IIA-CIA-Part1 Practice Questions

A.  

Control activities.

B.  

Information and communication.

C.  

Risk assessment.

D.  

Control environment.

A.  

The CAE must do this at least annually

B.  

The CAE must do this at least once every five years

C.  

The CAE must do this upon completion of each external quality assessment

D.  

The CAE should do this periodically in conjunction with a review of the internal audit charter

A.  

Chair should learn the current organizational culture of the company.

B.  

Chair should learn the current risk management system of the company.

C.  

Chair should determine the appropriateness of the current strategic risks.

D.  

Chair should gain an understanding of the needs of key stakeholders.

A.  

Develop training and system rollout plans in response to the results of the change readiness assessment of a new sales distribution model

B.  

Lead a risk self assessment session for laboratory managers to help identify inherent risks and provide recommendations on how to evaluate the risks

C.  

Audit a third party cloud service provider to review the effectiveness of governance and management controls in providing secure services to its customers

D.  

Conduct a post-implementation assessment of the enterprise resource planning system to determine whether project objectives were met and to identify opportunities to maximize potential benefits

A.  

The auditor should make a note of the issue for follow-up when employee travel expenses are audited.

B.  

The auditor should analyze trends and changes among the organization’s suppliers over the past few years.

C.  

The auditor should investigate whether there are any special arrangements regarding senior management travel.

D.  

The auditor should analyze the list of destinations the department head visited to estimate typical costs.

A.  

External auditors.

B.  

Chief risk officer.

C.  

Operations management.

D.  

Board of directors.

A.  

Risk avoidance risk sharing application of controls, risk application.

B.  

Risk avoidance risk identification application of controls risk acceptance.

C.  

Risk identification risk assessment risk avoidance risk monitoring

D.  

Risk identification risk assessment application of controls risk acceptance

A.  

Retaining evidence of training in the form of continuing education credits

B.  

Seeking guidance regarding internal audit best practices from The IIA

C.  

Retaining supervisory reviews conducted on the basis of the development plan

D.  

Giving consideration to certain areas of specialization as part of development planning

A.  

Assign the engagement to another internal auditor on staff

B.  

Outsource the engagement to ensure independence

C.  

Harness the auditor's knowledge of the procurement function by assigning the engagement to the same internal auditor

D.  

Postpone the engagement to the following year to ensure enough time has passed since the controls were designed

A.  

Assign competent staff to the area under audit to remediate the nonconformance.

B.  

Determine how the deviation impacted the overall scope of the internal audit activity.

C.  

Meet with the board to gam an understanding of the board's expectations.

D.  

Communicate the matter to the board at the time of the next external assessment.