Updated IIA-CIA-Part2 Exam Study Guides

dumps2023-02-07T02:23:01+08:00

CIA Exam Part Two: Practice of Internal Auditing IIA-CIA-Part2 exam study guides have been updated, which are the latest version in the whole market. The Certified Internal Auditor (CIA) Part 2 exam is an essential milestone for professionals seeking to enhance their internal audit knowledge and credibility. The latest update of the IIA-CIA-Part2 exam questions is designed to assess the candidate’s understanding of the internal audit process and the ability to apply professional skepticism to evaluate the internal control systems of an organization. Free updated IIA-CIA-Part2 exam study guides are below.

Page 1 of 10

1. An internal auditor accessed accounts payable records and extracted data related to fuel purchased tor the organization's vehicles As a first step, she sorted the data by vehicle and used spreadsheet functions to identify all instances of refueling on the same or sequential dates She then performed other tests.

Based on the auditor's actions which of the following is most likely the objective of this engagement1?

To identify whether fuel was purchased for work-related purposes

To estimate future fuel costs for the organization's fleet of vehicles

To determine trends in average fuel consumption by vehicle

To determine whether the organization is paying more than the industry average for fuel

2. An internal auditor tested whether purchase orders were supported by appropriately approved purchase requisitions She sampled a population of purchase documents and identified instances where purchase requisitions were missing However, she did not notice that n some cases purchase requisitions were approved by an unauthorized person.

Which of the following risks most appropriately describes this situation?

Nonsampling risk

Sampling risk

Inherent risk

Due diligence risk

3. An internal auditor submitted a report containing recommendations for management to enhance internal controls related to investments.

To follow up, which of the following is the most appropriate action for the internal auditor to take?

Observe corrective measures.

Seek a management assurance declaration.

Follow up during the next scheduled audit.

Conduct appropriate testing to verify management responses.

4. A chief audit executive (CAE) reviews the supervision of an internal audit engagement.

Which of the following would most likely assure the CAE that the engagement had adequate supervision?

The engagement supervisor has an open door pokey for audit team members to discuss concerns

The supervisor reviews weekly progress reports from the audit team members

The supervisor reviews and initials internal audit workpapers for the engagement

The supervisor meets periodically with management in the reviewed area to get feedback during the engagement.

5. A corporate merger decision prompts the cruel audit executive (CAE) to propose interim changes lo the existing annual audit plan to account for emerging risks.

When of the following is the most appropriate action for the CAE to take regarding the changes made to the audit plan?

Present the revised audit plan directly to the board for approval

Communicate with the chief financial officer and present the revised audit plan to the CEO for approval

Present the revised audit plan directly to the CEO for approval

Communicate with the CCO and present the revised audit plan to the board for approval

6. Which of the following statements regarding the risk management process' support of the internal audit activity is true?

The risk management process can provide more extensive internal audit services to the organization if it does not have an internal audit department

The risk management process supports internal audit by evaluating whether critical controls are adequate and effective.

The risk management process can determine whether all significant risks have been identified and are being treated.

The risk management process establishes an organization-specific documented risk management framework.

7. Which of the following internal control attributes should internal auditors consider testing during a review of the board of directors?

The presence of an independent critical mass

The established philosophy and operating style of senior management

The articulated internal control objectives of the organization

The organization's employee recruiting and retention policies

8. When forming an opinion on the adequacy of management's systems of internal control, which of the following findings would provide the most reliable assurance to the chief audit executive?

• During an audit of the hiring process in a law firm, it was discovered that potential employees' credentials were not always confirmed sufficiently. This process remained unchanged at the following audit.

• During an audit of the accounts payable department, auditors calculated that two percent of accounts were paid past due. This condition persisted at a follow up audit.

• During an audit of the vehicle fleet of a rental agency, it was determined that at any given time, eight percent of the vehicles were not operational. During the next audit, this figure had increased.

• During an audit of the cash handling process in a casino, internal audit discovered control deficiencies in the transfer process between the slot machines and the cash counting area. It was corrected immediately.

