Weekend Sale Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 2493360325

Good News !!! IIA-ACCA ACCA CIA Challenge Exam is now Stable and With Pass Result

IIA-ACCA Practice Exam Questions and Answers

ACCA CIA Challenge Exam

Last Update 3 days ago
Total Questions : 604

ACCA CIA Challenge Exam is stable now with all latest exam questions are added 3 days ago. Incorporating IIA-ACCA practice exam questions into your study plan is more than just a preparation strategy.

By familiarizing yourself with the ACCA CIA Challenge Exam exam format, identifying knowledge gaps, applying theoretical knowledge in IIA practical scenarios, you are setting yourself up for success. IIA-ACCA exam dumps provide a realistic preview, helping you to adapt your preparation strategy accordingly.

IIA-ACCA exam questions often include scenarios and problem-solving exercises that mirror real-world challenges. Working through IIA-ACCA dumps allows you to practice pacing yourself, ensuring that you can complete all ACCA CIA Challenge Exam exam questions within the allotted time frame without sacrificing accuracy.

IIA-ACCA PDF

IIA-ACCA PDF (Printable)
$48
$119.99

IIA-ACCA Testing Engine

IIA-ACCA PDF (Printable)
$56
$139.99

IIA-ACCA PDF + Testing Engine

IIA-ACCA PDF (Printable)
$70.8
$176.99
Question # 1

A former line supervisor from the Financial Services Department has completed six months of a two-year development opportunity with the internal audit activity (IAA). She is assigned to a team that will audit the organization's payroll function, which is managed by the Human Resources Department. Which of the following statements is most relevant regarding her independence and objectivity with respect to the payroll audit?

Options:

A.  

She may participate, but only after she has completed one year with the IA

A.  

B.  

She may participate, because she did not previously work in the Human Resources Department.

C.  

She may participate, but she must be supervised by the auditor in charge.

D.  

She may participate for training purposes, to build her knowledge of the IA

A.  

Discussion 0
Question # 2

Which of the following are generally recognized as essential elements of a corporate social responsibility program?

Options:

A.  

Human rights and the environment.

B.  

Organizational governance and financial reporting.

C.  

Fair operating practices and government regulation.

D.  

Consumer issues and return on investment.

Discussion 0
Question # 3

When auditing the award of a major contract, which of the following should an internal auditor suspect as a red flag for a bidding fraud scheme?

1. Subsequent change orders increase requirements for low-bid items.

2. Material contract requirements are different on the actual contract than on the request for bids.

3. A high percentage of employees are charged to indirect accounts.

4. Losing bidders are hired as subcontractors.

Options:

A.  

1 only

B.  

2 only

C.  

1 and 3.

D.  

2 and 4.

Discussion 0
Question # 4

Which of the following describes a key characteristic related to effective organizational communication?

Options:

A.  

Comprehensive supervisory and verification procedures.

B.  

A well-designed system of internal controls.

C.  

A culture of integrity and transparency.

D.  

Unique operating environments with varying complexity.

Discussion 0
Question # 5

An internal auditor wants to sample data to test an audit theory in a cost-effective way. Which of the following sampling strategies should she use?

Options:

A.  

Statistical sampling only

B.  

Nonstatistical sampling only

C.  

A combination of both statistical and nonstatistical sampling.

D.  

Neither approach to testing the audit theory would be cost effective.

Discussion 0
Question # 6

A furniture manufacturer has installed a new fire sprinkler system at its central warehouse and canceled the existing fire insurance policy on that property. What change of risk response strategy does this course of action most likely reflect?

Options:

A.  

From sharing to reduction.

B.  

From acceptance to reduction.

C.  

From sharing to avoidance.

D.  

From acceptance to avoidance.

Discussion 0
Question # 7

According to IIA guidance, which of the following should be formally documented in the internal audit charter?

Options:

A.  

The internal audit activity's responsibility for imposing risk management processes.

B.  

The internal audit activity's responsibility for the organization's governance framework.

C.  

The nature of consulting services provided by the internal audit activity.

D.  

The budgeting process for the internal audit activity.

Discussion 0
Question # 8

With regard To IT governance, which of the following is the most effective and appropriate role for the internal audit activity?

Options:

A.  

Independently evaluate the skills and experience of potential chief information officer candidates to assess the best fit based on the organization's risk appetite.

B.  

Evaluate the organization's governance standards and assess IT-related activities to identify gaps and develop policies, ensuring alignment with the organization's risk appetite.

C.  

Assist management in interpreting complex IT-related privacy and security risk exposures and evaluating potential mitigation strategies.

D.  

Assess whether governance activities are aligned with the organization's risk appetite and take into consideration emerging risks.

Discussion 0
Question # 9

Which of the following scenarios best illustrates the principle of due professional care?

Options:

A.  

An internal auditor evaluates the significant risks arising from a consulting engagement.

B.  

An internal auditor declares that he would have a conflict of interest in providing planned audit support.

C.  

An internal auditor has been given sufficient authority to access documents needed to make an appraisal of an issue.

D.  

An internal auditor uses technology-based audit techniques to ensure that all significant risks are identified.

Discussion 0
Question # 10

While auditing an organization's credit approval process, an internal auditor learns that the organization has made a large loan to another auditor's relative. Which course of action should the auditor take?

Options:

A.  

Proceed with the audit engagement, but do not include the relative's information.

B.  

Have the chief audit executive and management determine whether the auditor should continue with the audit engagement.

C.  

Disclose in the engagement final communication that the relative is a customer.

D.  

Immediately withdraw from the audit engagement.

Discussion 0
Question # 11

An internal auditor is evaluating techniques management uses to mitigate risks within a particular product division. Which of the following is an example of risk reduction?

Options:

A.  

Management sells the product division to a competitor.

B.  

Management outsources the product division to a third party.

C.  

Management allows the product division to remain unchanged.

D.  

Management modifies the product division to minimize errors.

Discussion 0
Question # 12

Which of the following is most likely to enhance an internal auditor's objectivity?

Options:

A.  

An auditor is appropriately able to communicate results.

B.  

An auditor performs his work free from interference.

C.  

An auditor is unrestricted in determination of scope.

D.  

An auditor avoids conflicts of interest.

Discussion 0
Question # 13

Which of the following is the best way to detect fraud?

Options:

A.  

Conduct anti-fraud training.

B.  

Perform background investigations.

C.  

Implement process controls.

D.  

Activate a whistleblower hotline.

Discussion 0
Question # 14

Non-statistical sampling does not require which of the following?

Options:

A.  

The sample to be representative of the population.

B.  

The sample to be selected haphazardly.

C.  

A smaller sample size than if selected using statistical sampling.

D.  

Projecting the results to the population.

Discussion 0
Question # 15

A headquarters-based internal auditor has been sent to a major overseas subsidiary to conduct various engagements. Initially, the internal auditor spends time to become familiar with local customs and organization's practices while embarking on the first engagement. Which of the following competencies does the internal auditor exercise?

Options:

A.  

Communication.

B.  

Persuasion and collaboration.

C.  

Business acumen.

D.  

Governance, risk, and control.

Discussion 0
Question # 16

Click the Exhibit.

Question # 16

Internal auditors are asked to keep track of how many hours per day they spend planning the audit, conducting the engagement, and writing the audit report. The data for two days has been collected as follows:

Day 1

Day 2

Planning the audit

2 hours

3 hours

Conducting the engagement

1 hour

1 hour

Writing the audit report

2 hours

4 hours

Which of the following graphs depicts the data accurately?

Options:

A.  

Graph A only

B.  

Graph B only

C.  

Both A and

B.  

D.  

Neither A nor

B.  

Discussion 0
Question # 17

A large sales organization maintains a system of internal control according to the COSO model and has updated its code of conduct. This change relates to which component of the COSO framework?

Options:

A.  

Control activities.

B.  

Information and communication.

C.  

Commitment.

D.  

Control environment.

Discussion 0
Question # 18

An internal auditor is performing analytical reviews as part of an audit of a supermarket's merchandising department. Because the economy has declined since midyear, the auditor can expect to encounter which of the following?

Options:

A.  

Higher inventory turnover.

B.  

Higher operating margin.

C.  

Lower obsolete stock disposal.

D.  

Lower sales volume.

Discussion 0
Question # 19

Which of the following is an example of a management control technique?

Options:

A.  

A budget.

B.  

A risk assessment.

C.  

The board of directors.

D.  

The control environment.

Discussion 0
Question # 20

According to IIA guidance, which of the following statements is true when an internal auditor performs consulting services that improve an organization's operations?

Options:

A.  

The services must be aligned with those defined in the internal audit charter.

B.  

The services must not be performed by the same internal auditor who performed assurance services, in order to maintain objectivity.

C.  

The services may preclude assurance services from the consulting engagement.

D.  

The services impose no responsibility to communicate information other than to the engagement client.

Discussion 0
Question # 21

Which of the following is most likely to function as a directive control?

Options:

A.  

Security dogs.

B.  

Alert employees.

C.  

Insurance claims.

D.  

Cycle counts.

Discussion 0
Question # 22

Which of the following best describes the misdirection of payments on accounts receivable to an employee's bank account?

