Explore Free CIMA Professional Qualification CIMAPRA19-P03-1 Practice Questions for Exam Mastery

HGY is a major global corporation that has decided to implement the COSO Enterprise Risk Management Framework and integrate management practices throughout the organisation

Which THREE of the following would be appropriate for HGY?

DFR is an online retailer that sells picture frames The software running on DFR's website enables customers to log in and make purchases by inputting an email address as a user name and a password that must contain at least eight characters, including upper and lower case letters, numbers and punctuation marks (e.g. , $ or!) Once logged in, customers can check previous orders that they have placed.

Customers can also use DFR's website to change personal details, including credit card numbers and delivery addresses Whenever they wish to use those facilities, the software sends a text message containing a six-digit number to their mobile phones They must input that number before the system will accept changes to their personal details

Which TWO of the following statements are correct?

A junior sales clerk at BCD, a wholesale jewellers, received an email which appeared to be from a well known parcel delivery company informing her that a delivery had been attempted outside office hours and had consequently failed She was asked to click on a link and complete some seemingly innocent but logical questions to effect the delivery on the next day She thought no more about it but was very surprised the next month to be awarded salesperson of the month as her sales had doubled

Unfortunately, on investigation it was found that this was as a result of several fraudulent orders for high-value items that had seemingly been placed by an existing customer but delivered to a new address, which turned out to be a temporary box number The existing customer's credit card had been fraudulently charged for these orders

Which of the following types of cyber-attack had the sales clerk been a victim of?

The internal audit department has just completed an investigation into the HR department's procedures relating to new staff appointments The head of HR is unhappy with the draft report prepared by the lead internal auditor The report lists several cases in which appointments were made despite the fact that one or more of the entity's formal procedures were not followed

The head of HR has complained that the internal auditor's comments do not allow for the fact that the HR department's staff members are often very busy and do not always have time to conduct every check.

The internal auditor's comments also reflect a failure to complete documents None of the omissions have led to the appointment of an unsuitable member of staff

Which TWO of the following statements reflect an appropriate response by the board of directors to this report?

The acronym VPN stands for.