1 and 3 only

1 and 4 only

2 and 3 only

2 and 4 only

9. Which of the following statement is consistent with IIA guidance the use of mentoring for internal auditors?

The member and the internal auditor should opt for informal meetings even if it means that no formal documentation will be created.

The mentor relationship is usually not suitable for internal audit staff, as it does not leas to professional development.

The value of mentoring is derived primarily from the personal relationship between the two parties involved, and the mentor’s level of relevant experience should not be a key factor.

The mentor should be the internal auditor’s supervisor to ensure that the auditor performance is assessed in a relevant and meaningful context.

10. According to an internal audit observation, the organization’s rules of record management require all contracts to be registered and stored in a specific electronic system. One subsidiary has thousands of client contracts on paper, which are kept in the office because there are not enough assistants to scan the contracts into the system.

Which of the following component should be added to this observation?

Criteria

Cause

Effect

Condition

Page 2 of 10

11. Communicate to senior management a summary report on the status and adequacy of audit resources.

1 and 3 only

2 and 4 only

1, 2, and 4

2, 3, and 4

12. An organization buys crude oil on the open market and refines it into a high-quality gasoline. The price of crude oil is extremely volatile.

Which of the following is the most appropriate risk management technique to protect the organization against these price fluctuations?

Enter into long-term gasoline purchase agreements with end customers.

Trade crude oil derivatives at financial markets in order to benefit from price fluctuations

Purchase crude oil-related derivatives such as futures or options

Stock as much raw materials as possible and consider Investing into additional facilities

13. Which of the following is the primary reason the chief audit executive should consider the organization's strategic plans when developing the annual audit plan?

Strategic plans reflect the organization's business objectives and overall attitude toward risk.

Strategic plans are helpful to identify major areas of activity, which may direct the allocation of internal audit activity resources.

Strategic plans are likely to show areas of weak financial controls.

The strategic plan is a relatively stable document on which to base audit planning.

14. An internal auditor wants to compare performance information from one quarter to another.

Which analytics procedure would the auditor use?

Ratio analysis

Trend analysis

Vertical analysis

Benchmarking analysis

15. An internal auditor wants to identity potential ghost employees in the organization's payroll system.

The auditor extracts the following data

- Human resources data with employees' names addresses employment conditions and identification codes

- Payroll data

- Logs from entrance systems

With this data, which of the following types of ghost employees will the auditor be able to identify?

Employees who are being paid more than then approved wages

Employees who get paid although their employment has expired

Employees who are related to one of the subcontractors

Employees who are physically present at the workplace but who do not perform the specified job duties

16. Which of the following items, included in the preliminary audit communication would be most useful for management to formulate action plans in response to audit recommendations?

A condition

An audit objectives

An audit scope

An observation rating

17. Which of the following statements about assurance maps is correct?

An assurance map is used by the chief audit executive to coordinate assurance activities with other internal and external assurance providers

An assurance map is a picture of all assurance engagements performed by the internal audit activity across the organization

An assurance map is used by the engagement supervisor to coordinate the roles of various internal audit team members assigned to assurance engagements

An assurance map lists the procedures and testing activities performed by an internal audit team during an assurance engagement

18. When me internal audit activity does not have sufficient time to complete its usual root cause analysis which c4 the following is most appropriate?

The chief audit executive may recommend that management conduct further work to identify the root cause and address the issue

Internal auditors should finish the engagement without conducting the root cause analysis and draft the audit report, though the report would not be considered complete until the analysis is concluded

internal auditors must adjust their future engagement schedule to ensure that the root cause analysis is always performed before the engagement is concluded

Internal auditors should Instead perform a Pareto rule analysis

19. Which of the following manual audit approaches describes testing the validity of a document by following it backward to a previously prepared record?

Tracing

Reperformance

Vouching

Walkthrough

20. Which of the following best illustrates the primary focus of a risk-based approach to control self-assessment?

To evaluate controls regarding the computer security of an oil refinery.

To examine the processes involved in exploring, developing, and operating a gold mine.

