Summer Sale Special 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ex2p65

Exact2Pass Menu

Question # 4

According to IIA guidance, which of re following actions should the internal auditor take immediately after having considered fraud scenarios and identified and prioritized fraud risks?

A.

Determine which controls if any are in place to mitigate the fraud risks

B.

Follow protocol for internal reporting and investigating fraud allegations

C.

Research frauds that nave occurred t\ similar organizations

D.

Incorporate the fraud risk assessment into the engagement plan

Full Access
Question # 5

Where should internal auditor focus their attention when identify and assessing key risks during the planning stage of an assurance engagement?

A.

Sampling risk.

B.

Audit risk.

C.

Residual risk.

D.

Inherent risk

Full Access
Question # 6

Which of the following statements describes an engagement planning best practice?

A.

It is best to determine planning activities on a case-by-case basis because they can vary widely from engagement to engagement.

B.

If the engagement subject matter is not unique, it is not necessary to outline specific testing procedures during the planning phase.

C.

The engagement plan includes the expected distribution of the audit results, which should be kept confidential until the audit report is final.

D.

Engagement planning activities include setting engagement objectives that align with audit client's business objectives.

Full Access
Question # 7

An internal auditor is conducting an assessment of the purchasing department. She has worked the full amount of hours budgeted for the engagement; however, the audit objectives are not yet complete. According to IIA guidance, which of the following are appropriate options available to the chief audit executive?

1. Allow the auditor to decide whether to extend the audit engagement.

2. Determine whether the work already completed is sufficient to conclude the engagement.

3. Provide the auditor feedback on areas of improvement for future engagements.

4. Provide the auditor with instructions and directions to complete the audit.

A.

1, 2, and 3

B.

1, 2, and 4

C.

1, 3, and 4

D.

2, 3, and 4

Full Access
Question # 8

Which of the following would most Holy reflect the best possible engagement objectives?

A.

Engagement objectives derived from risk assessment results from a company's risk function experts.

B.

Engagement objectives derived from senior management's risk assessment results

C.

Engagement objectives derived from the mental audit activity's own risk assessment results

D.

Engagement objectives derived from risk assessment results from both senior management and the company's risk function experts

Full Access
Question # 9

An internal auditor wanted to determine whether company vehicles were being used for personal purposes She extracted a report that listed company vehicle numbers business units to which the vehicles are allocated travel dates, travel duration and mileage She then filtered the data for weekend dates Which of the following additional information would the auditor need?

A.

Names and work titles of employees

B.

Description of responsibilities of business units.

C.

Average fuel consumption data of vehicles

D.

Location and route data of vehicles

Full Access
Question # 10

A chief audit executive (CAE) determined that management chose to accept a high-level risk that may be unacceptable lo the organization. Which is the best course of action for the CAE to Follow?

A.

Include using in a subsequent audit to determine if the risks are still present

B.

Discuss the matter with senior management and it not reserved with the board

C.

Require that management implement controls to mitigate lie risks

D.

Report the risks to the process owners so that they can modify their process

Full Access
Question # 11

Due to a recent system upgrade, an audit is planned to test the payroll process. Which of the following audit objectives would be most important to prevent fraud?

A.

Verify that amounts are correct.

B.

Verify that payments are on time.

C.

Verify that recipients are valid employees.

D.

Verify that benefits deductions are accurate.

Full Access
Question # 12

What is the primary objective of an engagement supervisor's review of key activities performed during the engagement?

A.

To ensure that the engagement is completed on time and within budget

B.

To ensure that all work performed meets acceptable quality standards

C.

To ensure that management has provided suitable responses to all observations

D.

To ensure that management is satisfied with the progress of the engagement

Full Access
Question # 13

Which of the following statements is true regarding internal auditors and other assurance providers?

A.

Assurance providers who report to management and/or are part of management cannot provide control serf-assessments services

B.

Internal auditors should always reperform and validate audit work completed by external assurance providers

C.

