IIA IIA-CRMA Certification in Risk Management Assurance (CRMA) Exam Online Training
IIA IIA-CRMA Online Training
The questions for IIA-CRMA were last updated at Nov 22,2024.
- Exam Code: IIA-CRMA
- Exam Name: Certification in Risk Management Assurance (CRMA) Exam
- Certification Provider: IIA
- Latest update: Nov 22,2024
According to IIA guidance, which of the following statements is true?
- A . Risks in IT processes are best mitigated by individual controls.
- B . The overall focus of the framework is on significant controls in all critical IT applications.
- C . IT risks and related controls are operational and best identified using a bottom-up approach.
- D . Control process risks are found at multiple layers of the IT environment.
Which of the following is not an appropriate activity for internal auditors to perform?
- A . Recommend management seek a consulting firm to advise on outsourcing.
- B . Highlight matters that require management’s attention.
- C . Implement solutions for specific organizational problems.
- D . Accumulate data, obtain varying views, and report information to senior management.
While reviewing first quarter sales transactions, an internal auditor discovered that 10 invoices for a new customer had not been posted into the accounts receivable subsidiary ledger. Those 10 invoices were listed in an error report automatically generated by the sales processing system. The system had rejected the invoices because the customer’s account number was not found in the customer master file.
In this scenario, which of the following controls was lacking?
- A . Corrective control.
- B . Preventive control.
- C . Detective control.
- D . Directive control.
A candidate has applied for an entry level internal audit position. The candidate holds a CISA (Certified Information Systems Auditor) designation, and has six months of audit experience, but limited knowledge of accounting principles and techniques.
According to the IIA guidance, which of the following is the most relevant reason for the chief audit executive to consider this candidate?
- A . Other internal auditors possess sufficient knowledge of accounting principles and techniques.
- B . The candidate’s information systems knowledge and real-world experience in internal auditing.
- C . Accounting skills can be learned over time with appropriate training.
- D . An entry level position does not require expertise in any particular area.
Which of the following actions indicates a lack of due professional care by an internal auditor performing an audit of a store’s cash function?
- A . The audit report included a well-supported recommendation for a reduction in staff even though such a reduction might adversely impact morale.
- B . The auditor tested samples of transactions to test the cash function’s process flows.
- C . After determining that the cash function internal controls were strong, the audit report assured senior management that fraud was not present.
- D . The auditor discovered an instance of potential fraud and reported it immediately to management, but did not alert authorities outside the organization.
Which type of objectives can best be described as broad goals that promote the effective and efficient use of resources?
- A . Strategic objectives.
- B . Operational objectives.
- C . Reporting objectives.
- D . Compliance objectives.
The last quality assessment of the internal audit activity identified three areas for improvement: the achievement of audit engagement objectives, quality of work, and staff development.
According to IIA guidance, which of the following should be the chief audit executive’s primary focus to achieve these recommended improvements?
- A . Demonstrated compliance with procedures.
- B . Due professional care.
- C . Engagement supervision.
- D . Employment of tools and techniques.
According to the Standards, which of the following best describes why initial audit test results should be reported to the auditor-in-charge prior to advising management?
- A . It increases the likelihood of obtaining the audit client’s agreement with the results.
- B . It ensures that an appropriate chain of evidence is maintained through the workpapers.
- C . It helps ensure that appropriate professional judgments and conclusions are made.
- D . It is required to demonstrate that effective engagement supervision has occurred.
The internal audit supervisor is reviewing the workpapers prepared by the staff.
According to the Standards, which of the following statements regarding workpaper supervision is not true?
- A . Review notes of questions that arise during the review process must be retained.
- B . Dating and initialing each workpaper provides evidence of review.
- C . Workpaper review allows for staff training and development.
- D . Workpapers may be amended during the review process.
An internal audit charter describes the mission and scope of the internal audit activity (IAA), responsibilities of the IAA, accountability of the chief audit executive, independence of the IAA, and standards followed by the IAA.
Which of the following also should be included in the charter?
- A . The purpose of the IAA.
- B . The IAA’s right to have unrestricted access to functions, records, personnel, and physical property.
- C . A detailed audit plan or program for the year.
- D . The job specifications and descriptions of the internal audit staff.