Summer Sale Special 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ex2p65

Exact2Pass Menu

Question # 4

What is the main difference between a consulting engagement versus an assurance engagement?

A.

The nature of services provided are defined in the internal audit charter.

B.

Internal auditors must maintain objectivity while performing their work.

C.

The objectives and scope of the engagement typically are directed by management.

D.

Internal auditors may assume management responsibilities.

Full Access
Question # 5

Which of the following specifications in an internal audit charter is the most important factor in the internal audit activity’s independence?

A.

Description of internal audit activity's responsibilities

B.

Definition of internal auditing

C.

Statement of internal audit activity's authority

D.

Description of internal audit activity's reporting structure

Full Access
Question # 6

An internal auditor notes that inventory counts are conducted on Mondays only and that all documentation is on paper as there are no computers in the underground warehouses. Also she notices that the person responsible for receiving the goods is the same one who distributes materials and spare parts Finally, she sees that spare parts are written off and taken by the heads of mining units to different underground locations to wait for their turn to be installed. Which of the described findings requires more consideration from a fraud risk perspective?

A.

The job responsibilities of the warehouse employee compromise segregation of duties

B.

Spare parts are written off before their actual usage and installation

C.

Warehouse management is conducted on paper and requires further investigation

D.

The inventory counts take place on specific days of the week for no apparent reason

Full Access
Question # 7

In a retail organization, sales teams compete with each other to achieve and exceed sales targets. Each quarter, the members of the top sales team receive a bonus. In this environment, management should closely monitor for the emergence of which of the following potential risks?

A.

Risks related to employee turnover.

B.

Risks related to data manipulation.

C.

Risks related to employee competency.

D.

Risks related to not achieving sales targets.

Full Access
Question # 8

Which of the following statements is the most appropriate for a chief audit executive to include in the internal audit policy manual in order to promote objectivity?

A.

Internal auditors may conduct a financial effectiveness engagement in a business unit at any point after being transferred from that area.

B.

Internal auditors may conclude that a business unit's current control environment is adequate and effective if the review of the prior year's workpapers and audit report supports that conclusion.

C.

Internal auditors may conduct an engagement in a business unit at any point after providing a training workshop in that area.

D.

Internal auditors should limit the scope of an engagement if they become aware of a potential impairment of their objectivity in order to reduce the potential impact of the impairment on the engagement results.

Full Access
Question # 9

An external assessment was performed as part of the organization's quality assurance and improvement program. Which of the following conclusions confirms that the internal audit activity is in conformance with the Standards'?

A.

The chief audit executive is well qualified and has responsibilities over operational areas that the internal audit activity assesses.

B.

Periodic self-assessments are assigned to entry-level internal audit staff to support their continuing professional development.

C.

All audit workpapers are reviewed and signed by the engagement supervisor before the audit report is issued.

D.

Employees who rotate into the internal audit activity from other areas of the organization are assigned to audit areas where they previously worked, to take advantage of their operational expertise and experience.

Full Access
Question # 10

Which of the following is the internal audit activity expected to do with respect to the organization's governance processes?

A.

Formally audit all governance activities.

B.

Provide strategic guidance on the organizational processes to senior management.

C.

Achieve agreement with the board regarding the range of activities, depth of review, and time period to include in the assessment.

D.

Audit against the governance structures and practices widely used in the industry.

Full Access
Question # 11

During an assurance engagement, an internal auditor identified that a developer of the organization's enterprise resource planning (ERP) system had intentionally modified the production code to commit a fraudulent transaction. Which control activity should be implemented to prevent such issues in the future?

A.

Segregate duties between code development and migrating changes into production.

B.

Conduct fraud training for the IT team responsible for the ERP system.

C.

Penalize the developer who committed the fraud by terminating employment.

D.

Restrict developers' access to the ERP system's test environment.

Full Access
Question # 12

When an organization purchases a derivative contract in the stock market to limit the potential loss in the value of a security, the organization is applying which of the following risk management techniques?

A.

Avoiding the risk altogether.

B.

Transferring the risk.

C.

Introducing a control feature.

D.

Accepting the risk.

Full Access
Question # 13

Which of the following actions by the internal audit activity requires disclosure to the board of nonconformance with the Standards?

A.

The internal audit activity did not complete an external assessment within the last seven years

B.

