IIA-CIA-PART2 Exam Questions
462 real IIA-CIA-PART2 exam questions with expert-verified answers and explanations. Page 1 of 10.
- Question #1Managing the Internal Audit Activity
According to IIA guidance,which of the following is true about the supervising internal auditor's review notes? 1. They are discussed with management prior to finalizing the audit....
working papersreview notessupervisiondocumentation - Question #2Performing the Engagement
During a fraud interview, it was discovered that unquestioned authority enabled a vice president to steal funds from the organization. Which of the following best describes this co...
fraud triangleopportunityfraud investigationundue authority - Question #3Communicating Engagement Results and Monitoring Progress
According to IIA guidance, which of the following are appropriate actions for the chief audit executive regarding management's response to audit recommendations?
management responseaudit recommendationsfollow-upCAE responsibilities - Question #4Managing the Internal Audit Activity
According to the Standards, which of the following is leastimportant in determining the adequacy of an annual audit plan?
annual audit planplanning criteriaresource allocationStandards - Question #5Communicating Engagement Results and Monitoring Progress
The newly appointed chief audit executive (CAE) of a large multinational corporation, with seasoned internal audit departments located around the world, is reviewing responsibiliti...
engagement reportCAE delegationreport approvalmultinational audit - Question #6Managing the Internal Audit Activity
The internal audit activity (IAA) wants to measure its performance related to the quality of audit recommendations. Which of the following client survey questions would best help t...
performance measurementclient surveyrecommendation qualityquality assurance - Question #7Performing the Engagement
When forming an opinion on the adequacy of management's systems of internal control, which of the following findings would provide the most reliable assurance to the chief audit ex...
internal control opinionfollow-up auditcontrol adequacyCAE assurance - Question #8Communicating Engagement Results and Monitoring Progress
An internal auditor and engagement client are deadlocked over the auditor's differing opinion with management on the adequacy of access controls for a major system. Which of the fo...
conflict resolutiondiffering opinionaccess controlsdispute escalation - Question #9Planning the Engagement
When setting the scope for the identification and assessment of key risks and controls in a process, which of the following would be the least appropriate approach?
audit scoperisk identificationkey controlsbottom-up approach - Question #10Performing the Engagement
According to IIA guidance, which of the following is true when the internal audit activity is asked to investigate potential ethics violations in a foreign subsidiary?
ethics investigationforeign subsidiarycross-culturalconfidentiality - Question #11Managing the Internal Audit Activity
The chief audit executive of a medium-sized financial institution is evaluating the staffing model of the internal audit activity (IAA). According to IIA guidance, which of the fol...
IAA staffing modelexternal resourcesskill developmentCAE strategy - Question #12Managing the Internal Audit Activity
It is close to the fiscal year end for a government agency, and the chief audit executive (CAE) has the following items to submit to either the board or the chief executive officer...
CAE compensationboard reportingCEO reportinggovernance structure - Question #13Performing the Engagement
An internal control questionnaire would be most appropriate in which of the following situations?
internal control questionnaireaudit toolsdecentralized officescontrol testing - Question #14Communicating Engagement Results and Monitoring Progress
According to IIA guidance, which of the following statements is true regarding the authority of the chief audit executive (CAE) to release previous audit reports to outside parties...
audit report releaseexternal partiesCAE authorityconfidentiality - Question #15Performing the Engagement
An internal auditor has been assigned to facilitate a risk and control self-assessment for the finance group. Which of the following is the most appropriate role that she should as...
RCSA facilitationself-assessmentauditor roleworkshop - Question #16Communicating Engagement Results and Monitoring Progress
An audit identified a number of weaknesses in the configuration of a critical client/server system. Although some of the weaknesses were corrected prior to the issuance of the audi...
corrective action monitoringfollow-up engagementIT systemsCAE oversight - Question #17Performing the Engagement
Which of the following is not an outcome of control self-assessment?
control self-assessmentCSA outcomessoft controlshard controls - Question #18Managing the Internal Audit Activity
A code of business conduct should include which of the following to increase its deterrent effect? 1. Appropriate descriptions of penalties for misconduct. 2. A notification that c...
code of conductdeterrencemisconduct penaltiesethics program - Question #19Planning the Engagement
New environmental regulations require the board to certify that the organization's reported pollutant emissions data is accurate. The chief audit executive (CAE) is planning an aud...
audit scopeenvironmental compliancesubject matter expertregulatory assurance - Question #20Managing the Internal Audit Activity
The board has asked the internal audit activity (IAA) to be involved in the organization's enterprise risk management process. Which of the following activities is appropriate for...
ERMIAA independenceobjectivity safeguardsrisk management role - Question #21Planning the Engagement
According to IIA guidance, which of the following statements are true regarding the internal audit plan? 1. The audit plan is based on an assessment of risks to the organization. 2...
audit planrisk-based planningIIA Standardsaudit objectives - Question #22Managing the Internal Audit Activity
An internal auditor is assessing the organization's risk management framework. Which of the following formulas should he use to calculate the residual risk? A. B. C. D.
residual riskrisk calculationrisk management frameworkinherent risk - Question #23Managing the Internal Audit Activity
Which of the following statements is false regarding roles and responsibilities pertaining to risk management and control?
risk management rolesboard oversightsenior managementIIA Standards - Question #24Conducting the Internal Audit Engagement
Which of the following should be included in a privacy audit engagement? 1. Assess the appropriateness of the information gathered. 2. Review the methods used to collect informatio...
privacy auditinformation collectioncompliancedata storage - Question #25Conducting the Internal Audit Engagement
Due to price risk from the foreign currency purchase of aviation fuel, an airliner has purchased forward contracts to hedge against fluctuations in the exchange rate. When recalcul...
hedge accountingforward contractsexchange rateforeign currency risk - Question #26Planning the Engagement
Which of the following statements describes an engagement planning best practice?
engagement planningaudit objectivesplanning best practicesaudit client - Question #27Planning the Engagement
Which of the following is not a primary purpose for conducting a walk-through during the initial stages of an assurance engagement?
walk-throughprocess mappingsegregation of dutiescontrol testing - Question #28Managing the Internal Audit Activity
After the team member who specialized in fraud investigations left the internal audit team, the chief audit executive decided to outsource fraud investigations to a third party ser...
outsourcingfraud investigationthird-party service providerinstitutional knowledge - Question #29Conducting the Internal Audit Engagement
Which of the following is an effective approach for internal auditors to take to improve collaboration with audit clients during an engagement? 1. Obtain control concerns from the...
client collaborationaudit scopeengagement communicationaudit planning - Question #30Communicating Engagement Results and Monitoring Progress
According to IIA guidance, which of the following is true regarding the exit conference for an internal audit engagement?
exit conferenceaudit communicationengagement resultsIIA Standards - Question #31Communicating Engagement Results and Monitoring Progress
Which of the following components should be included in an audit finding? 1. The scope of the audit. 2. The standard(s) used by the auditor to make the evaluation. 3. The engagemen...
audit findingcriteriaevidenceengagement documentation - Question #32Communicating Engagement Results and Monitoring Progress
A newly promoted chief audit executive (CAE) is faced with a backlog of assurance engagement reports to review for approval. In an attempt to attach a priority for this review, the...
audit opinionassurance reportCAE reviewopinion types - Question #33Communicating Engagement Results and Monitoring Progress
After finalizing an assurance engagement concerning safety operations in the oil mining process, the audit team concluded that no key controls were compromised. However, some oppor...
audit reportingpositive opinionmanagement communicationaudit committee - Question #34Communicating Engagement Results and Monitoring Progress
While conducting an audit of a third party's Web-based payment processor, an internal auditor discovers that a programming error allows customers to create multiple accounts for a...
follow-up reviewcorrective actionmanagement responsemonitoring - Question #35Conducting the Internal Audit Engagement
An internal auditor is conducting a review of the procurement function and uncovers a potential conflict of interest between the chief operating officer and a significant supplier...
conflict of interestaudit scopeescalationprocurement audit - Question #36Managing the Internal Audit Activity
A large retail organization, which sells most of its products online, experiences a computer hacking incident. The chief IT officer immediately investigates the incident and conclu...
cybersecurity incidentCAE responsibilitiesaudit committee reportingIT security - Question #37Conducting the Internal Audit Engagement
During an assurance engagement, an internal auditor noted that the time staff spent accessing customer information in large Excel spreadsheets could be reduced significantly throug...
consulting vs assuranceobjectivityadvisory servicesengagement scope - Question #38Managing the Internal Audit Activity
According to IIA guidance, which of the following strategies would add the least value to the achievement of the internal audit activity's (IAA's) objectives?
IAA strategyvalue-added auditingperformance measurementaudit reporting - Question #39Managing the Internal Audit Activity
According to IIA guidance, which of the following statements best justifies a chief audit executive's request for external consultants to complement internal audit activity (IAA) r...
external consultantsIAA resourcesaudit universestaffing strategy - Question #40Managing the Internal Audit Activity
The chief audit executive (CAE) of a small internal audit activity (IAA) plans to test conformance with the Standards through a quality assurance review. According to the Standards...
quality assurance reviewself-assessmentexternal validationStandards conformance - Question #41Managing the Internal Audit Activity
A large investment organization hired a chief risk officer (CRO) to be responsible for the organization's risk management processes. Which of the following people should prioritize...
audit planrisk managementCAE roleCRO responsibilities - Question #42Managing the Internal Audit Activity
Which of the following actions are appropriate for the chief audit executive to perform when identifying audit resource requirements? 1. Consider employees from other operational a...
audit resourcesexternal service providersco-sourcingCAE responsibilities - Question #43Planning the Engagement
The chief risk officer (CRO) of a large manufacturing organization decided to facilitate a workshop for process managers and staff to identify opportunities for improving productiv...
workshop facilitationrisk identificationprocess improvementengagement planning - Question #44Planning the Engagement
Which of the following is the primary purpose of financial statement audit engagements?
financial statement auditaudit engagement typesaudit objectives - Question #45Communicating Engagement Results and Monitoring Progress
An internal auditor notes that employees continue to violate segregation-of-duty controls in several areas of the finance department, despite previous audit recommendations. Which...
segregation of dutiesaudit recommendationsawareness trainingfinance controls - Question #46Planning the Engagement
Which of the following has the greatest effect on the efficiency of an audit?
audit efficiencypreliminary surveyaudit planningworkpapers - Question #47Planning the Engagement
Which of the following is least likely to help ensure that risk is considered in a work program?
risk-based auditwork programrisk assessmentaudit client - Question #48Managing the Internal Audit Activity
An internal auditor is conducting an assessment of the purchasing department. She has worked the full amount of hours budgeted for the engagement; however, the audit objectives are...
engagement supervisionaudit budgetCAE oversightaudit objectives - Question #49Managing the Internal Audit Activity
Which of the following factors would the auditor in charge be least likely to consider when assigning tasks to audit team members for an engagement?
task assignmentaudit team managementauditor availabilityresource planning - Question #50Planning the Engagement
An organization's internal audit plan includes a recurring assurance review of the human resources (HR) department. Which of the following statements is true regarding preliminary...
preliminary communicationaudit client notificationengagement scopeauditor in charge