Internal auditors may rely on the work of internal compliance teams to expand their coverage of the organization without increasing direct audit

D.

hours Internal auditors can rely on the work of other assurance providers only rf the other assurance providers report directly to the board

Full Access
Question # 14

A senior internal auditor is hired within the internal audit activity for a period of two years before advancing to an operations manager role within the business operations team. When staffing arrangement is being used in this scenario?

A.

Comer of competence

B.

Career model

C.

Rotational model

D.

Cosourcing agreement

Full Access
Question # 15

Which of The following best describes a risk that is deemed "unacceptable" to the organization?

A.

A risk where likelihood and impact are high

B.

A risk where inherent risk exceeds its residual risk

C.

A risk where inherent risk exceeds the tolerance level

D.

A risk where residual risk exceeds the tolerance level

Full Access
Question # 16

Besides a chief audit executive's professional experience what determines the frequency and approach to assessing residual risk?

A.

The frequency of executing the internal audit engagements

B.

The frequency of changes in the organization environment

C.

The expectations set by the board and senior management

D.

The expectations set by operating management and senior management

Full Access
Question # 17

An internal auditor developed a list of internal and external risk considerations across the organization's processes, developed a scale to assess each risk and allocated the relative importance of each risk. When of the following approaches did the auditor take?

A.

Top-down approach

B.

Process-Metrix approach

C.

Risk-factor approach

D.

Bottom up approach

Full Access
Question # 18

When a significant finding is noted early during a review of the accounts payable function, which next course of action is best for communicating the issue?

A.

Intern accounting management via an interim memorandum update

B.

Note the item in the workpapers for inclusion in the final audit report

C.

Call a meeting and discuss me issue with the audit committee

D.

Alert the CEO as soon as the issue is discovered

Full Access
Question # 19

Which of the following sampling techniques is typically used when an internal auditor wants to test a large sample for fraud?

A.

Stratified sampling

B.

Haphazard sampling

C.

Discovery sampling

D.

Probability-proportional-to-size sampling

Full Access
Question # 20

An internal auditor was reviewing the procurement department's tender documentation for completeness He documented all discrepancies but the procurement manager disagreed with his findings Upon further review, the internal auditor noted that all discrepancies had been corrected in the tender database. Which of the following courses of action would have prevented this situation?

A.

The auditor should have ensured the preservation of audit evidence by taking screenshots or extracting tender documents

B.

The auditor should have extracted a list of logs and identified any actions that were executed in the database during the audit

C.

The auditor should have instructed procurement workers that changes to the database during the course of the audit were strictly forbidden

D.

The internal auditor should have created a more thorough work program, which would address audit criteria and potential causes in more detail

Full Access
Question # 21

An internal audit manager is planning a contract compliance audit Which of the following should be done prior to developing the audit work program?

A.

Select a sample of invoices for substantive testing

B.

Review the contract for evidence of authorization

C.

Document underlying reasons for noncompliance

D.

Assess the inherent risk of paying duplicate invoices

Full Access
Question # 22

An internal auditor is analyzing sates records and is concerned whether a transaction is recorded in the coned period. The accounting manager explains that the external auditor approved the records and produces an email from the external audit team leader. How should tie internal auditor respond?

A.

Ask the external auditor to review the same transaction again as an independent third party

B.

Consult account accounting principles, standards, and relevant guidelines in regard to timing of the entry

C.

Interview the chief financial officer and obtain her opinion on how the transactions should be recorded

D.

Compare the recording of this transaction to now similar ones were executed last year

Full Access
Question # 23

A chief audit executive's report to the board showed a significant trend of recent aud4s going over planned budgeted hours. Which of the following factors could cause this trend?

A.

Poor engagement supervision

B.

ineffective board reporting

C.

Untimely observation follows up and closure

D.

Limited staff resources

Full Access
Question # 24

A large investment organization hired a chief risk officer (CRO) to be responsible for the organization's risk management processes. Which of the following people should prioritize risks to be used for the audit plan?

A.

Operational management, because they are responsible for the day-to-day management of the operational risks.

B.

The CRO, because he is responsible for coordinating and project managing risk activities based on his specialized skills and knowledge.

C.

The chief audit executive, although he is not accountable for risk management in the organization.

D.

