Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

IIA-CIA-Part1 Exam Dumps - Essentials of Internal Auditing

Question # 4

Which of the following is an indicator that the organization s risk management process is effective?

A.

The organization s risk appetite mission, and objectives are dearly outlined.

B.

The organization s risk management practices are assessed as mature.

C.

The organization has adopted risk management frameworks and global models.

D.

The organization s significant risks are identified and adequately assessed

Full Access
Question # 5

When an organization purchases a derivative contract in the stock market to limit the potential loss in the value of a security, the organization is applying which of the following risk management techniques?

A.

Avoiding the risk altogether.

B.

Transferring the risk.

C.

Introducing a control feature.

D.

Accepting the risk.

Full Access
Question # 6

Which of the following survey questions would be most effective to identify ethics violations within the organization?

A.

Are the performance targets in your department realistic and attainable?

B.

Do your coworkers have the knowledge, skills, and training needed to perform their job duties?

C.

Does your supervisor comply with laws and regulations affecting the organization?

D.

Do you have sufficient resources, tools, and time to accomplish your work objectives?

Full Access
Question # 7

Which of the following describes the most appropriate match between a potential temporary guest auditor candidate and an upcoming audit assignment?

A.

A purchasing manager with two years of prior audit experience in public practice to lead a contracts management audit

B.

A communications officer who worked in the marketing department during the last six months to conduct a customer loyalty program audit

C.

A manager of social responsibility who has a nursing background to participate m a health and safety audit for the corporate office and plant facilities

D.

An accounting manager who discovered and reported fraud committed by a payables clerk to conduct a performance audit of accounts payable

Full Access
Question # 8

According to IIA guidance, which of the following most appropriately justifies the CEO’s decision that the internal audit activity shall be responsible for risk management and investigation at a multinational organization?

A.

The recommendation of the parent office external auditors.

B.

The provisions of the internal audit charter

C.

The authority of the CEO.

D.

The level of proficiency of the chief audit executive

Full Access
Question # 9

Prior to commencing a financial compliance engagement, the engagement supervisor reads the business plan for the finance department and meets informally with the director to learn more about any key issues. Which of the following competencies is the engagement supervisor demonstrating?

A.

The ability to inspire trust

B.

The ability to communicate effectively

C.

The ability to display courage

D.

The ability to understand the needs of stakeholders

Full Access
Question # 10

Which of the following statements best represents the duo professional care that is required of internal auditor’s?

A.

Internal auditors should perform assurance procedures to ensure that all significant risks are identified.

B.

Internal auditor should not perform consulting engagements for operations for which they had previous responsibilities.

C.

Internal auditors should consider the cost of assurance in relation to the potential benefits.

D.

Internal auditors should device internal audit programs to confirm that the results are accurate.

Full Access
Question # 11

An iniernal auditor creates a professional development plan to obtain more experience in the organization's environmental, social, and corporate governance initiatives. Which of the following would the auditor include in the plan to support these objectives?

A.

A plan to study for and obtain a certification in nonprofit management.

B.

A deadline within the individual development plan to meet the overall engagement objectives.

C.

A plan to perform a variety of engagements to develop general skills that could be used to assess environmental, social, and governance initiatives.

D.

A request to attend the organization's committee meeting that is focused on strategic community awareness.

Full Access
Question # 12

Which of the following can be used to minimize employees’ resentment of controls?

A.

Making sure employees are exempt from participating in control creation

B.

Implementing controls without lengthy explanations of their purpose

C.

Developing general constricting controls rather than detailed ones

D.

Not using controls to achieve goals

Full Access
Question # 13

In which of the following ways can a whistleblower hotline serve as a prevent

A.

ative control? 3

B.

Third parties who operate the hotline ensure anonymity for whistle blowers. D Whistleblower tips help discover wrongdoings and violations of the code of conduct.

Potential perpetrators of fraud know that their actions can be reported easily.

C.

Better investigation protocols are triggered by the whistleblower hotline.

Full Access
Question # 14

Which of the following is a control that is used mainly to check the integrity of data entered into a business application, whether the data is entered directly by staff, remotely by a business partner, or through a web-enabled application?

A.

General IT control.

B.

Processing control.

C.

