IIA-CIA-Part2 Practice Test

If participants in a control self-assessment workshop begin breaking their agreed-upon ground
rules, the facilitator should:

A.

Ignore the behavior and continue the workshop.

B.

Allow them to continue briefly and then remind them of the ground rules.

C.

Have the participants modify the ground rules.

D.

Strictly enforce the ground rules.

Which of the following is the first step in the process where auditors and clients work together to
evaluate the clients' system of internal control?

A.

Assess risks.

B.

Develop questionnaires.

C.

Identify and assess controls.

D.

Identify objectives

An internal auditor has a recommendation to change operations which could potentially increase
profits by $50,000. The best way to sell this recommendation to management is to:

A.

Carefully work out the details of implementation before presenting it to department
management.

B.

Discuss it with operating supervisors who are directly affected by the change, and then with
department management.

C.

Bring it to the audit manager, who should bring it immediately to senior management's
attention.

D.

Wait until the exit conference to discuss it in order to ensure all affected parties are present.

A chief audit executive agrees to conduct an engagement that will focus on customers'
perceptions of the quality of the organization's products and services. Which of the following
issues should be addressed first?

A.

 Cost-effectiveness.

B.

Quality control.

C.

Customer complaints.

D.

Supplier deliveries.

During an information security audit, an auditor discovers that the current disaster recovery plan
was developed three years ago but never tested. There have been significant changes to
information systems since the plan was developed. The auditor should:

A.

Ask management to test the recovery plan immediately.

B.

Recommend that management and users update and test the recovery plan.

C.

 Update the recovery plan for management as part of the review.

D.

Review the recovery plan and report weaknesses to management