of performance- based compensation on behavior.
* C. The organization experiences increasing discontent of employees, if executives are eligible for compensation amounts that are deemed unreasonable. (Incorrect)
* Reason: While excessive executive pay may cause employee dissatisfaction, the question focuses on behavioral impacts on stakeholders, making D the more relevant choice.
* IIA Standard 2110 - Governance - Ensures executive compensation aligns with organizational ethics and stakeholder interests.
* IIA Standard 2120 - Risk Management - Covers the risks associated with incentive-based compensation.
* COSO Fraud Risk Management Guide - Discusses financial fraud linked to executive compensation.
* IIA GTAG 3: Continuous Auditing - Supports risk-based monitoring of financial statements.
Why is Answer D Correct?Analysis of Incorrect Answers:IIA References:Thus, the correct answer is D. The organization encourages employee behavior that is inconsistent with the interests of relevant stakeholders.
* Potential for Unethical Behavior:
* Executives may prioritize profit-driven decisions (e.g., cost-cutting, aggressive revenue recognition) over long-term sustainability.
* As per IIA Standard 2110 - Governance, incentive structures should align with ethical business practices and stakeholder interests.
* Increased Risk of Fraud and Misrepresentation:
* The Committee of Sponsoring Organizations of the Treadway Commission (COSO) Fraud Risk Management Guide highlights how executive incentives can lead to financial statement manipulation.
* This could result in actions like aggressive revenue recognition, improper expense deferrals, or overstating earnings to boost compensation.
* Misalignment with Stakeholder Interests:
* Employees, customers, and investors suffer if executive compensation encourages short-term gains over long-term stability.
* IIA GTAG 3: Continuous Auditing supports monitoring financial reporting risks to detect such inconsistencies.
* A. The organization reports inappropriate estimates and accruals due to poor accounting controls. (Incorrect)
* Reason: While poor controls can contribute to misstatements, the root cause in this scenario is compensation structure, not control weakness.
* B. The organization uses an unreliable process for gathering and reporting executive compensation data. (Incorrect)
* Reason: This issue relates to HR and payroll data integrity, not the impact of performance- based compensation on behavior.
* C. The organization experiences increasing discontent of employees, if executives are eligible for compensation amounts that are deemed unreasonable. (Incorrect)
* Reason: While excessive executive pay may cause employee dissatisfaction, the question focuses on behavioral impacts on stakeholders, making D the more relevant choice.
* IIA Standard 2110 - Governance - Ensures executive compensation aligns with organizational ethics and stakeholder interests.
* IIA Standard 2120 - Risk Management - Covers the risks associated with incentive-based compensation.
* COSO Fraud Risk Management Guide - Discusses financial fraud linked to executive compensation.
* IIA GTAG 3: Continuous Auditing - Supports risk-based monitoring of financial statements.
Why is Answer D Correct?Analysis of Incorrect Answers:IIA References:Thus, the correct answer is D. The organization encourages employee behavior that is inconsistent with the interests of relevant stakeholders.
IIA-CIA-Part3-KR 문제 132
국제 신용 평가 기관에서 평가한 안정적인 등급의 조직은 자산이나 담보로 뒷받침되지 않는 채권을 발행했습니다. 채권자에 대한 이자 및 원금 지급은 조직에서 보장합니다. 조직은 어떤 유형의 채권을 발행했습니까?
정답: D
A debenture bond is an unsecured bond that is not backed by specific assets or collateral. Instead, it is backed only by the issuer's creditworthiness and general reputation. Since the organization in this scenario has a stable rating from international rating agencies and guarantees interest and principal payments, it aligns perfectly with the definition of a debenture bond.
* A. A sinking fund bond - A bond that has a special account (sinking fund) where money is set aside to pay off bondholders over time. This is not mentioned in the scenario.
* B. A secured bond - This type of bond is backed by specific assets or collateral to reduce investor risk. However, the scenario states that the bond is not backed by assets or collateral, eliminating this choice.
* C. A junk bond - These are high-risk, high-yield bonds issued by companies with low credit ratings.
The scenario specifies that the company has a stable rating, making this incorrect.
* D. A debenture bond (Correct Answer) - Since this bond is unsecured and relies solely on the organization's financial health, it matches the definition of a debenture bond.
* IIA IPPF Standard 2120 - Risk Management discusses financial risk management, including bond issuance.
* COSO ERM Framework - Financial Risk Management emphasizes evaluating creditworthiness before issuing debt.
* IFRS 9 - Financial Instruments provides accounting guidance on different bond types.
Explanation of Each Option:IIA References:
* A. A sinking fund bond - A bond that has a special account (sinking fund) where money is set aside to pay off bondholders over time. This is not mentioned in the scenario.
* B. A secured bond - This type of bond is backed by specific assets or collateral to reduce investor risk. However, the scenario states that the bond is not backed by assets or collateral, eliminating this choice.
* C. A junk bond - These are high-risk, high-yield bonds issued by companies with low credit ratings.
The scenario specifies that the company has a stable rating, making this incorrect.
* D. A debenture bond (Correct Answer) - Since this bond is unsecured and relies solely on the organization's financial health, it matches the definition of a debenture bond.
* IIA IPPF Standard 2120 - Risk Management discusses financial risk management, including bond issuance.
* COSO ERM Framework - Financial Risk Management emphasizes evaluating creditworthiness before issuing debt.
* IFRS 9 - Financial Instruments provides accounting guidance on different bond types.
Explanation of Each Option:IIA References:
IIA-CIA-Part3-KR 문제 133
조직은 허리케인의 결과 로컬: 파일 및 애플리케이션 서버에 심각한 피해를 입었습니다. 다행히 조직은 해외 제3자 계약자가 백업한 모든 정보를 복구할 수 있었습니다. 다음 중 조직에서 사용한 접근 방식은 무엇입니까?
정답: B
The organization suffered significant damage to its local file and application servers due to a hurricane but managed to recover all backed-up information through its overseas third-party contractor. This scenario highlights the management of data storage, backup, and recovery processes, which are critical components of data center management.
* Definition of Data Center Management:
* Data center management refers to the administration and control of data storage, backup, recovery, and overall infrastructure to ensure business continuity and disaster recovery (BC
/DR).
* As per the IIA's Global Technology Audit Guide (GTAG) on Business Continuity Management (BCM), organizations must have robust backup strategies to mitigate risks from natural disasters.
* Third-Party Backup and Recovery:
* The fact that the organization recovered data from an overseas third-party contractor aligns with offsite data backup and disaster recovery planning, which falls under data center management.
* According to IIA Practice Guide: Auditing Business Continuity and Disaster Recovery, organizations should store critical data at geographically dispersed locations to mitigate disaster risks.
* Why Not Other Options?
* A. Application Management - This pertains to managing software applications throughout their lifecycle but does not focus on disaster recovery.
* C. Managed Security Services - While third-party security services protect against cyber threats, they do not specifically cover data backup and recovery.
* D. Systems Integration - This deals with connecting different IT systems, not managing backup and recovery.
* IIA GTAG (Global Technology Audit Guide) - Business Continuity Management
* IIA Practice Guide: Auditing Business Continuity and Disaster Recovery
* IIA Standard 2110 - Governance: Ensuring IT Governance Supports Business Continuity Step-by-Step Justification:IIA References:Thus, the correct and verified answer is B. Data center management.
* Definition of Data Center Management:
* Data center management refers to the administration and control of data storage, backup, recovery, and overall infrastructure to ensure business continuity and disaster recovery (BC
/DR).
* As per the IIA's Global Technology Audit Guide (GTAG) on Business Continuity Management (BCM), organizations must have robust backup strategies to mitigate risks from natural disasters.
* Third-Party Backup and Recovery:
* The fact that the organization recovered data from an overseas third-party contractor aligns with offsite data backup and disaster recovery planning, which falls under data center management.
* According to IIA Practice Guide: Auditing Business Continuity and Disaster Recovery, organizations should store critical data at geographically dispersed locations to mitigate disaster risks.
* Why Not Other Options?
* A. Application Management - This pertains to managing software applications throughout their lifecycle but does not focus on disaster recovery.
* C. Managed Security Services - While third-party security services protect against cyber threats, they do not specifically cover data backup and recovery.
* D. Systems Integration - This deals with connecting different IT systems, not managing backup and recovery.
* IIA GTAG (Global Technology Audit Guide) - Business Continuity Management
* IIA Practice Guide: Auditing Business Continuity and Disaster Recovery
* IIA Standard 2110 - Governance: Ensuring IT Governance Supports Business Continuity Step-by-Step Justification:IIA References:Thus, the correct and verified answer is B. Data center management.
IIA-CIA-Part3-KR 문제 134
회계에서 차변과 대변에 대한 설명으로 옳은 것은?
정답: C
In accounting, the terms debit (Dr.) and credit (Cr.) refer to the two sides of an account in the double-entry accounting system.
* Definition of Debit and Credit in Accounting:
* Every financial transaction affects at least two accounts in a double-entry system: one account is debited, and another is credited.
* Debits (Dr.) appear on the left side, while credits (Cr.) appear on the right side of an account.
* Accounting Equation:
Step-by-Step Justification:Assets=Liabilities+Equity\text{Assets} = \text{Liabilities} + \text{Equity} Assets=Liabilities+Equity
* Debits increase assets and expenses.
* Credits increase liabilities, equity, and revenues.
* Why the Other Options Are Incorrect:
* A. Debit indicates the right side of an account and credit the left side #
* Incorrect, as debits are always recorded on the left side, and credits are always on the right side.
