A supervisor receives a complaint from an employee who is frustrated about having to learn a new

software program. The supervisor responds that the new software will enable the employee to work more

efficiently and with greater accuracy.

This response is an example of:

A. Empatheticlistening.

B. Reframing.

C. Reflectivelistening.

D. Dialogue.

An internal auditor performed a review of IT outsourcing and found that the service provider was failing to

meet the terms of the service level agreement.

Which of the following approaches is most appropriate to address this concern?

A. The organization should review the skill requirements and ensure that the service provider is maintaining sufficient expertise and retaining skilled resources.

B. The organization should proactively monitor the performance of the service provider, escalate concerns, and use penalty clauses in the contract where necessary.

C. The organization should ensure that there is a clear management communication strategy and path for evaluating and reporting on all outsourced services concerns.

D. The organization should work with the service provider to review the current agreement and expectations relating to objectives, processes, and overall performance.

Which of the following is always true regarding the use of encryption algorithms based on public key infrastructure (PKI)?

A. PKI uses an independent administrator to manage the public key.

B. The public key is authenticated against reliable third-party identification.

C. PKI's public accessibility allows it to be used readily for e-commerce.

D. The private key uniquely authenticates each party to a transaction.

According to IIA guidance, which of the following corporate social responsibility (CSR) evaluation activities may be performed by the internal audit activity?

1.

Consult on CSR program design and implementation.

2.

Serve as an advisor on CSR governance and risk management.

3.

Review third parties for contractual compliance with CSR terms.

4.

Identify and mitigate risks to help meet the CSR program objectives.

A. 1, 2, and 3

B. 1, 2, and 4

C. 1, 3, and 4

D. 2, 3, and 4

Which of the following is a security feature that involves the use of hardware and software to filter or prevent specific information from moving between the inside network and the outside network?

A. Authorization.

B. Architecture model.

C. Firewall.

D. Virtual private network