The CEO, because he has ultimate responsibility for ensuring that risks are managed within the agreed tolerance limits set by the board.

Full Access
Question # 25

Which of the following describes the primary objective of an internal audit engagement supervisor?

A.

Uphold the quality of the internal audit actively

B.

Provide engagement progress updates to management of the area under review

C.

Assure risks and controls are identified and assessed

D.

Ensure timely completion of the engagement

Full Access
Question # 26

Which of the following is the most important concept to be included in a consulting engagement agreement?

A.

Define the duties and responsibilities needed from management to perform the engagement.

B.

Disclose the fact that auditors who perform the work may not be subject matter experts in the topic of the review.

C.

Clarify that matters discovered during the engagement may also be reported to senior management and the audit committee.

D.

Disclose the fact that follow-up reviews may be conducted to ensure that recommendations are implemented adequately.

Full Access
Question # 27

Due to emerging new technologies that greatly affect the organization, the chief audit executive (CAE) wants to conduct frequent IT audit and is particularly focused on improving the quality of these engagements. Which of the following is the most viable solution for the CAE to ensure that IT audit quality is immediately enhanced and maintained long-term?

A.

Each year send a different member of the internal audit staff to an IT audit conference to learn about emerging technologies

B.

Contract an external IT special to offer advice and consult on IT audits

C.

Employ an independent external IT specialist to perform IT audits for the first year

D.

Invite qualified staff from the IT department to serve as guest auditors and lead IT audits

Full Access
Question # 28

According to IIA guidance which of the following statements is true regarding the annual audit plan?

A.

The annual audit plan should only be adjusted in response to problems with resourcing, scope, and data availability.

B.

The chief audit executive (CAE) may incorporate risk information, including risk appetite levels from management for the audit plan at her discretion.

C.

In an immature risk management environment it is preferable for the CAE to rely solely on her judgment regarding risk identification and assessment to develop the audit plan.

D.

The CAE may make adjustments to the annual audit plan as needed without senior management or board approval.

Full Access
Question # 29

During an audit of the accounts receivable (AR) process, an internal auditor noted that reconciliations are still not performed regularly by the AR staff, a recommendation that was made following a previous audit. Monitoring by the financial reporting function has failed to detect the shortcoming. Both the financial reporting function and AR report to the controller, who is responsible for implementing action plans. Which of the following supports the internal auditor's decision to combine both observations into one reported finding?

A.

The observation was made during the same audit, and the action plan has a common owner.

B.

The observation relates to the same control activity within a common process.

C.

The observation has a common control, and it was noted in a prior audit.

D.

The observation has a common process, and the action plan for the observation has a common owner.

Full Access
Question # 30

Which of the following engagement techniques would be best to meet the objective of denting a personal conflict -of -interest situation affecting an organization’s procurement function?

A.

Inquiry

B.

Analytical review

C.

Observation

D.

Inspection of documents

Full Access
Question # 31

Which of the following should be the focus of the effect section of the preliminary observations document?

A.

Residual risk

B.

Inherent risk

C.

Compensating controls

D.

Control activities

Full Access
Question # 32

What is the purpose of an internal control questionnaire?

A.

To gather information from a sample of people who are geographically dispersed

B.

To assess risks that could prevent an audited area from achieving its objectives.

C.

To evaluate tie level of compliance of remote offices with centrally designed procedures

D.

To perform testing of controls more frequently

Full Access
Question # 33

According to IIA guidance which of the following statements is true regarding heat maps?

A.

A heat map sets likelihood to have higher priority than impact.

B.

A heat map sets impact to have higher priority than likelihood.

C.

A heat map recognizes that the priority of impact and likelihood can vary.

D.

A heat map recognizes impact and likelihood as equally important

Full Access
Question # 34

Acceding to IIA guidance, when of the Mowing is an assurance service commonly performed by the internal audit activity?

A.

Proposing fine item recommendation lot the annual financial budget of the accounting department

B.

Making recommendations regarding financial approval authority limits for the operations department

C.

Validating whether employees are following established policies and procedures in the procurement department

D.

Generating expense report metrics for employees in the finance department

Full Access
Question # 35

An internal auditor develops an engagement observation related to an organization's accumulation of large travel advances. The auditor observes that the organization's procedures do not require justification for travel advances greater than a specific amount Which of the following best describes the organization's procedures?

A.

A criterion of the organization's accumulation of large travel advances

B.

A condition of the organization's accumulation of large travel advances

C.

A consequence of the organization's accumulation of large travel advances

D.

A cause of the organization's accumulation of large travel advances

Full Access
Question # 36

Which of the following is not a primary purpose for conducting a walk-through during the initial stages of an assurance engagement?

A.

To help develop process maps.

B.

To determine segregation of duties.

C.

To identify residual risks.

D.

To test the adequacy of controls.

Full Access
Question # 37

A toy manufacturer receives certain components from an overseas supplier and uses them to assemble final products Recently quality reviews have identified numerous issues regarding the components' compliance with mandatory quality standards. Which type of engagement would be most appropriate to assess the root causes of the quality issues?

A.

A risk assessment

B.

An operational audit

C.

A third-party audit

D.

A fraud investigation

Full Access
Question # 38

During a consulting engagement an internal auditor wants to determine whether all principal stakeholders are involved in a project. Which tool should the auditor use?

A.

RACI (responsible, accountable, consult and inform) chart

B.

Flowchart

C.

SWOT{strengths. weaknesses opportunities, and threats) analysis

D.

Workflow analysis

Full Access
Question # 39

Which of the following statements is false regarding audit criteria?

A.

Audit criteria should be consistent across audit assignments.

B.

Audit criteria should represent reasonable standards against which to assess existing conditions.

C.

Audit criteria should provide flexibility but allow identification of nonadherence.

D.

Audit criteria should equate to good or acceptable management practices.

Full Access
Question # 40

According to HA guidance, the chief audit executive is directly responsible for which of the following?

A.

Maintaining a quality assurance program even in the absence of management support

B.

Periodically reviewing and approving the internal audit charier

C.

Providing opportunities for all staff auditors to satisfy their professional development requirements

D.

Establishing the objectives scope and plan for each engagement

Full Access
Question # 41

Which of the following statements is true regarding the use of internal control questionnaires (ICOs)?

A.

ICQs are efficient because they minimize the need for follow-up with survey respondents

B.

Controls with positive survey responses can be eliminated from further testing

C.

Answers to survey questions can be easily misinterpreted

D.

ICQs offer limited value for organizations with uniform procedures

Full Access
Question # 42

Which of the following actions are appropriate for the chief audit executive to perform when identifying audit resource requirements?

1. Consider employees from other operational areas as audit resources, to provide additional audit coverage in the organization.

2. Approach an external service provider to conduct internal audits on certain areas of the organization, due to a lack of skills in the organization.

3. Suggest to the audit committee that an audit of technology be deferred until staff can be trained, due to limited IT audit skills among the audit staff.

4. Communicate to senior management a summary report on the status and adequacy of audit resources.

A.

1 and 3 only

B.

2 and 4 only

C.

1, 2, and 4

D.

2, 3, and 4

Full Access
Question # 43

Which of the following is the most appropriate approach for the internal audit activity to follow up on management action plans?

A.

Create a tracking system for follow up

B.

Ensure that follow-up activities are performed at least weekly.

C.

Delegate follow-up activities to qualified administrative staff within the business unit

D.

Ensure that follow-up activities are performed by the most senior auditor on staff

Full Access
Question # 44

An organization is expanding into a new line of business selling natural gas. The internal auditor is planning an engagement and wants to obtain a general understanding of the natural gas market the market share that the organization wants to win, and the competitive advantage that the organization may have. Which of the following would be the best source of such information?

A.

Interview responsible managers and read strategic documents

B.

Conduct internet searches on gas sales and analyze market players

C.

Review gas clients' portfolio and compile statistics on sales margins

D.

Analyze the organization's revenues and calculate the proportion of gas

Full Access
Question # 45

An internal auditor has suspicions that the management of a department splits me number of planned purchases to avoid the approval process required for larger purchases. Which of the following would be the most efficient technique to help the auditor identify the seventy of this malpractice?

A.

Examining the entire population

B.

Asking management about the malpractice

C.

Testing a sample of random transactions.

D.

Using data analytics

Full Access
Question # 46

In a health care organization the internal audit activity provides overall assurance on governance, risk and control The chief audit executive advises and influences senior management, and the audit strategy leverages the organization's management of risk According to HA guidance which of the following stages of internal audit maturity best describes this organization?

A.

Infrastructure.

B.

Emerging.

C.

Managed.

D.

Initial.

Full Access
Question # 47

Which of the following risk assessment approaches involves gathering data from work team representing different levels of an organisation?

A.

Surveys

B.

Management produced analysis 0

C.

Facilitated team workshops

D.

Weighted risk factors

Full Access
Question # 48

Which of the following is the primary reason the chief audit executive should consider the organization's strategic plans when developing the annual audit plan?

A.

Strategic plans reflect the organization's business objectives and overall attitude toward risk.

B.

Strategic plans are helpful to identify major areas of activity, which may direct the allocation of internal audit activity resources.

C.

Strategic plans are likely to show areas of weak financial controls.

D.

The strategic plan is a relatively stable document on which to base audit planning.

Full Access
Question # 49

Which of the following is a detective control for managing the risk of fraud?

A.

Awareness of prior incidents of fraud.

B.

Contractor non-disclosure agreements.

C.

Verification of currency exchange rates.

D.

Receipts for employee expenses.

Full Access
Question # 50

The board of directors expressed concerns about potential external risks that could impact the organization s ability to meet its annual objectives and goals The board requested consulting services from the internal audit activity to gain insight regarding the external risks Which of the following engagement objectives would be appropriate to fulfill this request?

A.

Assess the organization's ability to minimize potential external risks

B.

Assess the organization's process of vetting vendors that provide necessary services to the organization

C.

Assess the organization's risk impacts from the markets in which it operates

D.

Assess the organization's controls implemented that would help minimize risks

Full Access
Question # 51

During a review of the treasury function an internal auditor identified a risk that all bank accounts may net to include in the daily reconciliation process.

Which of the following responses would be most effective to mitigate this risk?

A.

The treasury supervisor establishes a threshold for amounts on bank statements to be reconciled against data in the system

B.

The treasury analyst performs a daily reconciliation of al bank statements obtained via email against data in the system

C.

The treasury analyst reviews a daily report automatically generated by the treasury system, which shows bank statements that have not been uploaded into the accounting system.

D.

The treasury supervisor seeks an annual confirmation from the bank regarding the bank statements processed within a year

Full Access
Question # 52

A corporate merger decision prompts the chief audit executive (CAE) lo propose interim changes to the existing annual audit plan to account for emerging risks Which of the following is the most appropriate action for the CAE to take regarding the changes made to the audit plan''

A.

Present the revised audit plan directly to the board for approval.

B.

Communicate with the chief financial officer and present the revised audit plan to the CEO tor approval

C.

Present the revised audit plan directly to the CEO for approval

D.

Communicate with the CEO and present the revised audit plan to the board for approval.

Full Access
Question # 53

The final engagement communication contains the following observation:

The internal auditor discovered that three of the 10 contracts reviewed failed to meet the organization's competitive bidding requirements Management explained that senior management deemed these purchases to be critical and awarded them as sole-source."

Which of the following components is missing in the documentation of the observation?

A.

Criteria.

B.

Effect

C.

Condition

D.

Cause

Full Access
Question # 54

An organization's finance manager plans to implement a state-of-the-art management system to better manage the organization's receivables. The finance manager consulted the chief audit executive (CAE) and asked for her assistance in determining whether the organization is able to accommodate this system. How would the CAE proceed to determine the objectives of this engagement

A.

Ask the CEO to determine the scope and objectives of the engagement

B.

Request that the board disclose its concerns over governance for inclusion in the engagement

C.

Discuss the concerns with the finance manager and work together to agree on the engagement objectives

D.

Review previous audit reports from the area and develop engagement objectives to address the area's key risks and controls

Full Access