Question 1

If observed during fieldwork by an internal auditor, which of the following activities is least important to communicate formally to the chief audit executive?

Options :

A : Acts that may endanger the health or safety of individuals.

B : Acts that favor one party to the detriment of another.

C : Acts that damage or have an adverse effect on the environment.

D : Acts that conceal inappropriate activities in the organization.

Answer: B

Question 2

An internal auditor has suspicions that the management of a department splits me number of planned purchases to avoid the approval process required for larger purchases. Which of the following would be the most efficient technique to help the auditor identify the seventy of this malpractice?

Options :

A : Examining the entire population

B : Asking management about the malpractice

C : Testing a sample of random transactions.

D : Using data analytics

Answer: D

Question 3

An internal auditor is assessing the organization's risk management framework. Which of the following formulas should he use to calculate the residual risk?

Options :

A :

B :

C :

D :

Answer: C

Question 4

While conducting an information security audit, an internal auditor learns that the existing disaster recovery plan is four years old and untested. The auditor also learns that in the four years since the recovery plan was implemented, the information systems have undergone extensive changes. Which of the following actions is most appropriate for the auditor to take?

Options :

A : Inform management and request that the plan be tested immediately.

B : Update the recovery plan for management, as part of the review.

C : Evaluate the recovery plan and report weaknesses to management.

D : Recommend that management and users update and test the recovery plan.

Answer: D

Question 5

To effectively communicate the acceptance of risk in an organization a chief audit executive must first consider which of the following?

Options :

A : The organization-s view on risk tolerance

B : The organization-s principal risk events.

C : The organization-s risk response strategies

D : The organization-s major control activities

Answer: A

Confidently Practice Online with Free IIA-CIA-Part2-3P Exam Cram

Buying Options: