IIA IIA-CIA-PART2 Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART2 Online Questions & Answers

• Question 341:

  After completing the fieldwork of an assurance engagement, an internal auditor is preparing the audit report. According to the Standards, which of the following is an optional inclusion in an internal audit report as part of the final communications to senior management?

  A. The audit objectives of the engagement.
  B. The background on the subject reviewed.
  C. The results of the audit work.
  D. The scope of the engagement.
  B. The background on the subject reviewed.

• Question 342:

  A fast-food company is developing a computer simulation involving the arrival time at a drive-through restaurant. The distribution for time between arrivals is given below:

  

  Six random numbers are selected to represent the arrival of six cars: 1, 6, 9, 0, 5, 6

  The mean time between arrivals for these cars, in this run of the simulation model, is:

  A. 1 minute
  B. 2 minutes
  C. 3 minutes.
  D. 4 minutes
  C. 3 minutes.

• Question 343:

  An internal auditor wanted to determine whether company vehicles were being used for personal purposes. She extracted a report that listed company vehicle numbers, the business units to which the vehicles are allocated, travel dates,

  travel duration, and mileage. She then filtered the data for weekend dates.

  Which of the following additional pieces of information would the auditor need?

  A. Names and work titles of employees
  B. Description of responsibilities of business units.
  C. Average fuel consumption data of vehicles
  D. Location and route data of vehicles
  D. Location and route data of vehicles

• Question 344:

  According to the International Professional Practices Framework, which of the following statements is true regarding the use of the statement, "Conducted in Conformance with the International Standards for the Professional Practice of Internal Auditing," when communicating results of a seven- year-old internal audit activity?

  A. The statement may be used only when conducting international engagements.
  B. The statement may be used only if the results of the quality assurance and improvement program support the statement.
  C. The statement may be used whether or not the internal audit department has an external quality assessment review or an independent validation of a self- assessment.
  D. The statement should not be used for a consulting engagement.
  B. The statement may be used only if the results of the quality assurance and improvement program support the statement.

• Question 345:

  An internal auditor is examining the organization's internal control processes. Which of the following would the auditor do to test the reliability of a customer database?

  A. Perform a site visit to see whether the organization's servers are operational
  B. Interview end users to determine whether they understand how to use the database information
  C. Determine whether policies are in place on how to use the database information
  D. Review for indications of potential issues with the database information
  D. Review for indications of potential issues with the database information

• Question 346:

  An internal auditor is testing for proper authorization of contracts and finds that the rate of deviations discovered in the sample is equal to the tolerable deviation rate. Which of the following is the most appropriate conclusion for the internal auditor to make based on this result?

  A. The internal auditor concludes that management may be placing undue reliance on the specified control.
  B. The internal auditor concludes that the specified control is more effective than it really is.
  C. The internal auditor concludes that the specified control is acceptably effective.
  D. The internal auditor concludes that additional testing will be required to evaluate the specified control.
  C. The internal auditor concludes that the specified control is acceptably effective.

• Question 347:

  An internal auditor was assigned to assess the risks related to the oil dispatch process. The auditor visited the oil dispatch facilities, met the manager responsible for oil sales, saw oil being loaded onto railway carriers, and talked to employees involved in the process. Which of the following best describes these audit testing methods?

  A. Obtaining documentary evidence and performing questioning.
  B. Conducting interviews and performing analytical procedures.
  C. Performing onsite inspection and obtaining physical evidence.
  D. Conducting physical observation and obtaining testimonial evidence.
  B. Conducting interviews and performing analytical procedures.

• Question 348:

  The internal auditor of a bank has developed a multiple regression model which has been used for a number of years to estimate the amount of interest income from commercial loans. During the current year, the auditor applies the model and discovers that the R2 value has decreased dramatically, but that the model otherwise seems to be working correctly. Which of the following conclusions is justified by the change?

  A. Changing to a cross-sectional regression analysis should cause the R2 to increase.
  B. Regression analysis is no longer an appropriate technique to estimate interest income.
  C. Some new factors, not included in the model, are causing interest income to change.
  D. A linear regression analysis would increase the model's reliability.
  C. Some new factors, not included in the model, are causing interest income to change.

• Question 349:

  During an information security audit, an auditor discovers that the current disaster recovery plan was developed three years ago but never tested. There have been significant changes to information systems since the plan was developed. The auditor should:

  A. Ask management to test the recovery plan immediately.
  B. Recommend that management and users update and test the recovery plan.
  C. Update the recovery plan for management as part of the review.
  D. Review the recovery plan and report weaknesses to management.
  B. Recommend that management and users update and test the recovery plan.

• Question 350:

  Which of the following is an appropriate engagement objective for an upcoming audit of the organization's governance system?

  A. Assess the design, implementation, and effectiveness of the organization's ethics program.
  B. Assess the completeness and accuracy of the management letter section of the organization's annual report.
  C. Assess whether privacy controls over a client's personally identifiable information are in compliance with state regulations.
  D. Assess the accuracy of calculations and timeliness of tax payments to the government.
  B. Assess the completeness and accuracy of the management letter section of the organization's annual report.