The internal audit activity performed an engagement with limited scope due to lack of knowledge

C.

The internal audit activity failed to consider risk when conducting a review of a department

D.

An internal auditor was assigned to an engagement m an area where she previously worked more than 10 years ago

Full Access
Question # 14

During an assurance engagement, an internal auditor reviews a tender inviting vendors to submit bids to supply financial services software to the organization. She suspects that the tender was tailored for the bidder who eventually won the contract. What should the auditor do next?

A.

Review payments made for the financial services software.

B.

Confront a procurement specialist with the suspicion.

C.

Submit an anonymous tip to the whistleblower hotline.

D.

Analyze technical terms and conditions of the tender.

Full Access
Question # 15

Once an organization's risks are identified, what would be the next step to ensure resources are properly allocated to manage those risks?

A.

Risk responses must be selected.

B.

Risks must be assessed.

C.

The risk universe must be established.

D.

Risk responses must be aligned.

Full Access
Question # 16

Which of the following engagements would be considered an appropriate consulting service?

A.

The internal audit activity of a commercial bank routinely performs branch audits for compliance with regulations.

B.

The internal audit activity participates in a cosourcing arrangement with an IT audit firm to test information systems security.

C.

The internal audit activity facilitates biannual training of the risk management team in risk identification methodologies.

D.

The internal audit activity partners with external auditors annually to complete fieldwork required as a part of the external audit exercise.

Full Access
Question # 17

A global manufacturing company has three regional offices. The chief audit executive (CAE) is concerned about the cost of an upcoming external quality assessment of the internal audit activity. The last external assessment was performed six years ago. Recently, the internal audit staff at one of the regional offices performed an internal assessment. To ensure conformance with the Standards, what is the most appropriate action for the CAE to take?

A.

Request from the audit committee an additional budget and an extension so that the external assessment could be performed next year.

B.

Review the results of the internal assessment, identify weaknesses, and implement improvements at the remaining offices.

C.

Request the regional office that performed the internal assessment to perform an assessment of the remaining offices.

D.

Request that an external assessor validate the results of the internal assessment and review the remaining offices.

Full Access
Question # 18

Who has the ultimate responsibility of implementing the organization’s governance system?

A.

Stakeholders

B.

The board

C.

The chief executive officer

D.

Internal auditors

Full Access
Question # 19

According to IIA guidance, which of the following is ultimately responsible for seeing that the internal control system of an organization’s social responsibility program is effective?

A.

Senior management

B.

Internal audit activity.

C.

All employees.

D.

Board of directors.

Full Access
Question # 20

Which of the following would be the most suitable internal control framework for an organization to adopt?

A.

A framework that specifies common best practices for an organization to evaluate and benchmark.

B.

A framework that specifies correct and incorrect business methodologies.

C.

A framework with precise specifications for how controls and processes should be employed.

D.

A framework that offers step-by-step guidance for remedial action for all organization types.

Full Access
Question # 21

Management of an area under review is aggressive, upset, and questioning the knowledge and experience of the organization's internal auditors, as the audit results highlight critical findings. The relationship between the internal audit activity and management has continued to degenerate. as previous audit reports also showed a large number of issues. What would be the best strategy for working through the current audit results while also attempting to repair the relationship with management?

A.

Take an accommodating approach and change the overall rating of the audit report.

B.

Take a compromising approach by modifying the tone of the report, while maintaining the critical findings.

C.

Take an assertive approach and be persistent in attempting to convince the director.

D.

Take an assisting approach and offer to assist with the implementation of action plans.

Full Access
Question # 22

According to IIA guidance, a new internal auditor is expected to possess which of the following competencies?

A.

Technical industry-specific expertise.

B.

Expertise in cybersecurity, an area of increasing risk.

C.

Knowledge of IT risks and controls.

D.

Knowledge of forensic accounting.

Full Access
Question # 23

Which of the following actions would best help the internal audit activity promote continuous improvement in control effectiveness within the organization?

A.

Determining whether management measures and monitors the costs and benefits of controls.

B.

Providing training on controls and ongoing self-monitoring processes.

C.

Developing flowcharts to obtain information about control design adequacy.

D.

Identifying objectives and the risks involved in achieving them.

Full Access
Question # 24

Which of the following is the most effective way any organization can ensure proper governance over its internal controls?

A.