* B. Debit means an increase in an account and credit means a decrease. #
* Partially incorrect; it depends on the type of account:
* For assets and expenses, debits increase and credits decrease.
* For liabilities, equity, and revenues, credits increase and debits decrease.
* D. Credit means an increase in an account and debit means a decrease. #
* Also incorrect because increases and decreases depend on the type of account (e.g., debits increase assets but decrease liabilities).
* IIA Standard 1210.A1: Internal auditors must be familiar with fundamental accounting principles.
* IIA Practice Guide: Auditing Financial Statements: Ensures proper understanding of debits and credits in financial reporting.
* GAAP & IFRS Accounting Standards: Define how debits and credits are recorded in financial statements.
IIA References:Thus, the correct answer is C. Credit indicates the right side of an account and debit the left side. #
* Definition of Debit and Credit in Accounting:
* Every financial transaction affects at least two accounts in a double-entry system: one account is debited, and another is credited.
* Debits (Dr.) appear on the left side, while credits (Cr.) appear on the right side of an account.
* Accounting Equation:
Step-by-Step Justification:Assets=Liabilities+Equity\text{Assets} = \text{Liabilities} + \text{Equity} Assets=Liabilities+Equity
* Debits increase assets and expenses.
* Credits increase liabilities, equity, and revenues.
* Why the Other Options Are Incorrect:
* A. Debit indicates the right side of an account and credit the left side #
* Incorrect, as debits are always recorded on the left side, and credits are always on the right side.
* B. Debit means an increase in an account and credit means a decrease. #
* Partially incorrect; it depends on the type of account:
* For assets and expenses, debits increase and credits decrease.
* For liabilities, equity, and revenues, credits increase and debits decrease.
* D. Credit means an increase in an account and debit means a decrease. #
* Also incorrect because increases and decreases depend on the type of account (e.g., debits increase assets but decrease liabilities).
* IIA Standard 1210.A1: Internal auditors must be familiar with fundamental accounting principles.
* IIA Practice Guide: Auditing Financial Statements: Ensures proper understanding of debits and credits in financial reporting.
* GAAP & IFRS Accounting Standards: Define how debits and credits are recorded in financial statements.
IIA References:Thus, the correct answer is C. Credit indicates the right side of an account and debit the left side. #
IIA-CIA-Part3-KR 문제 135
내부 감사자가 조직의 모바일 장치 정책과 관련된 위험을 평가하고 있습니다. 그녀는 조직이 제3자(공급업체 및 방문자)가 외부 스마트 장치를 사용하여 독점 네트워크 및 시스템에 액세스할 수 있도록 허용한다고 말합니다. 내부 감사인이 가장 우려해야 하는 스마트 장치 위험 유형은 다음 중 무엇입니까?
정답: A
Comprehensive and Detailed In-Depth Explanation:
Allowing external devices to access proprietary systems introduces compliance risks, as these devices may not meet the organization's security, data protection, and regulatory standards.
Option B (Privacy) - Important but does not fully capture the risk of unauthorized access or non-compliance with security protocols.
Option C (Strategic) - Strategic risks relate to business direction, not security concerns with third-party access.
Option D (Physical security) - Physical risks involve device theft, which is secondary to compliance when granting access.
Since compliance violations can lead to regulatory penalties and data breaches, Option A (Compliance) is the correct answer.
Reference: IIA IT Risk & Compliance Frameworks - BYOD Policies
Allowing external devices to access proprietary systems introduces compliance risks, as these devices may not meet the organization's security, data protection, and regulatory standards.
Option B (Privacy) - Important but does not fully capture the risk of unauthorized access or non-compliance with security protocols.
Option C (Strategic) - Strategic risks relate to business direction, not security concerns with third-party access.
Option D (Physical security) - Physical risks involve device theft, which is secondary to compliance when granting access.
Since compliance violations can lead to regulatory penalties and data breaches, Option A (Compliance) is the correct answer.
Reference: IIA IT Risk & Compliance Frameworks - BYOD Policies
- 최근 업로드
- 110Snowflake.ADA-C02.v2026-06-08.q23
- 127Microsoft.SC-300-KR.v2026-06-08.q173
- 112Microsoft.DP-300-KR.v2026-06-08.q157
- 118Microsoft.MS-102-KR.v2026-06-08.q240
- 113Microsoft.DP-300-KR.v2026-06-08.q176
- 119Microsoft.SC-100-KR.v2026-06-08.q115
- 121TheBerylInstitute.CPXP.v2026-06-06.q56
- 190ACAMS.CAMS7-KR.v2026-06-05.q213
- 181PaloAltoNetworks.XSIAM-Analyst.v2026-06-04.q72
- 159NLN.NEX.v2026-06-04.q54
[×]
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. IIA.IIA-CIA-Part3-KR.v2026-02-16.q207 모의시험 시험자료를 다운 받으세요.