Options:

A.  

Fraud open on the books.

B.  

Fraud hidden on the books.

C.  

Fraud off the books.

D.  

Fraud on the balance sheet.

Discussion 0
Question # 23

In which of the following scenarios would the chief audit executive (CAE) be required to decline the assignment?

Options:

A.  

The CAE would need to procure external services to deliver the internal audit assurance program.

B.  

There is no expertise within the internal audit team for detecting and investigating fraud.

C.  

There is no expertise within the internal audit team for auditing an IT engagement.

D.  

There is no available expertise on the internal audit team to perform a consulting engagement.

Discussion 0
Question # 24

According to The MA Code of Ethics, which of the following is one of the rules of conduct for objectivity?

Options:

A.  

Internal auditors shall continually improve their proficiency and effectiveness and quality of their services.

B.  

Internal auditors shall respect and contribute to legitimate and ethical objectives of the organization.

C.  

Internal auditors shall not accept anything that may impair or be presumed to impair their professional judgment.

D.  

Internal auditors shall be prudent in the use and protection of information acquired in the course of their duties.

Discussion 0
Question # 25

According to IIA guidance, which of the following is ultimately responsible for seeing that the internal control system of an organization's social responsibility program is effective?

Options:

A.  

Senior management.

B.  

Internal audit activity.

C.  

All employees.

D.  

Board of directors.

Discussion 0
Question # 26

What is the purpose of a secondary control?

Options:

A.  

It replaces primary controls that are either ineffective or cannot fully mitigate a risk.

B.  

It partially reduces the residual risk level when a key control does not operate effectively.

C.  

lt combines with other controls to help reduce significant risk exposures to an acceptable level.

D.  

It helps to ensure the completeness and accuracy of automated controls in a system environment.

Discussion 0
Question # 27

While preparing for an audit of senior management expenses, the chief audit executive (CAE) learns that management is unable to locate a number of original expense claims to support the related disbursements. She decides to defer the engagement until they can be located. Which of the following principles likely guided the CAE's decision?

Options:

A.  

Objectivity.

B.  

Proficiency.

C.  

Independence.

D.  

Due professional care.

Discussion 0
Question # 28

Which of the following offers the best evidence that the internal audit activity has achieved organizational independence?

Options:

A.  

An independent third party has assessed the organization's system of internal controls to be adequate and effective.

B.  

The chief audit executive reports both functionally and administratively to the CEO.

C.  

The internal audit charter is drafted properly and approved by the appropriate parties.

D.  

The mission statement and strategy of the internal audit activity demonstrates alignment to organizational objectives.

Discussion 0
Question # 29

Which of the following options is the most cost-effective and efficient way for internal auditors to keep current with the latest developments in the internal audit profession?

Options:

A.  

Attending annual professional conferences and seminars.

B.  

Participating in on-the-job training in various departments of the organization.

C.  

Pursuing as many professional certifications as possible.

D.  

Maintaining membership in The HA and similar professional organizations and subscribing to relevant email updates or news feeds.

Discussion 0
Question # 30

According to IIA guidance, which of the following is not a responsibility of the chief audit executive pertaining to documenting information to support internal audit engagement results and conclusions?

Options:

A.  

Rating each engagement record to assess its relevance and accessibility for the organization's board.

B.  

Controlling access to engagement records, including access by senior management.

C.  

Developing retention requirements for engagement records that are consistent with organizational guidelines.

D.  

Forming policies governing the custody and retention of consulting engagement records before their release to other parties.

Discussion 0
Question # 31

When forming an opinion on the adequacy of management's systems of internal control, which of the following findings would provide the most reliable assurance to the chief audit executive?

• During an audit of the hiring process in a law firm, it was discovered that potential employees' credentials were not always confirmed sufficiently. This process remained unchanged at the following audit.

• During an audit of the accounts payable department, auditors calculated that two percent of accounts were paid past due. This condition persisted at a follow up audit.

• During an audit of the vehicle fleet of a rental agency, it was determined that at any given time, eight percent of the vehicles were not operational. During the next audit, this figure had increased.

• During an audit of the cash handling process in a casino, internal audit discovered control deficiencies in the transfer process between the slot machines and the cash counting area. It was corrected immediately.

Options:

A.  

1 and 3 only

B.  

1 and 4 only

C.  

2 and 3 only

D.  

2 and 4 only

Discussion 0
Question # 32

Which of the following behaviors could represent a significant ethical risk if exhibited by an organization's board?

1. Intervening during an audit involving ethical wrongdoing.

2. Discussing periodic reports of ethical breaches.

3. Authorizing an investigation of an unsafe product.

4. Negotiating a settlement of an employee claim for personal damages.

Options:

A.  

