최신CIMA Risk Management - P3무료샘플문제
문제1
A junior sales clerk at BCD, a wholesale jewellers, received an email which appeared to be from a well known parcel delivery company informing her that a delivery had been attempted outside office hours and had consequently failed She was asked to click on a link and complete some seemingly innocent but logical questions to effect the delivery on the next day She thought no more about it but was very surprised the next month to be awarded salesperson of the month as her sales had doubled Unfortunately, on investigation it was found that this was as a result of several fraudulent orders for high-value items that had seemingly been placed by an existing customer but delivered to a new address, which turned out to be a temporary box number The existing customer's credit card had been fraudulently charged for these orders Which of the following types of cyber-attack had the sales clerk been a victim of?
A junior sales clerk at BCD, a wholesale jewellers, received an email which appeared to be from a well known parcel delivery company informing her that a delivery had been attempted outside office hours and had consequently failed She was asked to click on a link and complete some seemingly innocent but logical questions to effect the delivery on the next day She thought no more about it but was very surprised the next month to be awarded salesperson of the month as her sales had doubled Unfortunately, on investigation it was found that this was as a result of several fraudulent orders for high-value items that had seemingly been placed by an existing customer but delivered to a new address, which turned out to be a temporary box number The existing customer's credit card had been fraudulently charged for these orders Which of the following types of cyber-attack had the sales clerk been a victim of?
정답: D
문제2
ZZ is a data security company that is responsible for cyber security m a large shopping mall 21 uses Network Configuration Management (NCM) to assist it in meeting the various needs of the mall's user community.
Which THREE of the following are advantages provided by NCM?
ZZ is a data security company that is responsible for cyber security m a large shopping mall 21 uses Network Configuration Management (NCM) to assist it in meeting the various needs of the mall's user community.
Which THREE of the following are advantages provided by NCM?
정답: B,C,E
문제3
Which of the following is NOT a financial risk.
Which of the following is NOT a financial risk.
정답: B
문제4
The treasurer of IOK is considering entering into a money market hedge in order to hedge a payable.
Which of the following might be valid explanations for the use of a money market hedge for this purpose?
The treasurer of IOK is considering entering into a money market hedge in order to hedge a payable.
Which of the following might be valid explanations for the use of a money market hedge for this purpose?
정답: A,D,E
문제5
TTO is seeking to recruit a new non-executive director TTO produces high quality women's clothing, which it sells to retailers Some clothing is sold under the retailer's own brand names, some is made on behalf of recognised clothing designers TTO is a well regarded company and its products are of a very high quality.
Several applications have been received, and the Board is seeking to make a shortlist by eliminating unsuitable candidates Which THREE of the following would make a candidate unsuitable for appointment to the post?
TTO is seeking to recruit a new non-executive director TTO produces high quality women's clothing, which it sells to retailers Some clothing is sold under the retailer's own brand names, some is made on behalf of recognised clothing designers TTO is a well regarded company and its products are of a very high quality.
Several applications have been received, and the Board is seeking to make a shortlist by eliminating unsuitable candidates Which THREE of the following would make a candidate unsuitable for appointment to the post?
정답: A,B,E
문제6
The internal audit department should always give a report at the end of its audit. This report is intended to be useful and help the company going forward. The report should always include any recommendations for improvements. Which of the following statements are true and which are false?

The internal audit department should always give a report at the end of its audit. This report is intended to be useful and help the company going forward. The report should always include any recommendations for improvements. Which of the following statements are true and which are false?

정답:


문제7
AZX sells electrical components.
AZX's annual turnover is S24 million. Half of all sales are on 30 days' (1 month) credit
5% of credit sales have to be written off as unrecovered debt
25% of such write off is subsequently recovered through debt collection and legal action.
What is the expected loss each year due to credit risk?
AZX sells electrical components.
AZX's annual turnover is S24 million. Half of all sales are on 30 days' (1 month) credit
5% of credit sales have to be written off as unrecovered debt
25% of such write off is subsequently recovered through debt collection and legal action.
What is the expected loss each year due to credit risk?
정답: C
문제8
University B has several departments. Each department at times obtains funding from different sources such as government grants and industry sponsorships. The central management of the university has decided to develop a module within its current Information System to track these funds centrally.
The central management of the University has decided to utilise in-house expertise in order to build this module.
Which THREE of the following represent advantages of developing this module and doing so using in-house expertise?
University B has several departments. Each department at times obtains funding from different sources such as government grants and industry sponsorships. The central management of the university has decided to develop a module within its current Information System to track these funds centrally.
The central management of the University has decided to utilise in-house expertise in order to build this module.
Which THREE of the following represent advantages of developing this module and doing so using in-house expertise?
정답: A,B,D
문제9
In terms of Cyber Security, which THREE of the following represent Personally Identifiable Information (Pll)?
In terms of Cyber Security, which THREE of the following represent Personally Identifiable Information (Pll)?
정답: B,D,E
문제10
Company A's gross profit percentage has fallen from 70% to 61 % Which of the following possible explanations would most concern the internal auditors?
Company A's gross profit percentage has fallen from 70% to 61 % Which of the following possible explanations would most concern the internal auditors?
정답: A
문제11
The acronym VPN stands for.
The acronym VPN stands for.
정답: D
문제12
Which of the following are the Committee of Sponsoring Organisations (COSO) key principles of enterprise risk management?
Select ALL that apply.
Which of the following are the Committee of Sponsoring Organisations (COSO) key principles of enterprise risk management?
Select ALL that apply.
정답: B,D,E
문제13
Which of the following risks should be given highest priority?
Which of the following risks should be given highest priority?
정답: B
문제14
TDC is a company which runs gas-fired power stations in western Europe. The Risk Committee has just received a report that a power station built to the same design and specification in a developing country has recently collapsed. The causes of the collapse are unclear but the consequences for TDC would be catastrophic if something similar were to happen in Europe Which of the following actions being considered by the Risk Committee are ethical?
Select ALL that apply
TDC is a company which runs gas-fired power stations in western Europe. The Risk Committee has just received a report that a power station built to the same design and specification in a developing country has recently collapsed. The causes of the collapse are unclear but the consequences for TDC would be catastrophic if something similar were to happen in Europe Which of the following actions being considered by the Risk Committee are ethical?
Select ALL that apply
정답: B,C,F