IIA IIA-CIA-PART2 Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART2 Online Questions & Answers

• Question 461:

  According to IIA guidance,when performing a compliance audit of data security standards for a large e-commerce retailer, which of the following would represent the least likely area of risk exposure?

  A. Operational risks.
  B. Change or configuration risks.
  C. Access risks.
  D. Physical security risks.
  D. Physical security risks.

• Question 462:

  A chief audit executive is preparing interview questions for the upcoming recruitment of a senior internal auditor. According to IIA guidance, which of the following attributes shows a candidate's ability to probe further when reviewing incidents that have the appearance of misbehavior?

  A. Integrity.
  B. Flexibility.
  C. Initiative.
  D. Curiosity.
  D. Curiosity.

• Question 463:

  Which of the following describes the primary reason why a preliminary risk assessment is conducted during engagement planning?

  A. To identify the greatest risks organizationwide.
  B. To ensure that the engagement work program covers all risk areas.
  C. To ensure that risks identified during previous audits of the area have been adequately addressed.
  D. To ensure that significant risks are included in the engagement scope.
  D. To ensure that significant risks are included in the engagement scope.

• Question 464:

  Which of the following situations would justify the removal of a finding from the final audit report?

  A. Management disagrees with the report findings and conclusions in their responses.
  B. Management has already satisfactorily completed the recommended corrective action.
  C. Management has provided additional information that contradicts the findings.
  D. Management believes that the finding is insignificant and unfairly included in the report.
  C. Management has provided additional information that contradicts the findings.

• Question 465:

  Company A has a formal comprehensive corporate code of ethics while company B does not.

  Which of the following statements regarding the existence of the code of ethics in company A can be logically inferred?

  I. Company A exhibits a higher standard of ethical behavior than does company

  B.

  II. Company A has established objective criteria by which an employee's actions can be evaluated.

  III.

  The absence of a formal corporate code of ethics in company B would prevent a successful audit of ethical behavior in that company.

  A. II only
  B. III only
  C. I and II only
  D. II and III only
  A. II only

• Question 466:

  What is the primary purpose of creating a preliminary draft audit report?

  A. To save time during final report writing.
  B. To meet the Standards requirement for developing a draft report prior to issuing a final report.
  C. To use as a tool for communicating with management of the area under review.
  D. To require that management implements solutions to issues identified during the engagement.
  C. To use as a tool for communicating with management of the area under review.

• Question 467:

  In a review of an electronic data interchange application using a third-party service provider, the auditor should:

  I. Ensure encryption keys meet International Organization for Standardization (ISO) standards.

  II. Determine whether an independent review of the service provider's operation has been conducted.

  III. Verify that only public-switched data networks are used by the service provider.

  IV.

  Verify that the service provider's contracts include necessary clauses, such as the right to audit.

  A. I and II only
  B. I and IV only
  C. II and III only
  D. II and IV only
  D. II and IV only

• Question 468:

  Which of the following would be most appropriate to include in the scope of an operational audit of the check processing function?

  A. Review the applicable checks received logs for evidence of dual control.
  B. Test a sample of checks to ensure that they were properly posted to the customer's account.
  C. Review the ow of work to determine whether the process is completed efficiently.
  D. Review the bank statement and validate that each check received is deposited into the bank account.
  A. Review the applicable checks received logs for evidence of dual control.

• Question 469:

  Which of the following describes the primary objective of an internal audit engagement supervisor?

  A. Uphold the quality of the internal audit actively
  B. Provide engagement progress updates to management of the area under review
  C. Assure risks and controls are identified and assessed
  D. Ensure timely completion of the engagement
  A. Uphold the quality of the internal audit actively

• Question 470:

  Which of the following statistical sampling approaches is the most appropriate for testing a population for fraud?

  A. Discovery sampling.
  B. Stop-or-go sampling.
  C. Haphazard sampling.
  D. Stratified attribute sampling.
  A. Discovery sampling.