ExamGecko
Home Home / IIA / IIA-CIA-Part2

IIA IIA-CIA-Part2 Practice Test - Questions Answers, Page 39

Question list
Search
Search

List of questions

Search

Related questions











Which of the following activities demonstrates an example of the chief audit executive performing residual risk assessment?

A.
Cost-benefit analysis of management not implementing a recommendation to address an observation.
A.
Cost-benefit analysis of management not implementing a recommendation to address an observation.
Answers
B.
Inquiry of corrective action to be completed within a certain period.
B.
Inquiry of corrective action to be completed within a certain period.
Answers
C.
Reporting the status of every observation for every engagement in a detailed manner.
C.
Reporting the status of every observation for every engagement in a detailed manner.
Answers
D.
Soliciting management's feedback after completion of the audit engagement.
D.
Soliciting management's feedback after completion of the audit engagement.
Answers
Suggested answer: A

When determining the level of staff and resources to be dedicated to an assurance engagement, which of the following would be the most relevant to the chief audit executive?

A.
The overall adequacy of the internal audit activity's resources.
A.
The overall adequacy of the internal audit activity's resources.
Answers
B.
The availability of guest auditors for the engagement.
B.
The availability of guest auditors for the engagement.
Answers
C.
The number of internal auditors used for the previous review of the same area.
C.
The number of internal auditors used for the previous review of the same area.
Answers
D.
The available resources with the specific skill set required.
D.
The available resources with the specific skill set required.
Answers
Suggested answer: D

An internal audit activity plans its engagements based on an organization-wide risk assessment. According to IIA guidance, which of the following statements is true regarding the required frequency of the risk assessment?

A.
The risk assessment must be performed at least quarterly.
A.
The risk assessment must be performed at least quarterly.
Answers
B.
The risk assessment must be performed at least annually.
B.
The risk assessment must be performed at least annually.
Answers
C.
The risk assessment must be performed at least once every five years, in alignment with the internal audit activity's quality assurance and improvement program.
C.
The risk assessment must be performed at least once every five years, in alignment with the internal audit activity's quality assurance and improvement program.
Answers
D.
There is no specific requirement; a risk assessment should be performed as needed to account for changes in the business environment.
D.
There is no specific requirement; a risk assessment should be performed as needed to account for changes in the business environment.
Answers
Suggested answer: D

According to IIA guidance, which of the following describes the primary reason the chief audit executive (CAE) should actively network and build relationships with senior management and the board?

A.
To fulfill the CAE's responsibility to keep the board appropriately informed.
A.
To fulfill the CAE's responsibility to keep the board appropriately informed.
Answers
B.
To expand the CAE's understanding of management issues.
B.
To expand the CAE's understanding of management issues.
Answers
C.
To help maintain the objectivity of the internal audit activity.
C.
To help maintain the objectivity of the internal audit activity.
Answers
D.
To increase opportunities to demonstrate the internal audit activity performance.
D.
To increase opportunities to demonstrate the internal audit activity performance.
Answers
Suggested answer: A

According to IIA guidance, which of the following statements is true regarding engagement planning?

A.
For both assurance and consulting engagements, planning typically occurs after the engagement objectives and scope have already been determined.
A.
For both assurance and consulting engagements, planning typically occurs after the engagement objectives and scope have already been determined.
Answers
B.
The expectations and objectives of an assurance engagement are usually determined by, or in conjunction with, the engagement client.
B.
The expectations and objectives of an assurance engagement are usually determined by, or in conjunction with, the engagement client.
Answers
C.
Internal auditors may not need to complete a preliminary risk assessment for a consulting engagement as they would when planning an assurance engagement.
C.
Internal auditors may not need to complete a preliminary risk assessment for a consulting engagement as they would when planning an assurance engagement.
Answers
D.
For both consulting and assurance engagements, internal auditors usually form the engagement objectives prior to completing the preliminary risk assessment.
D.
For both consulting and assurance engagements, internal auditors usually form the engagement objectives prior to completing the preliminary risk assessment.
Answers
Suggested answer: C

An organization's healthcare insurance costs have been rising approximately 10 percent per year for several years. Which of the following analytical review procedures would best evaluate the reasonableness of the increase in healthcare costs?

A.
Develop a comparison of the costs incurred with similar costs incurred by other organizations.
A.
Develop a comparison of the costs incurred with similar costs incurred by other organizations.
Answers
B.
Obtain the government index of healthcare costs for the comparable period of time and compare the rate of increase with that of the cost per employee incurred by the organization.
B.
Obtain the government index of healthcare costs for the comparable period of time and compare the rate of increase with that of the cost per employee incurred by the organization.
Answers
C.
Obtain a bid from another healthcare administrator to provide the same administrative services as the current healthcare administrator.
C.
Obtain a bid from another healthcare administrator to provide the same administrative services as the current healthcare administrator.
Answers
D.
Review all claims and compare with appropriate procedures to ensure that overpayments have not occurred.
D.
Review all claims and compare with appropriate procedures to ensure that overpayments have not occurred.
Answers
Suggested answer: B

The internal audit activity plans to assess the effectiveness of management's self-assessment activities regarding the risk management process. Which of the following procedures would be most appropriate to accomplish this objective?

A.
Review corporate policies and board minutes for examples of risk discussions.
A.
Review corporate policies and board minutes for examples of risk discussions.
Answers
B.
Conduct interviews with line and senior management on current practices.
B.
Conduct interviews with line and senior management on current practices.
Answers
C.
Research and review relevant industry information concerning key risks.
C.
Research and review relevant industry information concerning key risks.
Answers
D.
Observe and test control and monitoring procedures and related reporting.
D.
Observe and test control and monitoring procedures and related reporting.
Answers
Suggested answer: D

According to IIA guidance, which of the following objectives was most likely formulated for a non-assurance engagement?

A.
The internal audit activity will assess the effects of changes in maintenance strategy on the availability of production equipment.
A.
The internal audit activity will assess the effects of changes in maintenance strategy on the availability of production equipment.
Answers
B.
The internal audit activity will inform management on the possible risks of moving the data warehouse to a cloud server maintained by a third party.
B.
The internal audit activity will inform management on the possible risks of moving the data warehouse to a cloud server maintained by a third party.
Answers
C.
The internal audit activity will ascertain whether the data center security arrangements are compliant with agreed terms.
C.
The internal audit activity will ascertain whether the data center security arrangements are compliant with agreed terms.
Answers
D.
The internal audit activity will ensure equipment downtime risks have been managed in accordance with internal policy.
D.
The internal audit activity will ensure equipment downtime risks have been managed in accordance with internal policy.
Answers
Suggested answer: B

An audit reveals that a manager's spouse is receiving paychecks, but is not employed by the organization. According to IIA guidance, which of the following actions should the internal auditor take?

A.
Contact the external auditor and provide all relevant documentation.
A.
Contact the external auditor and provide all relevant documentation.
Answers
B.
Report the finding to senior management in a timely manner, following the normal chain of command.
B.
Report the finding to senior management in a timely manner, following the normal chain of command.
Answers
C.
Meet with the local manager to obtain more information on the finding before taking further action.
C.
Meet with the local manager to obtain more information on the finding before taking further action.
Answers
D.
Bypass the normal chain of command and contact the board directly to report the finding.
D.
Bypass the normal chain of command and contact the board directly to report the finding.
Answers
Suggested answer: B

Senior IT management requests the internal audit activity to perform an audit of a complex IT are a. The chief audit executive (CAE) knows that the internal audit activity lacks the expertise to perform the engagement. Which of the following is the most appropriate action for the CAE to take?

A.
Decline the audit engagement, because the Standards prohibit internal auditors from performing engagements where they lack the necessary competencies.
A.
Decline the audit engagement, because the Standards prohibit internal auditors from performing engagements where they lack the necessary competencies.
Answers
B.
Accept the audit engagement and use the engagement as an opportunity to develop the audit team's IT expertise while performing the audit work.
B.
Accept the audit engagement and use the engagement as an opportunity to develop the audit team's IT expertise while performing the audit work.
Answers
C.
Temporarily hire an experienced and knowledgeable IT analyst from the organization's IT department to lead the audit.
C.
Temporarily hire an experienced and knowledgeable IT analyst from the organization's IT department to lead the audit.
Answers
D.
Outsource the audit engagement to a reputable IT audit consulting firm.
D.
Outsource the audit engagement to a reputable IT audit consulting firm.
Answers
Suggested answer: D
Total 461 questions
Go to page: of 47