1 and 2

B.  

1 and 4

C.  

2 and 3

D.  

3 and 4

Discussion 0
Question # 33

Which of the following actions are appropriate for the chief audit executive to perform when identifying audit resource requirements?

1. Consider employees from other operational areas as audit resources, to provide additional audit coverage in the organization.

2. Approach an external service provider to conduct internal audits on certain areas of the organization, due to a lack of skills in the organization.

3. Suggest to the audit committee that an audit of technology be deferred until staff can be trained, due to limited IT audit skills among the audit staff.

4. Communicate to senior management a summary report on the status and adequacy of audit resources.

Options:

A.  

1 and 3 only

B.  

2 and 4 only

C.  

1, 2, and 4

D.  

2, 3, and 4

Discussion 0
Question # 34

According to IIA guidance, which of the following individuals should receive the final audit report on a compliance engagement for the organization's cash disbursements process?

Options:

A.  

The accounts payable supervisor, accounts payable manager, and controller.

B.  

The accounts payable manager, purchasing manager, and receiving manager.

C.  

The accounts payable supervisor, controller, and treasurer.

D.  

The accounts payable manager, chief financial officer, and audit committee.

Discussion 0
Question # 35

According to IIA guidance, which of the following are appropriate actions for the chief audit executive regarding management's response to audit recommendations?

Options:

A.  

Evaluate and verify management's response, and determine the need and scope for additional work.

B.  

Evaluate and verify management's response, and establish timelines for corrective action by management.

C.  

Oversee the corrective actions undertaken by management, and determine the need and scope for additional work.

D.  

Oversee the corrective actions undertaken by management, and establish timelines for corrective action by management.

Discussion 0
Question # 36

During a fraud interview, it was discovered that unquestioned authority enabled a vice president to steal funds from the organization. Which of the following best describes this condition?

Options:

A.  

Scheme.

B.  

Opportunity.

C.  

Rationalization.

D.  

Pressure.

Discussion 0
Question # 37

According to IIA guidance, which of the following strategies would add the least value to the achievement of the internal audit activity's (IAA's) objectives?

Options:

A.  

Align organizational activities to internal audit activities and measure according to the approved IAA performance measures.

B.  

Establish a periodic review of monitoring and reporting processes to help ensure relevant IAA reporting.

C.  

Use the results of IAA engagement and advisory reporting to guide current and future internal audit activities.

D.  

Establish a format and frequency for IAA reporting that is appropriate and aligns with the organization's governance structure.

Discussion 0
Question # 38

An internal auditor determines that certain information from the engagement results is not appropriate for disclosure to all report recipients because it is privileged. In this situation, which of the following actions would be most appropriate?

Options:

A.  

Disclose the information in a separate report.

B.  

Distribute the information in a confidential report to the board only

C.  

Distribute the reports through the use of blind copies.

D.  

Exclude the results from the report and verbally report the conditions to senior management and the board.

Discussion 0
Question # 39

According to IIA guidance, which of the following statements is false regarding a review of the controls in place to prevent fraud?

Options:

A.  

The review should focus on the efficiency of the controls in place to prevent fraud.

B.  

The scope of the review does not need to include all operating areas of the organization.

C.  

The cost of the control should be compared to the benefit of mitigating the related risk.

D.  

The review should assess whether the internal controls can be circumvented.

Discussion 0
Question # 40

A code of business conduct should include which of the following to increase its deterrent effect?

1. Appropriate descriptions of penalties for misconduct.

2. A notification that code of conduct violations may lead to criminal prosecution.

3. A description of violations that injure the interests of the employer.

4. A list of employees covered by the code of conduct.

Options:

A.  

1 and 2

B.  

1 and 3

C.  

2 and 4

D.  

3 and 4

Discussion 0
Question # 41

Which of the following components should be included in an audit finding?

1. The scope of the audit.

2. The standard(s) used by the auditor to make the evaluation.

3. The engagement's objectives.

4. The factual evidence that the internal auditor found in the course of the examination.

Options:

A.  

1 and 2

B.  

1 and 3 only

C.  

2 and 4

D.  

1, 3, and 4

Discussion 0
Question # 42

According to IIA guidance, organizations have the most influence on which element of fraud?

Options:

A.  

Opportunity.

B.  

Rationalization.

C.  

Pressure.

D.  

Incentives.

Discussion 0
Question # 43

A newly promoted chief audit executive (CAE) is faced with a backlog of assurance engagement reports to review for approval. In an attempt to attach a priority for this review, the CAE scans the opinion statement on each report. According to IIA guidance, which of the following opinions would receive the lowest review priority?