To assess the likelihood and impact of events associated with operating a finished goods warehouse.

To link a financial institution's business objectives to a work unit responsible for the associated risk.

Page 3 of 10

21. If observed during fieldwork by an internal auditor, which of the following activities is least important to communicate formally to the chief audit executive?

Acts that may endanger the health or safety of individuals.

Acts that favor one party to the detriment of another.

Acts that damage or have an adverse effect on the environment.

Acts that conceal inappropriate activities in the organization.

22. Which of the following should management action plans include at a minimum?

An implementer for the action plan

An owner of the action plan

The internal auditor's next review date of the action plan

Detailed procedures for the action plan

23. During a fraud interview, it was discovered that unquestioned authority enabled a vice president to steal funds from the organization.

Which of the following best describes this condition?

Scheme.

Opportunity.

Rationalization.

Pressure.

24. What is the primary objective of an engagement supervisor's review of key activities performed during the engagement?

To ensure that the engagement is completed on time and within budget

To ensure that all work performed meets acceptable quality standards

To ensure that management has provided suitable responses to all observations

To ensure that management is satisfied with the progress of the engagement

25. Which of the following would most likely cause an internal auditor to consider adding fraud work steps to the audit program?

Improper segregation of duties.

Incentives and bonus programs.

An employee's reported concerns.

Lack of an ethics policy.

26. What is the best course of action for a chief audit executive if an internal auditor identifies in the early stage of an audit that some employees have inappropriate access to a key system?

Contact the audit committee chair to discuss the finding

Obtain verbal assurance from management that the inappropriate access will be removed

Issue an interim audit report so that management can implement action plans

Ask the auditor to create a ticket with the IT help desk requesting to revoke the inappropriate access

27. Which of the following statements generally true regarding audit engagement planning?

The best source tor detailed process information is senior management

Audit objectives should be general and do not change.

Computer-assisted audit techniques are typically not useful during engagement planning

Internal auditors should prepare a dented audit program for testing controls

28. An internal auditor is analyzing sates records and is concerned whether a transaction is recorded in the coned period. The accounting manager explains that the external auditor approved the records and produces an email from the external audit team leader.

How should tie internal auditor respond?

Ask the external auditor to review the same transaction again as an independent third party

Consult account accounting principles, standards, and relevant guidelines in regard to timing of the entry

Interview the chief financial officer and obtain her opinion on how the transactions should be recorded

Compare the recording of this transaction to now similar ones were executed last year

29. A chief audit executive (CAE) is trying to balance the internal audit activity's needs for technical audit skills budget efficiency and staff development opportunities.

Which of the following would best assist the CAE in achieving this balance1?

Strategic sourcing

Loan staff arrangement

Flat organizational structure

Hierarchical organizational structure

30. According to IIA guidance which of the following statements is true regarding the annual audit plan?

The annual audit plan should only be adjusted in response to problems with resourcing, scope, and data availability.

The chief audit executive (CAE) may incorporate risk information, including risk appetite levels from management for the audit plan at her discretion.

In an immature risk management environment it is preferable for the CAE to rely solely on her judgment regarding risk identification and assessment to develop the audit plan.

The CAE may make adjustments to the annual audit plan as needed without senior management or board approval.

Page 4 of 10

31. Which of the following is an appropriate documentation of proper engagement supervision?

A completed engagement workpaper review checklist.

The supervisor's review notes on engagement workpapers.

The email exchanges between the audit team and the supervisor.

A supervisor's approval of resources allocated to the engagement

32. Submit management's plan of action to the external auditors for additional review.

1 and 2

1 and 4

2 and 3

3 and 4

33. At a construction company, an internal auditor is planning an audit of the company's process for designing and building grid connections.

The process involves customers making payments m three parts

• The first payment of 10% after approval of the customer s application

• The second payment of 70% prior to construction

• The third payment of 20% after construction is complete

Which of the following key controls should the auditor test to ensure that the company is not taking any unwanted credit risks?

