Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Internal Audit Fundamentals Practice Questions

Question # 121

Which of the following statements is true regarding reporting results of the quality assurance and improvement program to senior management and the board?

Options:

A.  

Internal assessments must be reported to the board at least every five years

B.  

If supported by assessment results, reporting provides assurance that internal auditors demonstrate conformance with the Code of Ethics

C.  

Following the reporting the board must give the internal audit activity five years to correct any deviations

D.  

A report, including the results of both internal and external assessments must be provided to the board annually

Discussion 0
Question # 122

A global manufacturing company has three regional offices. The chief audit executive (CAE) is concerned about the cost of an upcoming external quality assessment of the internal audit activity. The last external assessment was performed six years ago. Recently, the internal audit staff at one of the regional offices performed an internal assessment. To ensure conformance with the Standards, what is the most appropriate action for the CAE to take?

Options:

A.  

Request from the audit committee an additional budget and an extension so that the external assessment could be performed next year.

B.  

Review the results of the internal assessment, identify weaknesses, and implement improvements at the remaining offices.

C.  

Request the regional office that performed the internal assessment to perform an assessment of the remaining offices.

D.  

Request that an external assessor validate the results of the internal assessment and review the remaining offices.

Discussion 0
Question # 123

Which of the following best illustrates the principle of due professional care?

Options:

A.  

The internal audit activity uses key performance indicators for all staff members after all audit engagements.

B.  

The internal auditors provide assurance to third parties indicating that their work was properly supervised.

C.  

The internal auditors demonstrate they have an understanding of engagement objectives and scope.

D.  

The internal auditors are heavily involved in training and development to enhance their skills.

Discussion 0
Question # 124

Which of the following is most accurate concerning corporate social responsibility?

Options:

A.  

A moral agent in an organization makes decisions that are based on the rules and regulations of the organization as they apply to human resources decisions

B.  

The utilitarian approaching deciding on ethical dilemmas is concerned with choosing the simplest solution that will apply to the most people

C.  

Ethics are not defined by laws but they are not a matter of free choice ethics are based on standards of conduct derived from shared principles and values

D.  

The individualism approach to ethical decision making is focused on implementing a customized long-term outcome that is most beneficial for the entire organization

Discussion 0
Question # 125

What is expected of internal auditors in regards to due professional care?

Options:

A.  

Auditors perform assurance services without regard to cost

B.  

Auditors perform assurance services effectively to identify all risks

C.  

Auditors perform assurance services needed to achieve the engagement ' s objectives

D.  

Auditors perform assurance services to guarantee all significant risks will be addressed

Discussion 0
Question # 126

An organization sells products through distributors. The organization ' s chief audit executive insists that the organization ' s code of conduct be applicable to their distributors as well. Which of the following risks would this mitigate?

Options:

A.  

Business continuity

B.  

Market manipulation

C.  

intellectual property leakage

D.  

Reputational damage

Discussion 0
Question # 127

Which of the following statements related to organization wide risk management and control is true?

Options:

A.  

Organizationwide risk management is a function or department.

B.  

Organizationwide risk management addresses more than internal control.

C.  

Organizationwide risk management sets adequate controls to ensure all risks are avoided.

D.  

Organizationwide risk management is the checklist used during the risk and control self-assessment exercise.

Discussion 0
Question # 128

The chief audit executive of a large national retailer is reviewing the purpose and objectives of the organization ' s internal audit activity

Which of the following objectives is best aligned with The IIA ' s Mission of Internal Audit?

Options:

A.  

To implement a quality assurance and improvement program

B.  

To assess the effectiveness of internal controls over organizational assets

C.  

To ensure internal auditors possess the competencies needed to perform their responsibilities

D.  

To operate within the budget established by the board of directors

Discussion 0
Question # 129

Which of the following statements is true regarding organization wide risk management?

Options:

A.  

Risk management is a function centralized at the top-level of management.

B.  

Risk management centers on inventorying the applicable risks to the organization.

C.  

Risk management is complementary to the system of internal controls.

D.  

Risk management centers on governance and culture.

Discussion 0
Question # 130

An e-commerce organization decides to conclude a contracting relationship with a service provider. The service provider offered continuous 24/7 after-sales troubleshooting services to customers.

What type of review can the internal audit function perform to assure that the service provider fulfilled its contractual obligations?

Options:

A.  

Third-party review.

B.  

Due diligence review.

C.  

Benchmarking review.

D.  

Organizational culture review.

