IIA-CIA-Part2 Practice Test

The most effective method of reporting engagement results to management and stimulating action
is to:

A.

Deliver a lecture on the engagement results.

B.

Limit verbal commentary and present a series of slides that graphically depict the engagement
results.

C.

Use slides to support a discussion of major points.

D.

Distribute copies of the report, ask the participants to read the report, and ask for questions

Which of the following items should be addressed in an organization's privacy statement?
I.
Intended use of collected information
Data storage and security.
III.
Network/infrastructure authentication controls.
IV.
Data retention policy of the organization.
Parties authorized to access information.

A.

I and II only

B.

I and IV only

C.

 I, II, and V only

D.

II, III, IV, and V only

An internal auditor is conducting tests to determine if an organization is in compliance with its
payment approval policies. After reviewing a sample of vouchers selected, the internal auditor
concluded that there were indicators of fraud. Which of the following would be the most
appropriate method to expand the audit test to achieve the audit objective?
I.
Validate the completeness of the accounts payable files.
II.
Examine the sample of vouchers in greater detail.
III.
Increase the number of vouchers in the sample.
IV.
Broaden the scope of the examination to include credits received by accounts payable.

A.

I and II only

B.

II and III only

C.

I, II, and IV only

D.

 I, III, and IV only

During a review of performance measures in an organization's purchasing function, the preliminary
survey indicates that most of the measures have been in use for some time. The internal auditor
should:

A.

Review the data that was used to develop the measures.

B.

Perform benchmarking in order to verify that the measures being used are meaningful.

C.

Establish the history of the measures and reasons for use.

D.

Report that the measures being used are out-of-date and should be improved.

What is the primary reason for having audit management approve audit engagement reports?

A.

To ensure that client concerns are appropriately addressed.

B.

To confirm proper format, grammar, and punctuation.

C.

To verify that senior management supports the report's conclusions.

D.

 To validate that report findings are substantiated.