1. Graded positive opinion.

2. Negative assurance opinion.

3. Limited assurance opinion.

4. Third-party opinion.

Options:

A.  

1 and 3

B.  

1 and 4

C.  

2 and 3

D.  

2 and 4

Discussion 0
Question # 44

Which of the following statements is false regarding roles and responsibilities pertaining to risk management and control?

Options:

A.  

Senior management is charged with overseeing the establishment risk management and control processes.

B.  

The chief audit executive is responsible for overseeing the evaluation risk management and control processes.

C.  

Operating managers are responsible for assessing risks and controls in their departments.

D.  

Internal auditors provide assurance about risk management and control process effectiveness.

Discussion 0
Question # 45

A chief audit executive is preparing interview questions for the upcoming recruitment of a senior internal auditor. According to IIA guidance, which of the following attributes shows a candidate's ability to probe further when reviewing incidents that have the appearance of misbehavior?

Options:

A.  

Integrity.

B.  

Flexibility.

C.  

Initiative.

D.  

Curiosity.

Discussion 0
Question # 46

Which of the following best describes the four components of a balanced scorecard?

Options:

A.  

Customers, innovation, growth, and internal processes.

B.  

Business objectives, critical success factors, innovation, and growth.

C.  

Customers, support, critical success factors, and learning.

D.  

Financial measures, learning and growth, customers, and internal processes.

Discussion 0
Question # 47

According to IIA guidance, which of the following are the most important objectives for helping to ensure the appropriate completion of an engagement?

1. Coordinate audit team members to ensure the efficient execution of all engagement procedures.

2. Confirm engagement workpapers properly support the observations, recommendations, and conclusions.

3. Provide structured learning opportunities for engagement auditors when possible.

4. Ensure engagement objectives are reviewed for satisfactory achievement and are documented properly.

Options:

A.  

1, 2, and 3

B.  

1, 2, and 4

C.  

1, 3, and 4

D.  

2, 3, and 4

Discussion 0
Question # 48

Which of the following should be included in a privacy audit engagement?

1. Assess the appropriateness of the information gathered.

2. Review the methods used to collect information.

3. Consider whether the information collected is in compliance with applicable laws.

4. Determine how the information is stored.

Options:

A.  

1 and 3 only

B.  

2 and 4 only

C.  

1, 3, and 4 only

D.  

1, 2, 3, and 4

Discussion 0
Question # 49

Which of the following is not an outcome of control self-assessment?

Options:

A.  

Informal, soft controls are omitted, and greater focus is placed on hard controls.

B.  

The entire objectives-risks-controls infrastructure of an organization is subject to greater monitoring and continuous improvement.

C.  

Internal auditors become involved in and knowledgeable about the self-assessment process.

D.  

Nonaudit employees become experienced in assessing controls and associating control processes with managing risks.

Discussion 0
Question # 50

According to IIA guidance, which of the following is least likely to be a key financial control in an organization's accounts payable process?

Options:

A.  

Require the approval of additions and changes to the vendor master listing, where the inherent risk of false vendors is high.

B.  

Monitor amounts paid each period and compare them to the budget to identify potential issues.

C.  

Compare employee addresses to vendor addresses to identify potential employee fraud.

D.  

Monitor customer quality complaints compared to the prior period to identify vendor issues.

Discussion 0
Question # 51

Which of the following is least likely to help ensure that risk is considered in a work program?

Options:

A.  

Risks are discussed with audit client.

B.  

All available information from the risk-based plan is used.

C.  

Client efforts to affect risk management are considered.

D.  

Prior risk assessments are considered.

Discussion 0
Question # 52

An audit identified a number of weaknesses in the configuration of a critical client/server system. Although some of the weaknesses were corrected prior to the issuance of the audit report, correction of the rest will require between 6 and 18 months for completion. Consequently, management has developed a detailed action plan, with anticipated completion dates, for addressing the weaknesses. What is the most appropriate course of action for the chief audit executive to take?

Options:

A.  

Assess the status of corrective action during a follow-up audit engagement after the action plan has been completed.

B.  

Assess the effectiveness of corrections by reviewing statistics related to unplanned system outages, and denials of service.

C.  

Reassign information systems auditors to assist in implementing management's action plan.

D.  

Evaluate the ability of the action plan to correct the weaknesses and monitor key dates and deliverables.

Discussion 0
Question # 53

A draft internal audit report that cites deficient conditions generally should be reviewed with which of the following groups?

1. The client manager and her superior.

2. Anyone who may object to the report’s validity.

3. Anyone required to take action.

4. The same individuals who receive the final report.

Options:

A.  

1 only

B.  

1 and 2 only

C.  

1, 2, and 3

D.  

1, 2, and 4

Discussion 0
Question # 54

A large retail organization, which sells most of its products online, experiences a computer hacking incident. The chief IT officer immediately investigates the incident and concludes that the attempt was not successful. The chief audit executive (CAE) learns of the attack in a casual conversation with an IT auditor. Which of the following actions should the CAE take?

1. Meet with the chief IT officer to discuss the report and control improvements that will be implemented as a result of the security breach, if any.

2. Immediately inform the chair of the audit committee of the security breach, because thus far only the chief IT officer is aware of the incident.

3. Meet with the IT auditor to develop an appropriate audit program to review the organization's Internet-based sales process and key controls.

4. Include the incident in the next quarterly report to the audit committee.

Options:

A.  

1 and 2

B.  

1 and 3

C.  

2 and 4

D.  

3 and 4

Discussion 0
Question # 55

According to IIA guidance, which of the following is true when the internal audit activity is asked to investigate potential ethics violations in a foreign subsidiary?

Options:

A.  

Communication of any internal ethics violations to external parties may occur with appropriate safeguards.

B.  

Cultural impacts are less critical where the organization practices uniform polices around the globe.

C.  

Cross-cultural differences should always be handled by the staff of the same cultural background.

D.  

Local law enforcement should be involved as they are more familiar with the applicable local laws.

Discussion 0
Question # 56

According to IIA guidance, which of the following statements is true regarding the authority of the chief audit executive (CAE) to release previous audit reports to outside parties?

Options:

A.  

The CAE can release prior internal audit reports with the approval of the board and senior management.

B.  

The CAE can employ judgment and release prior audit results as they deem appropriate and necessary.

C.  

The CAE can only release prior information outside the organization when mandated by legal or statutory requirements.

D.  

The CAE can release prior information provided it is as originally published and distributed within the organization.

Discussion 0
Question # 57

The chief audit executive of a medium-sized financial institution is evaluating the staffing model of the internal audit activity (IAA). According to IIA guidance, which of the following are the most appropriate strategies to maximize the value of the current IAA resources?

• The annual audit plan should include audits that are consistent with the skills of the IA

A.  

• Audits of high-risk areas of the organization should be conducted by internal audit staff.

• External resources may be hired to provide subject-matter expertise but should be supervised.

• Auditors should develop their skills by being assigned to complex audits for learning opportunities.

Options:

A.  

1 and 2 only

B.  

1 and 4 only

C.  

2 and 3 only

D.  

3 and 4 only

Discussion 0
Question # 58

According to IIA guidance, which of the following is true regarding the exit conference for an internal audit engagement?

Options:

A.  

A primary purpose of the exit conference is to provide for the timely communication of observations that call for immediate management action.

B.  

Both the chief audit executive and the chief executive over the activity or function reviewed must attend the exit conference to validate the findings.

C.  

The exit conference provides only anticipated results for inclusion in the final audit communication.

D.  

During the exit conference, the performance of the internal auditors who executed the engagement is reviewed.

Discussion 0
Question # 59

Which of the following is the most important concept to be included in a consulting engagement agreement?

Options:

A.  

Define the duties and responsibilities needed from management to perform the engagement.

B.  

Disclose the fact that auditors who perform the work may not be subject matter experts in the topic of the review.

C.  

Clarify that matters discovered during the engagement may also be reported to senior management and the audit committee.

D.  

Disclose the fact that follow-up reviews may be conducted to ensure that recommendations are implemented adequately.

Discussion 0
Question # 60

Which of the following has the greatest effect on the efficiency of an audit?

Options:

A.  

The complexity of deficiency findings.

B.  

The adequacy of preliminary survey information.

C.  

The organization and content of workpapers.

D.  

The method and amount of supporting detail used for the audit report.

Discussion 0
Question # 61

A multinational organization has multiple divisions that sell their products internally to other divisions. When selling internally, which of the following transfer prices would lead to the best decisions for the organization?

Options:

A.  

Full cost

B.  

Full cost plus a markup.

C.  

Market price of the product

D.  

Variable cost plus a markup

Discussion 0
Question # 62

Which of the following statements regarding database management systems is not correct?

Options:

A.  

Database management systems handle data manipulation inside the tables, rather than it being done by the operating system itself in files.

B.  

The database management system acts as a layer between the application software and the operating system.

C.  

Applications pass on the instructions for data manipulation which are then executed by the database management system.

D.  

The data within the database management system can only be manipulated directly by the database management system administrator.

