IIA IIA-CIA-PART2 Online Practice Questions and Exam Preparation

IIA IIA-CIA-PART2 Online Questions & Answers

• Question 751:

  Insurance companies often receive electronic hospitalization claims directly from hospitals. Which of the following control procedures would be most effective in detecting fraud in such an environment?

  A. Use integrated test facilities to test the accuracy of processing in a manner that is transparent to data processing.
  B. Develop monitoring programs to identify unusual types of claims or an unusual number of claims by demographic class for investigation by the claims department.
  C. Use generalized audit software to match the claimant identification number with a master list of valid policyholders.
  D. Develop batch controls over all items received from a particular hospital and process those claims in batches.
  B. Develop monitoring programs to identify unusual types of claims or an unusual number of claims by demographic class for investigation by the claims department.

• Question 752:

  Which of the following internal audit staffing models is most likely to further an auditor's continuing development an IT knowledge, in support of the organization's rapidly evolving use of IT technology?

  A. Rotational model.
  B. Co-sourcing model.
  C. Career model.
  D. Center of competence model.
  D. Center of competence model.

• Question 753:

  After being assigned to lead an internal audit of identity and access management, which of the following should be the auditor's next step?

  A. Assess the process-level risks associated with the identity and access management business area.
  B. Document the scope and objectives of the audit and communicate them to management of the area under review.
  C. Understand why the audit of identity and access management was included on the annual internal audit plan.
  D. Estimate the number of hours required to complete the audit and assign audit staff accordingly.
  B. Document the scope and objectives of the audit and communicate them to management of the area under review.

• Question 754:

  Which of the following procedures would be most helpful in providing additional evidence when an auditor suspects that an unidentified employee is submitting and approving invoices for payment?

  A. Use generalized audit software to identify invoices from vendors with post office box numbers or other unusual features. Select a sample of those invoices and trace to supporting documents such as receiving reports.
  B. Select a sample of payments made during the year and investigate each one for approval.
  C. Select a sample of receiving reports representative of the period under investigation and trace to approved payment. Note any items not properly processed.
  D. Select a sample of invoices paid during the past month and trace them to appropriate vendor accounts.
  A. Use generalized audit software to identify invoices from vendors with post office box numbers or other unusual features. Select a sample of those invoices and trace to supporting documents such as receiving reports.

• Question 755:

  Which of the following computerized audit tools or techniques should be used if the internal auditor wants to extract specific files and records in the database?

  A. An expert or decision support system.
  B. Generalized audit software.
  C. A system utility program.
  D. An integrated test facility.
  D. An integrated test facility.

• Question 756:

  Considering the ve-attribute approach to documenting defficiencies in an area under review, which of the following answers the question, "What should be in place?"

  A. Action plan.
  B. Recommendation.
  C. Condition.
  D. Criteria.
  B. Recommendation.

• Question 757:

  As a result of senior management's assumption of risk, there is residual risk that exceeds the organization's risk appetite. Which of the following actions would be most appropriate for the chief audit executive to take?

  A. Ignore the responsibility of addressing the residual risk.
  B. Assume the responsibility of addressing the residual risk.
  C. Ensure senior management acknowledges residual risk.
  D. Communicate with the board the issue of residual risk.
  D. Communicate with the board the issue of residual risk.

• Question 758:

  Which of the following statements is false regarding roles and responsibilities pertaining to risk management and control?

  A. Senior management is charged with overseeing the establishment risk management and control processes.
  B. The chief audit executive is responsible for overseeing the evaluation risk management and control processes.
  C. Operating managers are responsible for assessing risks and controls in their departments.
  D. Internal auditors provide assurance about risk management and control process effectiveness.
  B. The chief audit executive is responsible for overseeing the evaluation risk management and control processes.

• Question 759:

  An auditor is using an internal control questionnaire as part of a preliminary survey. Which of the following is the best reason for the auditor to interview management regarding the questionnaire responses?

  A. Interviews provide the opportunity to insert questions to probe promising areas.
  B. Interviews are the most efficient way to upgrade the information to the level of objective evidence.
  C. Interviewing is the least costly audit technique when a large amount of information is involved.
  D. Interviewing is the only audit procedure which does not require Confirmation of the information that is obtained.
  A. Interviews provide the opportunity to insert questions to probe promising areas.

• Question 760:

  An internal auditor is testing the success of the IT support department in meeting the service levels guaranteed to small, medium, and large customers. The customer's size classification is based on its annual expenditures with the

  organization and the nature and extent of services it receives.

  Which of the following sampling techniques would be the most suitable to select customers for this test?

  A. Cluster sampling.
  B. Interval sampling.
  C. Stop-and-go sampling.
  D. Stratified sampling.
  A. Cluster sampling.