Controls that ensure that grid connection design is finalized before construction is approved to begin

Controls that ensure construction orders are initiated after the second invoice is paid

Controls that ensure all three invoices are calculated correctly according to the total project cost

Controls that ensure that applications are verified for approval prior to initiating design and construction

34. 'Internal policy prohibits employees from entering into contacts with financial obligations without proper approval.

A project manager signed a change to an important service agreement without obtaining the proper approval As a result the organization is receiving $5,000 per month less for its services.’’

Which of the following should be added to the observation?

The reason for not following the internal policy

A description of what constitutes proper approval

The annual impact of the changed agreement on cash flows

Details regarding when the change to the agreement was signed

35. Management has taken immediate action to address an observation received during an audit of the organization's manufacturing process.

Which of the following is true regarding the validity of the observation closure?

Valid closure requires evidence that ensures the corrected process will function as expected in the future

Valid closure requires the client lo address not only the condition, but also the cause of the condition

Valid closure of an observation ensures it will be included in the final engagement report

Valid closure requires assurance from management that the original problem will not recur in the future

36. An organization has a health and safety division that conducts audits to meet regulatory requirements. The chief health and safety officer reports directly to the CEO.

Which of the following describes an appropriate role for the chief audit executive (CAE) with regard to the organization's health and safety program?

The CAE has no role to play, because the chief health and safety officer reports to a senior executive.

The CAE should coordinate with, and review the work of, the chief health and safety officer to gain an understanding of whether risks related to health and safety are managed properly.

The CAE should give periodic reports directly to the regulator regarding health and safety issues, as it is the appropriate regulatory oversight body.

The CAE should hire an independent external specialist to conduct an annual assessment and provide assurance over the effectiveness of the health and safety program and the reliability of its reports.

37. The internal audit manager has been delegated the task of preparing the annual internal audit plan for the forthcoming fiscal year All engagements should be appropriately categorized and presented to the chief audit executive for review.

Which of the following would most likely be classified as a consulting engagement?

Evaluating procurement department process effectiveness

Helping in the design of the risk management program

Assessing financial reporting control adequacy

Reviewing environmental, social, and governance reporting compliance

38. According to the IIA guidance, which of the following foes the engagement work test in a review in a review of an organization al process?

Process objectives

Process risks

Process controls

Process scope

39. Upon concluding the engagement fieldwork an internal auditor discusses the audit findings with operational management.

There is a greater likelihood that the auditor will obtain a responsive action plan from management when both parties agree on which of the following attributes of the audit finding?

Criteria

Condition

Cause

Effect

40. Which of the following is the best option for the chief audit executive to consider for effective coordination of assurance coverage?

Create an assurance map to illustrate each provider's level of assurance and planned activities for each area of the organization

LIMIT© ricks inventory to identify the risks and controls in place and the relevant control owners.

Rely on the risk and control and management testing information maintained for compliance with the regulatory framework

Prepare a risk likelihood and impact heal map to prioritize assurance coverage coordination.

Page 5 of 10

41. As a result of server managements assumption of risk there is residual risk that exceeds me organisation's risk appetite.

Which of the following actions would be most appropriate for the chief audit executive to take?

ignore the responsibility of addressing the residual risk

Assume the responsibility of addressing the residual risk

Ensure senior management acknowledges residual risk

Communicate with the board the issue of residual risk

42. An organization's board would like to establish a formal risk management function and has asked the chief audit executive (CAE) to be involved in the process.

According to IIA guidance, which of the following roles should the CAE not undertake?

Manage and coordinate risk management processes.

Audit risk management processes.

Become involved in risk oversight committees, monitoring activities, and status reporting.

Accept management's responsibility for risk management without board approval.

43. The amount of fuel purchased.

1 and 2

1 and 4

2 and 3

3 and 4

44. Which of the following should be the focus of the effect section of the preliminary observations document?

Residual risk

Inherent risk

Compensating controls

Control activities

45. An internal auditor completed a review of expenses related to the launch of a new project. The auditor sampled 45 transactions approved by a senior project manager and identified 30 with questionable vendor documentation.

Which of the following is the most appropriate conclusion for the auditor to include in the audit report?