Discussion 0
Question # 63

The critical path for any project is the path that exhibits which of the following characteristics?

Options:

A.  

Has the longest duration in time.

B.  

Costs the most money.

C.  

Requires the largest amount of labor

D.  

Is deemed most important to the project.

Discussion 0
Question # 64

Which of the following statements about matrix organizations is false?

Options:

A.  

In a matrix organization, conflict between functional and product managers may arise.

B.  

In a matrix organization, staff under dual command is more likely to suffer stress at work.

C.  

Matrix organizations offer the advantage of greater flexibility.

D.  

Matrix organizations minimize costs and simplify communication.

Discussion 0
Question # 65

Providing knowledge, motivating organizational members, controlling and coordinating individual efforts, and expressing feelings and emotions are all functions of:

Options:

A.  

Motivation.

B.  

Performance.

C.  

Organizational structure.

D.  

Communication.

Discussion 0
Question # 66

Which of the following is a key characteristic of a zero-based budget?

Options:

A.  

A zero-based budget provides estimates of costs that would be incurred under different levels of activity.

B.  

A zero-based budget maintains focus on the budgeting process.

C.  

A zero-based budget is prepared each year and requires each item of expenditure to be justified.

D.  

A zero-based budget uses input from lower-level and middle-level managers to formulate budget plans.

Discussion 0
Question # 67

Which of the following is the primary benefit of including end users in the system development process?

Options:

A.  

Improved integrity of programs and processing.

B.  

Enhanced ongoing maintenance of the system.

C.  

Greater accuracy of the testing phase.

D.  

Reduced need for unexpected software changes.

Discussion 0
Question # 68

According to Porter's model of competitive strategy, which of the following is a generic strategy?

1. Differentiation.

2. Competitive advantage.

3. Focused differentiation.

4. Cost focus.

Options:

A.  

2 only

B.  

3 and 4 only

C.  

1, 3, and 4 only

D.  

1, 2, 3, and 4

Discussion 0
Question # 69

Which mindset promotes the most comprehensive risk management strategy?

Options:

A.  

Increase shareholder value.

B.  

Maximize market share.

C.  

Improve operational efficiency.

D.  

Mitigate losses.

Discussion 0
Question # 70

Which of the following are typical audit considerations for a review of authentication?

1. Authentication policies and evaluation of controls transactions.

2. Management of passwords, independent reconciliation, and audit trail.

3. Control self-assessment tools used by management.

4. Independent verification of data integrity and accuracy.

Options:

A.  

1, 2, and 3

B.  

1, 2, and 4

C.  

1, 3, and 4

D.  

2, 3, and 4

Discussion 0
Question # 71

An internal auditor discovered that several unauthorized modifications were made to the production version of an organization's accounting application. Which of the following best describes this deficiency?

Options:

A.  

Production controls weakness.

B.  

Application controls weakness.

C.  

Authorization controls weakness.

D.  

Change controls weakness.

Discussion 0
Question # 72

Which of the following describes the free trade zone in an e-commerce environment?

Options:

A.  

Zone that separates an organization's servers from outside forces.

B.  

Area in which messages are scrutinized to determine if they are authorized.

C.  

Area where communication and transactions occur between trusted parties.

D.  

Zone where data is encrypted, users are authenticated, and user traffic is filtered.

Discussion 0
Question # 73

Which of the following is a primary objective of the theory of constraints?

Options:

A.  

Full or near capacity in processes.

B.  

Smooth workflow among processes.

C.  

Few or no defects.

D.  

Lowered inventory levels.

Discussion 0
Question # 74

Which of the following engagement observations would provide the least motivation for management to amend or replace an existing cost accounting system?

Options:

A.  

The distorted unit cost of a service is 50 percent lower than the true cost, while the true cost is 50 percent higher than the competition's cost.

B.  

The organization is losing $1,000,000 annually because it incorrectly outsourced an operation based on information from its current system.

C.  

The cost of rework, hidden by the current system, is 50 percent of the total cost of all services.

D.  

50 percent of total organizational cost has been allocated on a volume basis.

Discussion 0
Question # 75

When an organization is choosing a new external auditor, which of the following is the most appropriate role for the chief audit executive to undertake?

Options:

A.  

Review and acquire the external audit service.

B.  

Assess the appraisal and actuarial services.

C.  

Determine the selection criteria.

D.  

Identify regulatory requirements to be considered.

Discussion 0
Question # 76

Which of the following is always true regarding the use of encryption algorithms based on public key infrastructure (PKI)?

Options:

A.  

PKI uses an independent administrator to manage the public key.

B.  

The public key is authenticated against reliable third-party identification.

C.  

PKI's public accessibility allows it to be used readily for e-commerce.

D.  

The private key uniquely authenticates each party to a transaction.

Discussion 0
Question # 77

Import quotas that limit the quantities of goods that a domestic subsidiary can buy from its foreign parent company represent which type of barrier to the parent company?

Options:

A.  

Political.

B.  

Financial.

C.  

Social.

D.  

Tariff.

Discussion 0
Question # 78

An organization's account for office supplies on hand had a balance of S9,000 at the end of year one. During year two. the organization recorded an expense of $45,000 for purchasing office supplies. At the end of year two. a physical count determined that the organization has $11,500 in office supplies on hand. Based on this information, what would be recorded in the adjusting entry at the end of year two?

Options:

A.  

A debit to office supplies on hand for S2.500

B.  

A debit to office supplies on hand for $11,500

C.  

A debit to office supplies on hand for S20.500

D.  

A debit to office supplies on hand for S42.500

Discussion 0
Question # 79

Which of the following is not a barrier to effective communication?

Options:

A.  

Filtering.

B.  

Communication overload.

C.  

Similar frames of reference.

D.  

Lack of source credibility.

Discussion 0
Question # 80

The most important reason to use risk assessment in audit planning is to:

Options:

A.  

Identify redundant controls.

B.  

Improve budgeting accuracy.

C.  

Enhance assurance provided to management.

D.  

Assist in developing audit programs.

Discussion 0
Question # 81

What kind of strategy would be most effective for an organization to adopt in order to implement a unique advertising campaign for selling identical product lines across all of its markets?

Options:

A.  

Export strategy

B.  

Transnational strategy.

C.  

Multi-domestic strategy

D.  

Globalization strategy.

Discussion 0
Question # 82

Which of the following actions is most likely to gain support for process change?

Options:

A.  

Set clear objectives.

B.  

Engage the various communities of practice within the organization.

C.  

Demonstrate support from senior management.

D.  

Establish key competencies.

Discussion 0
Question # 83

Which of the following is a limiting factor for capacity expansion?

Options:

A.  

Government pressure on organizations to increase or maintain employment.

B.  

Production orientation of management.

C.  

Lack of credible market leader in the industry.

D.  

Company diversification.

Discussion 0
Question # 84

Data encryption is an example of which of the following controls?

Options:

A.  

Application control.

B.  

IT general control

C.  

Data input control

D.  

Data output control

Discussion 0
Question # 85

Which of the following control features consists of a set of authorization codes that distinguishes among actions such as reading, adding, and deleting records?

Options:

A.  

Internally encrypted passwords

B.  

System access privileges.

C.  

Logon passwords

D.  

Protocol controls.

Discussion 0
Question # 86

When writing a business memorandum, the writer should choose a writing style that achieves all of the following except:

Options:

A.  

Draws positive attention to the writing style.

B.  

Treats all receivers with respect.

C.  

Suits the method of presentation and delivery.

D.  

Develops ideas without overstatement.

Discussion 0
Question # 87

Which of the following factors is most responsible for the increasing risk that unauthorized parties may obtain or tamper with personal data?

Options:

A.  

The lack of legal and industry frameworks on privacy.

B.  

The absence of generally accepted privacy principles.

C.  

The rapid growth and evolution of technology.

D.  

The legislated need to retain sensitive personal information.

Discussion 0
Question # 88

Which of the following describes the most appropriate set of tests for auditing a workstation's logical access controls?

Options:

A.  

Review the list of people with access badges to the room containing the workstation and a log of those who accessed the room.

B.  

Review the password length, frequency of change, and list of users for the workstation's login process.

C.  

Review the list of people who attempted to access the workstation and failed, as well as error messages.

D.  

Review the passwords of those who attempted unsuccessfully to access the workstation and the log of their activity.

Discussion 0
Question # 89

According to IIA guidance, which of the following corporate social responsibility (CSR) activities is appropriate for the internal audit activity to perform?

Options:

A.  

Determine the optimal amount of resources for the organization to invest in CSR.

B.  

Align CSR program objectives with the organization's strategic plan.

C.  

Integrate CSR activities into the organization's decision-making process.

D.  

Determine whether the organization has an appropriate policy governing its CSR activities.

Discussion 0
Question # 90

During the last year, an organization had an opening inventory of $300,000, purchases of $980,000, sales of $1,850,000, and a gross margin of 40 percent. What is the closing inventory if the periodic inventory system is used?

Options:

A.  

$170,000

B.  

$280,000

C.  

$300,000

D.  

$540,000

Discussion 0
Get IIA-ACCA dumps and pass your exam in 24 hours!

Free Exams Sample Questions