IIA Updated IIA-CIA-Part3 Exam Questions and Answers by elise

International marketing commonly begins with limited exporting because it allows an organization to test foreign demand without making a major commitment to overseas production, subsidiaries, or broad global campaigns. Limited exporting provides market experience, customer feedback, and revenue opportunities while keeping risk and investment relatively low. Standardization may occur later if products and marketing approaches can be applied across countries. Global marketing is a more advanced stage that involves integrated international strategy. Domestic marketing occurs before international expansion but is not itself an international marketing activity. Internal auditors reviewing international expansion should assess whether management has evaluated export controls, customs requirements, foreign exchange exposure, distributor risks, and compliance obligations. Since limited exporting is the typical starting point for international marketing, Option C is correct.

An extranet is a controlled private network that allows authorized external parties, such as customers, suppliers, or business partners, to access selected internal resources through secure connections. It extends parts of an organization’s internal network to trusted outside users. A virtual private network may be used to secure that access over the internet. An intranet is limited to internal organizational users and is not designed primarily for outside customers. Digital subscriber line is an internet access technology, not a network type that grants controlled organizational access. Broadband is a general term for high-speed internet connectivity. Internal auditors reviewing extranets should evaluate authentication, authorization, segmentation, encryption, logging, and third-party access controls. Therefore, Option B is correct.

Added-value negotiation emphasizes creating value rather than simply dividing value through positional bargaining. A distinguishing feature is that each party presents a menu of options, allowing both sides to identify trade-offs, shared interests, and solutions that may satisfy multiple objectives. Option B reflects traditional positional bargaining, where each side begins with an opening position and negotiates concessions. Option C is also traditional and adversarial because withholding information can reduce trust and limit value creation. Option D focuses on self-interested opening offers rather than joint problem-solving. Internal auditors may encounter negotiation concepts in procurement, outsourcing, dispute resolution, and stakeholder management. A value-added negotiation approach can improve outcomes while preserving relationships and reducing conflict risk. Therefore, Option A is correct.

To detect missing rows in point-of-sale spreadsheet data, the auditor or analyst should compare product identification codes by store for consecutive periods. This approach tests whether expected product-store combinations appear consistently over time and can reveal gaps for specific days or locations. Sorting only by product identification code may show missing products but would not reliably detect missing rows by store or date. Reviewing store identification code and identifying missing product codes is incomplete because the issue concerns missing days of data, not merely missing product records. Comparing product codes for consecutive periods without considering store could hide gaps if the same product appears in other stores. From an internal audit data analytics perspective, the most precise test uses store-level comparison across consecutive periods. Therefore, Option D is correct.