Question 1

A computer system automatically locks a user's account after three unsuccessful attempts to log on.Which type of control does this scenario represent?

Options :

A : Corrective control.

B : Preventive control.

C : Detective control.

D : Compensating control.

Answer: B

Question 2

If an engagement client disputes that a specific action or process is within the scope of the internal audit activity, what would be the most appropriate way for the internal audit activity (IAA) to respond?

Options :

A : Terminate the audit engagement in full because an operational audit will not be productive without the client-s cooperation.

B : Terminate only the specific action or process with which the client disagrees and work to determine a substitute function that will not impede further IAA or the client-audit relationship.

C : Refer the client to the IAA-s charter and the approved yearly audit plan, which includes the areas designated for audit in the current time period

D : Seek the approval of senior management or the board in mediation, allowing an overseer to clarify the scope of the audit engagement for the client.

Answer: C

Question 3

The chief audit executive is revising policies relating to independence and objectivity of the internal audit activity. Which of the following would be a part of the revised policies document?

Options :

A : Any auditor that received high-value gifts from an audit client must report it to their supervisor.

B : Any auditor that received gifts of low-value promotional items from an audit client must report it to their supervisor.

C : An auditor does not need to complete an annual conflict of interest form unless the auditor-s independence status has changed.

D : An auditor may provide consulting services relating to operations for which they had previous responsibilities.

Answer: D

Question 4

The chief audit executive (CAE) is requested to complete an IT engagement within the year. The CAE determines that the internal audit activity does not currently have the required competencies for the engagement. Which of the following would be the most appropriate response?

Options :

A : Assign a staff member from the IT department to assist with the engagement.

B : Decline the engagement since the internal audit activity lacks the required competencies.

C : Recruit a new staff member from a competing organization who has the required competencies.

D : Recruit a finance department manager who recently transferred from the IT department.

Answer: A

Question 5

Which of the following would be a violation of the IIA Code of Ethics?

Options :

A : Reporting information that could be damaging to the organization, at the request of a court of law.

B : Including an issue in the final audit report after management has resolved the issue.

C : Participating in an audit engagement for which the auditor does not have the necessary experience or training.

D : Accepting a gift that is a commercial advertisement available to the public.

Answer: C

Free IIA-CIA-Part1-3P Mock Exam – Practice Online Confidently

Buying Options: