A network controls the routing of data packets between linked computers, servers, and other devices. Network infrastructure includes routers, switches, communication protocols, addressing, gateways, and transmission paths that allow data to move from one point to another. An operating system manages local computing resources and may support network communication, but it does not generally control packet routing across linked computers. The control environment is a governance concept within internal control and has nothing to do with packet routing. Application program code performs business logic or transaction processing inside an application, not general network routing. From an internal audit IT perspective, network controls are critical because they affect availability, security, segmentation, traffic flow, and data transmission reliability.
Therefore, Option C is correct.

When employees work from home, secure remote access to the organization's network is essential to protect data and ensure confidentiality. A Virtual Private Network (VPN) is the best option for enabling this securely.
Correct Answer (D - A Virtual Private Network (VPN))
A VPN creates a secure, encrypted connection between the employee's device and the organization's internal network.
It prevents unauthorized access by ensuring that data is transmitted securely over the internet.
The IIA GTAG 17: Auditing Network Security recommends VPNs for secure remote work environments to prevent cyber threats.
Why Other Options Are Incorrect:
Option A (A Wireless Local Area Network - WLAN):
A WLAN is used within an office or home environment, but it does not provide secure remote access to an organization's network.
Option B (A Personal Area Network - PAN):
A PAN connects devices like smartphones and laptops within a short range (e.g., Bluetooth), but it is not suitable for secure remote access.
Option C (A Wide Area Network - WAN):
A WAN connects multiple locations, but it does not provide encryption or remote security like a VPN.
IIA GTAG 17: Auditing Network Security - Recommends VPNs for secure remote access.
IIA Practice Guide: Auditing IT Security Controls - Covers VPNs as a key security control for remote work.
Step-by-Step Explanation:IIA References for Validation:Thus, D is the correct answer because a VPN ensures secure, encrypted communication for employees working from home.

A strong internationally recognized brand creates customer loyalty, trust, reputation, and perceived quality.
New competitors must spend heavily on advertising, promotion, distribution support, customer education, and brand-building to overcome that loyalty. Therefore, the entrance barrier is increased marketing cost. A new competitor does not necessarily have to initiate a price war, although price competition may occur. Production costs are not automatically higher simply because an incumbent has a strong brand. Learning costs may exist in some industries, but they are not the primary barrier created by brand recognition. Internal auditors reviewing strategic risk should consider brand strength because it affects market entry risk, customer retention, intangible asset value, and competitive positioning. Therefore, Option C is correct.

The internal audit procedures manual provides detailed policies, methodologies, and processes to guide the internal audit function. This includes the quality assurance and improvement program (QAIP), which ensures engagement performance and overall conformance with the Standards.
Option A (charter) defines authority and purpose but is not part of procedures. Option B (annual plan) is a planning document, not methodology. Option C (engagement results) are outputs, not procedures.
Reference:
IIA Standards - Standard 2040: Policies and Procedures.

Under the variable costing method, product costs include only costs that vary with production, such as direct materials, direct labor, and variable manufacturing overhead.
(1) Direct labor costs. #
Correct. Direct labor is a variable cost directly tied to production levels, making it a product cost under variable costing.
(2) Insurance on a factory. #
Incorrect. Factory insurance is a fixed manufacturing overhead cost, which is not treated as a product cost under variable costing. It is considered a period cost instead.
(3) Manufacturing supplies. #
Correct. Manufacturing supplies (e.g., lubricants, small tools) are variable costs that increase with production, making them product costs under variable costing.
(4) Packaging and shipping costs. #
Incorrect. Packaging and shipping are selling & distribution costs, which are classified as period costs, not product costs.
IIA GTAG - " Auditing Cost Accounting Systems "
IIA Standard 2130 - Control Activities (Cost Management)
GAAP and IFRS Guidelines on Variable Costing
Analysis of Answer Choices:IIA References:Thus, the correct answer is B (1 and 3 only) because direct labor and manufacturing supplies are considered product costs under the variable costing method.