IIA-CRMA

Which of the following would be considered a preventive control?A . A library control log.B . A review of exception reports.C . A password lock on a server.D . A software scan of financial records for irregularities.View AnswerAnswer: C

Which of the following would provide the best evidence of errors in the quantities of items received from suppliers?A . Suppliers' reports of over shipments.B . Warehouse receiving logs.C . Purchase requisitions and purchase orders.D . Observation and inspection of inventory.View AnswerAnswer: B

Which of the following risk management activities is most appropriate for an internal auditor to undertake?A . Impose risk management processes.B . Coordinate risk management activities.C . Implement risk responses on management's behalf.D . Review the management of key risks.View AnswerAnswer: D

Which of the following would most likely be considered a red flag for fraud?A . An organization lacks a whistleblower hotline for reporting suspicious activity.B . A senior manager has been delegating the authority to sign-off on small dollar amount purchases to a subordinate.C . An employee in charge of...

Which of the following would provide the best guidance to a chief audit executive who is setting internal audit staff requirements?A . A review of audit staff education and training records.B . Information about the audit staff size and composition of comparable organizations.C . Results from discussions of audit needs...

What is the primary purpose of a fishbone diagram?A . To depict the areas of responsibility for departments in an organization.B . To plan and control complex projects, such as internal audits.C . To represent the frequencies of adverse conditions in a given process.D . To identify the possible causes...

Which of the following controls is not appropriate for sales in a manufacturing organization?A . Customers' orders are recorded promptly.B . Goods shipped are matched with valid customer orders.C . Goods returned are inspected for damage by the receiving department for proper disposition.D . Sales department approval is required for...

Why is it important for the chief audit executive to periodically review the audit charter and present the results to senior management and the board?A . Because management requires the review to measure effectiveness of the internal audit activity.B . So that the individual objectivity of the internal audit staff...

After being terminated due to downsizing, an internal auditor finds a different job with an organization in the same industry. Which of the following actions would violate the IIA Code of Ethics?A . To determine audit priorities in the new job, the auditor uses the audit risk approach that the...

Which of the following does not need to be defined in the internal audit charter?A . The audit engagements to be performed during the upcoming year.B . The internal audit activity's position within the organization.C . The scope of internal audit activities.D . Management and the board of directors' agreement...