ExamGecko
Home Home / IIA / IIA-CIA-Part1

IIA IIA-CIA-Part1 Practice Test - Questions Answers, Page 28

Question list
Search
Search

List of questions

Search

Related questions











Which of the following statements is true regarding the disclosure of results of the quality assurance and improvement program?

A.
If the results of both internal and external assessments support conformance with the Standards, the internal audit activity must communicate this to the board and senior management in writing.
A.
If the results of both internal and external assessments support conformance with the Standards, the internal audit activity must communicate this to the board and senior management in writing.
Answers
B.
If it has been in existence fewer than five years and has no documented external assessment, the internal audit activity may not indicate that it is operating in conformance with the Standards.
B.
If it has been in existence fewer than five years and has no documented external assessment, the internal audit activity may not indicate that it is operating in conformance with the Standards.
Answers
C.
If nonconformance affects its ability to fulfill its professional responsibilities or stakeholder expectations, the internal audit activity should disclose nonconformance as well as its impact.
C.
If nonconformance affects its ability to fulfill its professional responsibilities or stakeholder expectations, the internal audit activity should disclose nonconformance as well as its impact.
Answers
D.
If an external assessment reflects an overall conclusion of nonconformance, the internal audit activity may continue to communicate that it conforms with the Standards if it discloses a remediation plan, including timeline with subsequent validation.
D.
If an external assessment reflects an overall conclusion of nonconformance, the internal audit activity may continue to communicate that it conforms with the Standards if it discloses a remediation plan, including timeline with subsequent validation.
Answers
Suggested answer: C

Following a quality assurance review of a small internal audit activity, the external reviewer and the chief audit executive (CAE) cannot agree on the importance of several deficiencies noted during the review. Which of the following would be the most appropriate next step for the reviewer to take?

A.
Remove the areas of disagreement from the scope of the engagement and seek informal compromises with the CAE.
A.
Remove the areas of disagreement from the scope of the engagement and seek informal compromises with the CAE.
Answers
B.
Issue the report to senior management, noting the deficiencies for immediate resolution.
B.
Issue the report to senior management, noting the deficiencies for immediate resolution.
Answers
C.
Issue the report, noting the deficiencies with comments that address the areas of disagreement.
C.
Issue the report, noting the deficiencies with comments that address the areas of disagreement.
Answers
D.
Request arbitration from the audit committee to resolve discrepancies prior to issuing the final report
D.
Request arbitration from the audit committee to resolve discrepancies prior to issuing the final report
Answers
Suggested answer: D

Which of the following activities should the chief audit executive perform to ensure compliance with an organization's code of conduct?

A.
Act as an advisor to the committee responsible for reviewing violations of the code.
A.
Act as an advisor to the committee responsible for reviewing violations of the code.
Answers
B.
Review and adjudicate all violations of the code of conduct.
B.
Review and adjudicate all violations of the code of conduct.
Answers
C.
Lead the committee responsible for the oversight of the code.
C.
Lead the committee responsible for the oversight of the code.
Answers
D.
Implement a system of procedures to inform all employees of the code.
D.
Implement a system of procedures to inform all employees of the code.
Answers
Suggested answer: A

Which of the following best demonstrates the authority of the internal audit activity?

A.
Suggesting alternatives to decision makers.
A.
Suggesting alternatives to decision makers.
Answers
B.
Improving the integrity of information.
B.
Improving the integrity of information.
Answers
C.
Determining the scope of internal audit services
C.
Determining the scope of internal audit services
Answers
D.
Achieving engagement objectives.
D.
Achieving engagement objectives.
Answers
Suggested answer: C

Which of the following would the chief audit executive be required to disclose in the communication of quality assessment results to senior management and the board?

A.
The cost and frequency of both internal and external assessments.
A.
The cost and frequency of both internal and external assessments.
Answers
B.
Any assumptions made by the assessment team
B.
Any assumptions made by the assessment team
Answers
C.
A potential conflict of interest of the assessment team.
C.
A potential conflict of interest of the assessment team.
Answers
D.
The assessment team's execution plan of relevant procedures.
D.
The assessment team's execution plan of relevant procedures.
Answers
Suggested answer: C

Outsourcing a business activity is considered which of the following risk management techniques?

