IIA-CIA-Part2 Practice Test

Which of the following activities would be performed during a benchmarking consulting
engagement?
I. Collect data relevant to the benchmarking process.
II. Review all business processes.
III. Define critical success factors.
IV. Identify performance gaps.

A.

I and III only

B.

II and IV only

C.

I, II, and III only

D.

I, III, and IV only

Which of the following tests must an internal auditor perform in order to ensure that inbound
electronic data interchange (EDI) transactions are received and translated accurately?
I. Computerized tests to assess transaction reasonableness and validity.
II. Review of log books to ensure that transactions are logged upon receipt.
III. Edit checks to identify unusual transactions.
IV. Verification of limitations on the authority of users to initiate specific EDI transactions

A.

I and IV only

B.

II and III only

C.

I, II, and III only

D.

 I, II, III, and IV.

A chief audit executive has noticed that staff auditors are presenting more oral reports to
supplement written reports. The best reason for the increased use of oral reports is that they:

A.

Reduce the amount of testing required to support audit findings.

B.

Can be delivered in an informal manner without preparation.

C.

 Can be prepared using a flexible format and reduce the information included in the written
report.

D.

Permit auditors to counter arguments and provide additional information that the audience may
require.

Which of the following is a responsibility of the internal auditor once a fraud investigation has been
concluded?

A.

Ascertain the extent to which fraud has been perpetrated.

B.

Notify the appropriate regulatory authorities regarding the outcome of the investigation.

C.

Determine if controls need to be implemented or strengthened to reduce future vulnerability.

D.

Implement controls to prevent future occurrences

A bank is developing an integrated customer information system. The type of audit involvement
that would most likely help avoid implementation of a system that does not cover all types of
accounts would be:

A.

A design review.

B.

An application control review.

C.

A source code review.

D.

An access control review.