Discussion 0
Question # 131

The chief risk officer (CRO) requested the internal audit function’s assistance during the implementation of the organization’s risk management process. The board wants the CRO and chief audit executive to define what the internal audit function’s role will be before it approves or denies the request.

Which of the following internal audit roles would be the most appropriate in this scenario?

Options:

A.  

Create and maintain the risk management framework, methodology, and techniques.

B.  

Use internal audit’s assurance engagements to enforce compliance with the risk management framework.

C.  

Conduct self-assessment workshops to facilitate the identification and evaluation of risks.

D.  

Define management’s appropriate responses to risks.

Discussion 0
Question # 132

A chief audit executive has decided to use the process element approach to evaluate the organization’s risk management process.

According to IIA guidance, which of the following provides evidence that the risk evaluation element is in place?

Options:

A.  

The organization has made a decision with regard to risk avoidance, risk sharing, and application of controls to manage risk.

B.  

The organization has developed a mechanism to rank the relative importance of each risk in order to establish a risk treatment priority.

C.  

The organization has developed a formal technique that considers the consequences and likelihood of each risk.

D.  

The organization has established a formal process that considers the source of risk, areas of impact, and potential events.

Discussion 0
Question # 133

According to IIA guidance which of the following correctly describes the standard risk treatments outlined in the process element approach of the framework for risk management?

Options:

A.  

Risk avoidance risk sharing application of controls, risk application.

B.  

Risk avoidance risk identification application of controls risk acceptance.

C.  

Risk identification risk assessment risk avoidance risk monitoring

D.  

Risk identification risk assessment application of controls risk acceptance

Discussion 0
Question # 134

Which of the following must be in existence as a precondition to developing an effective system of internal controls?

Options:

A.  

A monitoring process,

B.  

A risk assessment process.

C.  

A strategic objective-setting process.

D.  

An information and communication process.

Discussion 0
Question # 135

In a small company with a small budget, the board and senior management asked the chief audit executive (CAE) to develop specific controls prompted by a new regulatory requirement affecting a specific process. The CAE was also directed to report functionally to senior management. An audit engagement on this process was already set in the internal audit plan. Which of the following represents an impairment to the internal audit activity ' s independence?

Options:

A.  

The development of controls by the CA

E.  

B.  

The audit engagement regarding this process.

C.  

The functional reporting of the CAE to senior management.

D.  

The small budget.

Discussion 0
Question # 136

An organization is considering the acquisition of a target organization. Senior management asks the internal audit function to advise on the target organization’s information security practices.

What type of internal audit service is this?

Options:

A.  

System development.

B.  

Process reengineering.

C.  

Due diligence.

D.  

Benchmarking.

Discussion 0
Question # 137

Which of the following requests, if accepted by the internal audit activity, would impair its independence?

Options:

A.  

A request to develop workshops on corporate governance for management.

B.  

A request to act as liaison with external auditors.

C.  

A request to determine appropriate risk management responses for management.

D.  

A request to provide counseling services on ethical matters.

Discussion 0
Question # 138

An internal auditor assigned to a supplier management process engagement reviews the risk assessment with the process owner The auditor inquires about the risk response for potentially engaging unqualified third-party service providers The process owner responds that due diligence checks are undertaken to make sure that third parties possess requisite competencies before they are engaged Which of the following risk management techniques is the process owner using?

Options:

A.  

Risk avoidance

B.  

Risk reduction

C.  

Risk sharing

D.  

Risk acceptance

Discussion 0
Question # 139

The head of human resources notified the internal audit activity that a key account manager was fired because he did not register a large number of contracts with clients As a result the organization was unaware of its duties and would suffer some financial loss Which of the following should be expected from a competent internal auditor who is analyzing this situation?

Options:

A.  

The ability to apply forensic methods to obtain legally admissible evidence

B.  

The ability to conduct admission-seeking interviews with potential suspects

C.  

The ability to evaluate whether such attributes as intent and personal gain were present

D.  

The ability to retrieve concealed or deleted information from the former employee ' s laptop

Discussion 0
Question # 140

Which of the following is an example of a detective control?

Options:

A.  

Automatic shut-off valve.

B.  

Auto-correct software functionality.

C.  

Confirmation with suppliers and vendors.

D.  

Safety instructions.

Discussion 0

IIA-CIA-Part1 PDF

IIA-CIA-Part1 PDF (Printable)
$46.5
$154.99

IIA-CIA-Part1 Testing Engine

IIA-CIA-Part1 PDF (Printable)
$51
$169.99

IIA-CIA-Part1 PDF + Testing Engine

IIA-CIA-Part1 PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions