Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Internal Audit Fundamentals Practice Questions

Question # 241

Which of the following best illustrates the application of due professional care during an audit of the procurement department?

Options:

A.  

The internal auditor began checking purchase requisitions for proper authorizations. He stopped when he discovered an instance of noncompliance. and he concluded the controls were ineffective.

B.  

The internal auditor discovered an instance where management did not follow the standard bidding processes. The auditor assessed the validity of management’sreasons for deviating from standard practice and the supporting documentation, and determined that the deviation was acceptable.

C.  

The internal auditor selected a sample of purchase orders with amounts greater than S5.000, the threshold at which the organization requires a bidding process. The auditor obtained documentation of the bidding process for each purchase order in the sample.

D.  

The internal auditor analyzed bidding documents provided by management. Management indicated that the documents were purchase orders issued to a sole-source vendor Based on the analysis and management ' s declaration, the internal auditor determined that the procurement process was effective.

Discussion 0
Question # 242

Which of the following should a general internal auditor be able to characterize as an IT-related risk?

Options:

A.  

Computer servers are in a room that is accessible to all employees,

B.  

An IT architect avoids taking vacations and sharing his workload with coworkers,

C.  

Hours billed by IT developers exceed 24 hours daily.

D.  

Audit logs are lacking in a system that processes personal data.

Discussion 0
Question # 243

A snow removal company is conducting a scenario planning exercise where participating employees consider the potential impacts of a significant reduction in annual snowfall for the coming winter. Which of the following best describes this type of risk?

Options:

A.  

Residual.

B.  

Net.

C.  

Inherent.

D.  

Accepted.

Discussion 0
Question # 244

A large commercial bank was fined by regulators for fraudulent practices when employees, over a period of time, opened thousands of new accounts for existing clients without the clients ' consent. It was later found that employees were given unrealistic new account targets and were aggressively monitored by management on a daily basis.

Which of the following controls would have most likely reduced the likelihood of the fraudulent practice from occurring?

Options:

A.  

An evaluation of the current performance and compensation program.

B.  

The performance of background investigations on all existing employees.

C.  

The availability of fraud training to all employees.

D.  

The availability of an employee whistleblower hotline

Discussion 0
Question # 245

Which of the following is an advantage of using nongovernmental organization (NGO) members on an assurance team when auditing corporate social responsibility?

Options:

A.  

Typically less time is needed to train the NGO members on the audit process.

B.  

NGO members are often more unbiased and objective

C.  

A report with a positive statement from an NGO member is deemed to be more credible. As opposed to auditors.

D.  

NGO members are licensed to audit corporate social responsibility.

Discussion 0
Question # 246

An internal auditor is assessing the effectiveness of the organization ' s risk management practices She checks to see whether risk management is an intégrai part of decision making and whether risk management is transparent, responsive to change and addresses uncertainty. According to HA guidance on risk management frameworks, which of the following approaches is the auditor most likely using?

Options:

A.  

Maturity model approach

B.  

Process element approach

C.  

Key principles approach

D.  

Key performance indicators approach.

Discussion 0
Question # 247

Management decided to post the organization ' s newly established code of conduct on its website. This decision is primarily intended to mitigate which of the following risks?

Options:

A.  

Accountability risk.

B.  

Communication risk.

C.  

Knowledge risk.

D.  

Cultural risk.

Discussion 0
Question # 248

According to IIA guidance, which of the following roles for the internal audit function regarding risk management are acceptable with appropriate safeguards in place?

Options:

A.  

Setting the organization’s risk appetite.

B.  

Determining appropriate risk responses.

C.  

Implementing necessary risk responses.

D.  

Maintaining and developing the risk management framework.

Discussion 0
Question # 249

An internal auditor believes that the internal audit activity ' s independence is impaired. Which of the following actions should the internal auditor take first?

Options:

A.  

Report the impairment to senior management

B.  

Discuss the impairment with the audit manager

C.  

Ascertain the best approach to disclose the impairment.

D.  

Decide on the extent of impact of the impairment

Discussion 0
Question # 250

An internal auditor has received negative feedback regarding the auditor’s lack of general knowledge about the organization’s business during an annual performance review.

What would be the auditor’s best course of action to address the feedback?

Options:

A.  

Agree on a development plan with the chief audit executive.

B.  

Complete all engagements according to the Global Internal Audit Standards.

C.  

Attend external business development courses.

D.  

Request a temporary assignment into a specific business area.

Discussion 0
Question # 251

The chief audit executive (CAE) has hired a new internal auditor who was immediately assigned to a procurement function audit. Because the new auditor ' s name is similar to that of the procurement manager, some staff members think the two are related, although they are not. Which of the following actions is most appropriate for the CAE to take?

Options:

A.  

Take no action, as there is no impairment to independence.

B.  

Remove the new internal auditor from the engagement team.

C.  

Discuss the matter with the appropriate personnel to alleviate concerns.

D.  

Closely supervise the new auditor and carefully review his work.

Discussion 0
Question # 252

Which of the following actions by an internal auditor would be the most relevant to determine the effectiveness of controls?

Options:

A.  

Participate in a fraud risk-assessment session as an in-house facilitator.

B.  

Send regular written updates to senior management on new control-related regulations.

C.  

Lead a seminar on internal controls and provide numerous examples to the audience.

D.  

Conduct a surprise inventory count at the raw materials warehouse.

Discussion 0
Question # 253

Which finding indicates a potential deficiency in an organization’s internal control framework?

Options:

A.  

Internal audits are scheduled every two years because the organization operates in a stable and low-risk industry.

B.  

IT management is not involved in the risk assessment process involving the IT systems.

C.  

The organization chooses to avoid high-risk business opportunities to maintain a low risk profile.

D.  

The organization uses a third-party service provider to perform some of its manufacturing operations.

Discussion 0
Question # 254

Which of the following best describes organizational governance processes?

Options:

A.  

Processes employed by internal and external assurance providers to authorize, direct, and provide oversight to management to better enable the meeting of organizational objectives

B.  

Processes employed by the board of directors to authorize and provide guidance and oversight to management to promote the achievement of organizational objectives.

C.  

Processes employed by the board of directors and senior management to mitigate risks to acceptable levels.

D.  

Processes employed by risk owners to mitigate risks to acceptable levels within the organization ' s risk appetite

Discussion 0
Question # 255

In the COSO internal control framework, which of the following components serves as the foundation for the other components?

Options:

A.  

Control activities.

B.  

Control environment.

C.  

Risk assessment.

D.  

Monitoring

Discussion 0
Question # 256

Which of the following tools would be most useful to an internal auditor performing an assessment of the effectiveness of the organization ' s risk responses?

Options:

A.  

Heat map.

B.  

Risk and control matrix.

C.  

Risk register.

D.  

Process map.

Discussion 0
Question # 257

Which of the following is a true statement regarding whistleblowing?

Options:

A.  

Whistleblowing is one of several possible ethical structures an organization can undertake to encourage ethical behavior.

B.  

Whistleblowing programs help employees deal with ethical questions and instill ethical values into everyday behavior

C.  

Whistleblowers are current or former employees who are disgruntled and looking to retaliate.

D.  

Whistleblowers should inform the organization about actual criminal circumstances, not assumed allegations

Discussion 0

IIA-CIA-Part1 PDF

IIA-CIA-Part1 PDF (Printable)
$46.5
$154.99

IIA-CIA-Part1 Testing Engine

IIA-CIA-Part1 PDF (Printable)
$51
$169.99

IIA-CIA-Part1 PDF + Testing Engine

IIA-CIA-Part1 PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions