Comprehensive and Detailed In-Depth Explanation:
Authentication methods are categorized into three factors:
Something you know (e.g., passwords, PINs).
Something you have (e.g., ID cards, key fobs, smart cards).
Something you are (e.g., biometrics like fingerprints, retina scans).
Option C (A card-key scanner) aligns with "something you have", as it requires a physical token (card) for authentication.
Option A (Retina scan) and Option D (Fingerprint scanner) fall under biometric authentication ("something you are").
Option B (PIN code reader) is based on "something you know".
Thus, C is the correct answer because a card-key represents a physical access control mechanism based on possession.
Reference: IIA IT Security & Authentication Controls

The most effective IT strategy for marketplace pressure is tighter linkage between organizational strategy and information. Competitive pressure requires timely, relevant, and actionable information for pricing, customer behavior, product performance, supply chain response, and strategic decision-making. IT should not simply automate existing processes; it should support business strategy and competitive positioning. Greater online access, enhanced application functionality, and automated controls may improve efficiency or control, but they are narrower operational responses. Internal audit should evaluate whether IT strategy is aligned with business objectives, risk appetite, competitive priorities, and performance measures. When information supports strategy, management can respond faster and more effectively to market threats and opportunities.
Therefore, Option A is correct.

Comprehensive and Detailed In-Depth Explanation:
Zero-coupon bonds are issued at a discount to their face (par) value and do not pay periodic interest. Instead, the bond's value increases over time as it accrues interest, reaching its full face value at maturity. Investors receive the total payoff (the face value) upon maturity, which includes the initial investment plus the interest earned over the bond's term. High-yield bonds (also known as junk bonds) offer higher interest rates due to higher risk but pay periodic interest. Commodity-backed bonds are tied to commodity prices and may pay periodic interest. Therefore, zero-coupon bonds fit the described characteristics.

Reference: IIA Business Knowledge for Internal Auditing, Business Continuity Planning section.

Electronic data interchange is the computer-to-computer exchange of business documents between organizations in a standard electronic format. Sending an invoice automatically from a supplier to a customer in a standard format is a classic example of EDI. It reduces manual entry, improves processing speed, and supports automated purchasing, billing, shipping, and payment workflows. Cloud-hosted accounting software is a delivery model, not EDI. Mobile money transfers are electronic payments, not necessarily standardized business document exchange. Updating vendor master files online is a database maintenance activity. Internal auditors reviewing EDI should assess authorization, completeness, transmission security, message acknowledgments, error handling, and reconciliation controls. Therefore, Option A is correct.