Input control

D.

Integrity control

Full Access
Question # 15

A chief audit executive (CAE) recruited a few new internal auditors to reduce the resource gaps identified in this year's internal audit plan. One of the new recruits has several years of experience with the organization. Ten months ago. she served as a senior supervisor in the finance department. However, for the past 10 months, she has been helping the organization with implementing a new IT system. What approach should the CAE take for the upcoming financial statement controls audit?

A.

Assign the new auditor to assist with conducting the fieldwork. but ensure that her work is reviewed by the CAE.

B.

Assign the new auditor to assist with developing the audit program, but ensure that the audit program is executed by other audit staff.

C.

Ensure that the new auditor's previous manager, and other close former coworkers, are excused during the audit.

D.

Ensure that the new auditor is responsible only for the supervisory review, but not the execution of the audit field work.

Full Access
Question # 16

According to The IIA's Code of Ethics, an internal auditor who has a romantic relationship with an audit client violates which of the following rules of conduct?

A.

Confidentiality.

B.

Independence.

C.

Integrity.

D.

Objectivity.

Full Access
Question # 17

An internal auditor is reviewing employee travel expenses from the previous six months for fraud. Which of the following tests would best detect instances where personal travel has been claimed?

A.

Verifying whether claims have been properly authorized for payment

B.

Verifying whether claims are properly supported by invoices or other documents.

C.

Confirming that all claims are within the limits of the organization's travel policy.

D.

Reconciling claims against business the requests that were approved by supervisors

Full Access
Question # 18

Which of the following actions should the organization's governing body perform to provide the most effective governance over the organization's culture?

A.

Coordinate control activities.

B.

Provide direction.

C.

Design key controls.

D.

Deliver assurance.

Full Access
Question # 19

According to HA guidance, which of the following is true regarding independence and objectivity for small internal audit activities?

A.

The chief audit executive (CAE) may consider including a disclaimer on independence in audit reports.

B.

The CAE may consider greater involvement of those with suitable knowledge of audit practice.

C.

Conformance with this Standard is not dependent upon the size of the internal audit activity.

D.

Due to the small size of the internal audit activity, having an external assessment once every seven years is acceptable.

Full Access
Question # 20

An internal audit team was assigned to review the organization’s information security protocol After fieldwork was completed an internal auditor identified an error in the review of security access The error could affect the overall results of the engagement Which of the following is the most appropriate course of action for the internal auditor?

A.

Proceed with addressing the error and report any corrections to the engagement supervisor during the scheduled exit meeting

B.

Issue the audit report to senior management on schedule but include a disclaimer about the error

C.

Proceed with the scheduled closing of the engagement without consideration of the identified error

D.

Inform the engagement supervisor of the error and allow the supervisor to determine the appropriate action to take

Full Access
Question # 21

A global manufacturing company has three regional offices. The chief audit executive (CAE) is concerned about the cost of an upcoming external quality assessment of the internal audit activity. The last external assessment was performed six years ago. Recently, the internal audit staff at one of the regional offices performed an internal assessment. To ensure conformance with the Standards, what is the most appropriate action for the CAE to take?

A.

Request from the audit committee an additional budget and an extension so that the external assessment could be performed next year.

B.

Review the results of the internal assessment, identify weaknesses, and implement improvements at the remaining offices.

C.

Request the regional office that performed the internal assessment to perform an assessment of the remaining offices.

D.

Request that an external assessor validate the results of the internal assessment and review the remaining offices.

Full Access
Question # 22

Which should the internal auditor first consider when assessing fraud risks during an engagement?

A.

Compare the organizations fraud strategies with the industry's strategies.

B.

Review any related prior fraud investigations.

C.

Investigate any related fraud allegations.

D.

Communicate any suspicious fraud activities to management.

Full Access
Question # 23

An internal auditor has documented several instances in which management asked employees to ad against the policies and procedures. Which of the following is the most appropriate next step?

A.

Report the non-compliance cases to the board of directors.

B.

Recommend that management update its policies and procedures based on the circumstances.

C.

Investigate the rationale for management's actions.

D.

Recommend those employees to report the cases through the designed whistleblowing channel for the appropriate treatment.

Full Access
Question # 24

Which of the following is an appropriate roe fa the internal audit activity?

A.

Ensuring the organization's key risks are managed through appropriate controls.

B.

Assisting the organization in maintaining effective controls.

C.

implementing new controls to promote continuous improvement

D.

Validating control assessments performed by the external auditor.

Full Access
Question # 25

Which of the following practices is generally most effective to protect internal audit objectivity?

A.

Ensuring regular documentation of auditor skills and experience in the workpapers.

B.

Basing performance evaluations heavily on customer satisfaction surveys.

C.

Prohibiting auditors from accepting gifts from audit clients or potential clients.

D.

Ensuring that auditors have a balance of both operational and internal audit responsibilities.

Full Access
Question # 26

The accounting department asked the chief audit executive (CAE) to perform a review of suspicious transactions The CAE was an accounting manager for the organization six months ago How should she respond to the request?

A.

Decline, if it is consulting engagement because she recently worked in the organization s accounting department

B.

Accept, 11 is an assurance engagement, as she has been out of the department long enough to not impair objectivity.

C.

Inform the accounting department mat me engagement can take place m the future once she has been removed from accounting for a longer period of time.

D.

Accept, it is a consulting engagement with agreed-upon scope and services to be provided by me internal audit activity.

Full Access
Question # 27

The chief audit executive (CAE) is drafting the annual internal audit plan and seeks input from senior management and the external auditor prior to submitting it for approval to the board. According to MA guidance, which of the following statements is true regarding this scenario?

A.

The CAE's actions are likely to impair the Independence of the internal audit activity.

B.

The CAE acted appropriately, and the independence of the internal audit activity was not impaired.

C.

The CAE should have developed the audit plan without outside influence to maintain objectivity.

D.

The CAE acted appropriately, as he has authority to determine who reviews and approves the audit plan.

Full Access
Question # 28

The chief audit executive (CAE) has hired a new internal auditor who was immediately assigned to a procurement function audit. Because the new auditor's name is similar to that of the procurement manager, some staff members think the two are related, although they are not. Which of the following actions is most appropriate for the CAE to take?

A.

Take no action, as there is no impairment to independence.

B.

Remove the new internal auditor from the engagement team.

C.

Discuss the matter with the appropriate personnel to alleviate concerns.

D.

Closely supervise the new auditor and carefully review his work.

Full Access
Question # 29

An internal auditor is trying to evaluate what could go wrong after determining that a risk management technique is operating effectively. What type of risk is the auditor assessing?

A.

Inherent risk.

B.

Residual risk.

C.

Impact risk.

D.

Detection risk.

Full Access
Question # 30

Which of the following is an example of risk monitoring to ensure a system is performing as intended?

A.

Checking the progress of risk treatment plans

B.

Considering the consequence and likelihood of risks

C.

Documenting the risks and their areas of impact

D.

Communicating to management about risks

Full Access
Question # 31

Which of the following is an example of an application control?

A.

Employees in the data center must always wear identification badges

B.

Operating system updates must be installed within 48 hours.

C.

A two stage authentication process must be used to access customer information

D.

System backup and recovery testing must be done monthly

Full Access
Question # 32

Which of the following would a chief audit executive most likely use to identify a need for improvement in a staff internal auditor's business acumen?

A.

A quality assessment review.

B.

An internal audit client survey.

C.

A control self-assessment.

D.

A peer review of the internal audit activity.

Full Access
Question # 33

There is a growing perception that employees generally evade their responsibilities. What impact will an internal auditor most likely see during an engagement?

A.

Supervisors are likely to reduce their level of supervision and increase span of control.

B.

Employees are likely to be supervised closely and given little freedom.

C.

Peer employees are likely to trust one another, but distrust management.

D.

Employees are likely to join forces to accomplish their duties as teams.

Full Access
Question # 34

Which of the following most accurately describes corporate social responsibility at an organization?

A.

An organizational locus on improving the overall environment, even it is to the detriment of the local community.

B.

A philosophy driven by employees that flows up to senior management and the board of directors.

C.

An overall commitment of the organization to improve the quality of life for not only the employees but the community at large.

D.

A policy of ensuring that the organization is socially responsible, even if it leads to unprofitability due to increased costs.

Full Access