A.
Sharing a risk.
A.
Sharing a risk.
Answers
B.
Avoiding a risk.
B.
Avoiding a risk.
Answers
C.
Reducing a risk.
C.
Reducing a risk.
Answers
D.
Mitigating a risk
D.
Mitigating a risk
Answers
Suggested answer: A

An internal auditor performed a risk assessment and concluded that the controls over access privileges to a bank account were appropriate. Later, the auditor learned that a contractor was using a shared password provided by an authorized user of the account. Which of the following statements best describes the auditor's application of due professional care?

A.
Due professional care was exercised, despite the auditor's failure to identify the significant risk.
A.
Due professional care was exercised, despite the auditor's failure to identify the significant risk.
Answers
B.
Due professional care was not exercised because the auditor failed to identify all the significant risks during the risk assessment.
B.
Due professional care was not exercised because the auditor failed to identify all the significant risks during the risk assessment.
Answers
C.
Due professional care was not exercised because the residual risk from the possibility of authorized users sharing their passwords was not considered.
C.
Due professional care was not exercised because the residual risk from the possibility of authorized users sharing their passwords was not considered.
Answers
D.
Due professional care was not exercised because the auditor failed to conduct interviews to obtain testimonial evidence of possible password sharing
D.
Due professional care was not exercised because the auditor failed to conduct interviews to obtain testimonial evidence of possible password sharing
Answers
Suggested answer: C

Which competency is required of all staff internal auditors prior to the commencement of an IT audit?

A.
The ability to assess IT governance.
A.
The ability to assess IT governance.
Answers
B.
The ability to provide an on the risk profile of the organization to the board and senior management.
B.
The ability to provide an on the risk profile of the organization to the board and senior management.
Answers
C.
The ability to ensure that proposals for improvements to internal controls are balanced with organizational objectives and capabilities.
C.
The ability to ensure that proposals for improvements to internal controls are balanced with organizational objectives and capabilities.
Answers
D.
The ability to assess the potential for fraud risk and identifying common types of fraud associated with the engagement.
D.
The ability to assess the potential for fraud risk and identifying common types of fraud associated with the engagement.
Answers
Suggested answer: A

According to IIA guidance, which of the following is the primary reason the chief audit executive discusses the internal audit charter with senior management and the board?

A.
To provide guidance and solicit feedback on managing the internal audit activity as expected by various stakeholders.
A.
To provide guidance and solicit feedback on managing the internal audit activity as expected by various stakeholders.
Answers
B.
To provide an understanding of the Mission of Internal Audit and The IIA's mandatory guidance elements.
B.
To provide an understanding of the Mission of Internal Audit and The IIA's mandatory guidance elements.
Answers
C.
To provide an update on the internal audit activity's quality of engagement supervision.
C.
To provide an update on the internal audit activity's quality of engagement supervision.
Answers
D.
To provide information on existing internal audit planning, changes to the internal audit plan, and the rationale for the changes
D.
To provide information on existing internal audit planning, changes to the internal audit plan, and the rationale for the changes
Answers
Suggested answer: D

A significant number of employees expressed concerns of a hostile work environment within a large manufacturing plant, which is in contrast to the organization's stated culture of tolerance and open communication. Which of the following approaches would be most effective for an internal auditor to assess whether the organization supports a culture of tolerance and open communication?

A.
Assess plant employees' social media activity for specific messages related to tolerance and open communication
A.
Assess plant employees' social media activity for specific messages related to tolerance and open communication
Answers
B.
Compare plant employees' compensation and benefits with those at similar sized organizations that have a stated culture of tolerance and open communication.
B.
Compare plant employees' compensation and benefits with those at similar sized organizations that have a stated culture of tolerance and open communication.
Answers
C.
Evaluate organization policies and procedures for references related to encouraging tolerance and open communication.
C.
Evaluate organization policies and procedures for references related to encouraging tolerance and open communication.
Answers
D.
Conduct a meeting with all plant employees and management to discuss tolerance and open communication
D.
Conduct a meeting with all plant employees and management to discuss tolerance and open communication
Answers
Suggested answer: C
Total 758 questions
Go to page: of 76