By adopting the best practices of similar organizations in the industry.

B.

By adjusting their internal control framework as business practices evolve.

C.

By introducing the universally accepted COSO internal control framework.

D.

By encouraging the internal audit activity to provide training on internal controls.

Full Access
Question # 25

An internal auditor believes that a weakness exists in the control environment relating to the delegation of authority and responsibility within the management structure. Which of the following actions should the internal auditor first consider in this matter?

A.

Recommend a control change and obtain management support.

B.

Evaluate the potential Impact on related controls.

C.

Address the risk with senior management and the board.

D.

Develop and communicate the scope and evaluation criteria to be used by management.

Full Access
Question # 26

Which of the following best demonstrates organizational independence of the internal audit activity?

A.

The chief audit executive (CAE) reports functionally to the CEO.

B.

The CAE's compensation is approved by the chief financial officer.

C.

The CAE's appointment Is determined by the CEO

D.

The CAE reports administratively to the chief operating officer.

Full Access
Question # 27

During an audit of company expenses, the internal auditor performed a test using data analytics and identified a violation of the company's expenses policy. The auditor who discovered the issue considered it a potential fraudulent transaction and informed the chief financial officer (CFO). The CFO dismissed the concern because he did not understand the data analytics test that was performed and the transaction was of a low value. Given this situation, which skills or competencies should this internal auditor seek to improve?

A.

Skills in evaluating the risk of fraud.

B.

Knowledge of key IT risks and controls

C.

Soft skills such as communication and negotiation.

D.

Knowledge and understanding of the company's expenses policy

Full Access
Question # 28

Which of the following actions should the organization's governing body perform to provide the most effective governance over the organization's culture?

A.

Coordinate control activities.

B.

Provide direction.

C.

Design key controls.

D.

Deliver assurance.

Full Access
Question # 29

The internal audit activity is undergoing a self-assessment as part of its quality assurance and improvement program Which of the following observations must be addressed in order for the internal audit activity to achieve conformance with the Standards?

A.

The internal audit charter does not identify which audit services are outsourced

B.

The internal audit charter has not been reviewed by the legal department

C.

The internal audit charter has not been approved by the board within the past year

D.

The internal audit charter does not describe the authority of the internal audit activity

Full Access
Question # 30

Which of the following tests would most likely help discover a fictitious invoice?

A.

Compare vendor addresses to employee addresses.

B.

Match cancelled checks to invoices.

C.

Search for duplicate payment amounts.

D.

Check employee bank records against invoice amounts.

Full Access
Question # 31

A multinational organization has asked the internal audit activity to assist in setting up the organization’s risk management system. The chief audit executive (CAE) agrees to take on the engagement as a consultant. Which of the following tasks is appropriate for the CAE to undertake?

A.

Coordinate and facilitate risk workshops for management to attend.

B.

Establish the degree of risk appetite for management to accept.

C.

Set risk indicators and mitigation plans for management to implement

D.

Determine the number of significant risks for management to report to the board.

Full Access
Question # 32

Wi ch of the following circumstances would most likely be considered a potential red flag for fraud by the internal audit activity?

A.

The monthly payroll reports are not vetted to ensure terminated employees have been removed from the payroll system

B.

The volume of nonroutine journal entries has steadily increased over time.

C.

The database of approved suppliers has not been reviewed the last year

D.

The recent employee survey indicates that some employees remain unaware of the organization’s whistieblower hotline.

Full Access
Question # 33

Which of the following offers the feast evidence that the internal audit activity has achieved organizational independence?

A.

An independent third party has assessed the organization's system of internal controls to be adequate and effective.

B.

The chief audit executive reports both functionally and administratively to the CEO.

C.

The internal audit charter is drafted properly and approved by the appropriate parties.

D.

The mission statement and strategy of the internal audit activity demonstrates alignment to organizational objectives.

Full Access
Question # 34

According to IIA guidance, which of the following is accurate regarding the chief audit executive's (CAE's) requirement to report the results of quality assessments?

1. The CAE must report the results of external assessments at least annually.

2. The CAE must report the results of ongoing monitoring at least annually.

3. The CAE must report the results of quality assessments to senior management.

4. The CAE must report the results of quality assessments to the board.

A.

1 and 3 only.

B.

2 and 4 only.

C.

1,2. and 3.

D.

2,3, and 4.

Full Access