The organization incurred excessive cost overruns that resulted in significant financial and legal risk to the project.

The organization experienced a potential conflict of interest

The organization had weaknesses in its review process which allowed questionable transactions with some vendors

The organization allowed the project to launch without assurance that all transactions were regularly approved

46. During a consulting engagement an internal auditor wants to determine whether all principal stakeholders are involved in a project.

Which tool should the auditor use?

RACI (responsible, accountable, consult and inform) chart

Flowchart

SWOT {strengths. weaknesses opportunities, and threats) analysis

Workflow analysis

47. Which of the following would not be a typical activity for the chief audit executive to perform following an audit engagement?

Report follow-up activities to senior management.

Implement follow-up procedures to evaluate residual risk.

Determine the costs of implementing the recommendations.

Evaluate the extent of improvements.

48. According to IIA guidance, which of the following reflects a characteristic of sufficient and reliable information?

The establishment of an audit approach and documentation system

The standardization of workpaper terminology and notations

The ability to reach consistent audit conclusions regardless of who performs the audit

The application of documentation standards m an appropriate and consistent manner

49. Is the documentation easily accessible to an persons who need in to perform their job?

Which of the following is a drawback of testing methods like this?

They ore kitted as they do not allow the auditor to test many controls.

They do not highlight control gaps

They are not useful for identifying areas on which the auditor should locus.

They are limited as there is a risk that management may not answer fairly.

50. A toy manufacturer receives certain components from an overseas supplier and uses them to assemble final products Recently quality reviews have identified numerous issues regarding the components' compliance with mandatory quality standards.

Which type of engagement would be most appropriate to assess the root causes of the quality issues?

A risk assessment

An operational audit

A third-party audit

A fraud investigation

Page 6 of 10

51. An internal auditor collected several employee testimonials.

Which of the following is the best action for the internal auditor to take before drawing a conclusion?

Ensure the testimonials are well documented

Substantiate the testimonials with physical or documentary evidence

Corroborate testimonials with the results from other soft control techniques

Review the testimonials with the interviewed employees

52. An organization recently acquired a subsidiary in a new industry, and management asked the chief audit executive (CAE) to perform a comprehensive audit of the subsidiary prior to recommencing operations. The CAE is unsure her team has the necessary skills and knowledge to accept the engagement According to IIAguidance, which of the following responses by the CAE would be most appropriate?

The CAE should accept the engagement and ensure that an explanation of the expertise limitations is included in the final audit report.

The CAE should ask management to hire an external expert who is familiar with the industry to perform an independent audit for management

The CAE should accept the engagement and hire an external expert to assist the audit team with the audit of the subsidiary

The CAE should recommend postponing the engagement until the internal audit team is able to develop sufficient knowledge of the new industry

53. An internal auditor conducted interviews with several employees, documented the interviews analyzed the summaries, and drew a number of conclusions.

What sort of audit evidence has the internal auditor primarily obtained?

Documentary evidence

Testimonial evidence

Analytical evidence

Physical evidence

54. An audit observation states the following:

"Despite the rules of the organization there is no approved credit risk management policy in the subsidiary. The subsidiary is concluding contacts with clients who have very high credit ratings. The internal audit team tested 50 contacts and 17 showed clients with a poor credit history"

Which of the following components are missing in the observation?

Cause and effect.

Effect and criteria

Condition and cause

Criteria and condition.

55. A preliminary observation document contains more detail than tie observation description in the engagement workpapers

1 and 2

1 and 4

2 and3

3 and 4

56. Which of the following recommendations made by the internal audit activity (IAA) is most likely to help prevent fraud?

A review of password policy compliance found that employees frequently use the same password more than once during a year. The IAA recommends that the access control software reject any password used more than once during a 12-month period.

A review of internal service-level agreement compliance in financial services found that requests for information frequently are fulfilled up to two weeks late. The IAA recommends that the financial services unit be eliminated for its ineffectiveness.

A vacation policy compliance review found that employees frequently leave on vacation before their leave applications are signed by their manager. The IAA recommends that the manager attend to the leave applications in a more timely fashion.

A review of customer service-level agreements found that orders to several customers are frequently delivered late. The IAA recommends that the organization extend the expected delivery time advertised on its website.

57. Which of the following statements concerning workpapers is the most accurate?

The organization and the format of workpapers is the same for all engagements

The extent of what is included in workpapers is a matter of professional judgment

Workpapers should be complete so that every conceivable question that can be raised should be answered

Copies of operational managements records should not be included, but referenced so that they can be located

58. In which of the following populations would the internal auditor most likely choose to use a stratified sampling approach?

Inventory comprised of the same items stored in different warehouses

Batches of materials that must be confirmed as meeting quality standards

Revenue that is earned by an organization through cash receipts or as receivable.

Tax reports submitted to meet the requirements of the local taxation authority

59. An internal auditor is asked to review a recently completed renovation to a retail outlet.

Which of the following would provide the most reliable evidence that the completed work conformed to the plan?

An interview with the employee who performed the work

An analysis of purchasing and receiving documentation

Existence of a signed completion document accepting the work

A physical inspection of the retail outlet.

60. A chief audit executive's report to the board showed a significant trend of recent aud4s going over planned budgeted hours.

Which of the following factors could cause this trend?

Poor engagement supervision

ineffective board reporting

Untimely observation follows up and closure

Limited staff resources

Page 7 of 10

61. According to IIA guidance, which of the following statements best justifies a chief audit executive's request for external consultants to complement internal audit activity (IAA) resources?

The organization's audit universe is extensive and diverse.

There has been an increase in unanticipated requests for advisory work.

Previous work provided by the external service provider has been of great quality and value.

A recent benchmarking study found that using external service providers is a common practice of similarly-sized IAAs in other organizations.

62. An internal auditor suspects that employee turnover is unusually high at the organization's primary manufacturing plant.

To investigate this potential issue which of the following analytical approaches is the auditor likely to use?

Ratio analysis

Vertical analysis

Benchmarking

Cost-benefit analysis.

63. Which of the following should be described in the recognition element of a typical internal audit repot?

Positive aspects of the process or area under review

A brief synopsis of the process of area under review

Outcomes and ratings of the process or area under review

Report issuance and the communication process of the engagement.

64. According to IIA guidance which of the following statements is true regarding heat maps?

A heat map sets likelihood to have higher priority than impact.

A heat map sets impact to have higher priority than likelihood.

A heat map recognizes that the priority of impact and likelihood can vary.

A heat map recognizes impact and likelihood as equally important

65. An internal auditor is examining the organization's internal control processes.

Which of the following would the auditor do to test the reliability of a customer database1?

Perform a site visit to see whether the organization's servers are operational

Interview end users to determine whether they understand how to use the database information

Determine whether policies are in place on how to use the database information

Review for indications of potential issues with the database information

66. An internal audit team leader is having difficulties completing the planning phase of an assurance engagement because the business unit lacks a system of internal controls.

Which of the following is the most appropriate course of action for the internal audit team leader?

Defer the engagement until a system of internal control has been established

Change the scheduled engagement from assurance to consulting to help correct the shortcomings

Add a consulting component to the already scheduled assurance engagement

Seek the involvement of the external auditor to assist with improving the internal controls

67. The audit manager asked the internal auditor to perform additional testing because several irregularities were found in the financial information.

Which of the following would be the most appropriate analytical review for the auditor to perform?

Compare the firm's financial performance with organizations in the same industry

Interview all managers involved in preparing the financial statements

Perform a bank reconciliation to confirm the cash balance in the financial statements.

Trace each financial transaction to the original supporting document

68. An organization's finance manager plans to implement a state-of-the-art management system to better manage the organization's receivables. The finance manager consulted the chief audit executive (CAE) and asked for her assistance in determining whether the organization is able to accommodate this system.

How would the CAE proceed to determine the objectives of this engagement?

Ask the CEO to determine the scope and objectives of the engagement

Request that the board disclose its concerns over governance for inclusion in the engagement

Discuss the concerns with the finance manager and work together to agree on the engagement objectives

Review previous audit reports from the area and develop engagement objectives to address the area's key risks and controls

69. The final internal audit report should be distributed to which of the following individuals?

Audit client management only

Executive management only

Audit client management, executive management, and others approved by the chief audit executive.

Audit client management, executive management, and any those who request a copy.

70. Which of the following statements is false regarding audit criteria?

Audit criteria should be consistent across audit assignments.

Audit criteria should represent reasonable standards against which to assess existing conditions.

Audit criteria should provide flexibility but allow identification of nonadherence.

Audit criteria should equate to good or acceptable management practices.

Page 8 of 10

71. An internal auditor is preparing for an auditor of newly implemented software that is used by 3,000 employees in South America and Europe.

What would be the best way for the auditor to gather relevant feedback?

interview IT management in both regions

Inspect regional user software training records

Interview propel management and the vendor responsible for implementation

Distribute surveys to software users in both regions

72. During the filework phase of an assurance engagement the internal auditor decides that she wants to adjust the audit work program.

Which of the following is the most appropriate next step for the auditor to take9

Request additional information needed from management of the area under review.

Obtain approval from the engagement supervisor

Obtain the required resources, including I

to complete the work

Discuss the change in scope with management of the area under review.

73. Which of the following factors would the auditor in charge be least likely to consider when assigning tasks to audit team members for an engagement?

The amount of experience the auditors have conducting audits in the specific area of the organization.

The availability of the auditors in relation to the availability of key client staff.

Whether the budgeted hours are sufficient to complete the audit within the current scope.

Whether outside resources will be needed, and their availability.

74. Which of the following is the most important concept to be included in a consulting engagement agreement?

Define the duties and responsibilities needed from management to perform the engagement.

Disclose the fact that auditors who perform the work may not be subject matter experts in the topic of the review.

Clarify that matters discovered during the engagement may also be reported to senior management and the audit committee.

Disclose the fact that follow-up reviews may be conducted to ensure that recommendations are implemented adequately.

75. The board of directors expressed concerns about potential external risks that could impact the organization s ability to meet its annual objectives and goals The board requested consulting services from the internal audit activity to gain insight regarding the external risks.

Which of the following engagement objectives would be appropriate to fulfill this request?

Assess the organization's ability to minimize potential external risks

Assess the organization's process of vetting vendors that provide necessary services to the organization

Assess the organization's risk impacts from the markets in which it operates

Assess the organization's controls implemented that would help minimize risks

76. The IAA frequently is involved in various project teams and task forces in an advisory capacity.

1 and 2

1 and 3

2 and 4

3 and 4

77. Which of the following information is most appropriate for the chief audit executive to share when coordinating audit plans with other internal and external assurance providers?

Objectives scope and timing at a high level to support coordination while adhering to confidentiality requirements

The area and timing of the audit engagement to ensure confidentially and avoid conflict of interest.

All plan information, including risk assessments, planned tests and past results to maximize the opportunity for coordination with internal and external providers.

No information should be shared with internal and external provider as it could introduce bias into the engagement results.

78. Which of the following is an appropriate responsibility for the internal audit activity with regard to the organization's risk management program?

Identifying and managing risks in line with the entity's risk appetite.

Ensuring that a proper and effective risk management process exists.

Attaining an adequate understanding of the entity's key mitigation strategies.

Identifying and ensuring that appropriate controls exist to mitigate risks.

79. Which of the following has the greatest effect on the efficiency of an audit?

The complexity of deficiency findings.

The adequacy of preliminary survey information.

The organization and content of workpapers.

The method and amount of supporting detail used for the audit report.

80. Which of The following best describes a risk that is deemed "unacceptable" to the organization?

A risk where likelihood and impact are high

A risk where inherent risk exceeds its residual risk

A risk where inherent risk exceeds the tolerance level

A risk where residual risk exceeds the tolerance level

Page 9 of 10

81. Which of the following statements describes an engagement planning best practice?

It is best to determine planning activities on a case-by-case basis because they can vary widely from engagement to engagement.

If the engagement subject matter is not unique, it is not necessary to outline specific testing procedures during the planning phase.

The engagement plan includes the expected distribution of the audit results, which should be kept confidential until the audit report is final.

Engagement planning activities include setting engagement objectives that align with audit client's business objectives.

82. According to HA guidance, the chief audit executive is directly responsible for which of the following?

Maintaining a quality assurance program even in the absence of management support

Periodically reviewing and approving the internal audit charier

Providing opportunities for all staff auditors to satisfy their professional development requirements

Establishing the objectives scope and plan for each engagement

83. The audit plan is aligned with the organization's goals.

1 and 2 only

3 and 4 only

1, 2, and 4

1, 3, and 4

84. As part of internal audit's assistance with an annual external audit, the internal auditors are required to do a preliminary analytical review of an bank account balances. This involves verifying the current year end balances as web as comparing the current year end balances with previous year end balances to highlight significant changes.

Which of the following is the most reliable source for verification of the current year end bank balances?

Bank confirmations

Internal bonk statements

Bank reconciliations as of the end of the year

Bank account general ledger balancer as of the end of the year

85. Acceding to IIA guidance, when of the Mowing is an assurance service commonly performed by the internal audit activity?

Proposing fine item recommendation lot the annual financial budget of the accounting department

Making recommendations regarding financial approval authority limits for the operations department

Validating whether employees are following established policies and procedures in the procurement department

Generating expense report metrics for employees in the finance department

86. The same individuals who receive the final report.

1 only

1 and 2 only

1, 2, and 3

1, 2, and 4

87. An internal auditor uses a data query tool in the purchasing process to review the vendor master file for authorizations.

Which of the following describes the control objective likely being tested?

Effectiveness

Response

Efficiency

Mitigation.

88. An internal auditor was reviewing the procurement department's tender documentation for completeness He documented all discrepancies but the procurement manager disagreed with his findings Upon further review, the internal auditor noted that all discrepancies had been corrected in the tender database.

Which of the following courses of action would have prevented this situation?

The auditor should have ensured the preservation of audit evidence by taking screenshots or extracting tender documents

The auditor should have extracted a list of logs and identified any actions that were executed in the database during the audit

The auditor should have instructed procurement workers that changes to the database during the course of the audit were strictly forbidden

The internal auditor should have created a more thorough work program, which would address audit criteria and potential causes in more detail

89. The geographical dispersion of audit staff across the organization.

1 and 3

1 and 4

2 and 3

2 and 4

90. After the team member who specialized in fraud investigations left the internal audit team, the chief audit executive decided to outsource fraud investigations to a third party service provider on an as needed basis.

Which of the following is most likely to be a disadvantage of this outsourcing decision?

Cost.

Independence.

Familiarity.

Flexibility.

Page 10 of 10

91. Third-party opinion.

1 and 3

1 and 4

2 and 3

2 and 4

92. Determine how the information is stored.

1 and 3 only

2 and 4 only

1, 3, and 4 only

1, 2, 3, and 4

93. Internal control questionnaires are used to achieve which of the following objectives?

To ascertain the operating effectiveness of a procedure

To verify the accuracy of Information in a report

To assess the controls mitigating major risks

To determine whether specified contra procedures are in place

94. According to IIA guidance, which of the following actions might place the independence of the internal audit function in jeopardy?

Having no active role or involvement in the risk management process.

Auditing the risk management process for reasonableness.

Coordinating and managing the risk management process.

Participating with management in identifying and evaluating risks.

95. An internal auditor is assigned to validate calculations on the organization's building application As pad of the test the internal auditor is required to use an automated audit tool to simulate transactions for testing.

Which of the following would most appropriately be used for this purpose?

Generalized audit software.

Utility software

integrated test facilities

Audit expert systems

Updated IIA-CIA-Part2 Exam Study Guides

Updated IIA-CIA-Part2 Exam Study Guides

Share this post

Leave a Reply Cancel reply

Related Posts