Free Access IIA.IIA-CIA-Part2.v2022-07-26.q511 Practice Test (Page 30)

Question 141

Which of the following would not be an appropriate step for an internal auditor to perform during an assessment of compliance with an organization's privacy policy?

A.Determine who can access databases containing confidential information.

B.Evaluate the organization's privacy policy to determine if appropriate information is covered.

C.Analyze access to permanent files and reports containing confidential information.

D.Evaluate the government's security measures related to confidential information received from the organization.

Question 142

An internal auditor for a financial institution has just completed an audit of loan processing. Of the 81 loans approved by the loan committee, the auditor found seven loans which exceeded the approved amount. Which of the following actions would be inappropriate on the part of the auditor?

A.Report the amounts to the loan committee and leave it up to them to correct. Take no further follow-up action at this time and do not include the items in the engagement final communication.

B.Determine the amount of the differences and make an assessment as to whether the dollar differences are material. If the amounts are not material, not in violation of government regulations, and can be rationally explained, omit the observation from the engagement final communication.

C.Follow up with the appropriate vice president and include the vice president's acknowledgment of the situation in the engagement final communication.

D.Examine the seven loans to determine if there is a pattern. Summarize amounts and include in the engagement final communication.

Question 143

Management requested the chief audit executive (CAE) to include an audit of the organization'shealth and safety program in next year's annual audit plan. However, the internal audit department has no expertise in this area. Which of the following would be the most appropriate action by the CAE?

A.Accept the request provided management has conducted a thorough risk assessment prior to the engagement to help guide the audit.

B.Advise management that compliance audits of this type should only be conducted by the corresponding regulatory agency to ensure independence.

C.Meet with management to explain that the audit cannot be undertaken and discuss alternative strategies that can be implemented until internal audit can develop its capability in the area.

D.With management's agreement, amend the scope of the audit to ensure that areas examined do not require specialized knowledge and expertise.

Question 144

An audit of an organization's fulfillment department discovered that problems in the order processing system led to a significant number of orders being fulfilled multiple times. During the exit conference, the head of the department informed the auditors that the processing system would be enhanced within six months to correct the problems. Which course of action should the chief audit executive follow?

A.Monitor the status of corrective action and schedule a follow-up engagement when appropriate.

B.Adjust the scope of the next scheduled audit to determine that the problems have been resolved.

C.Assess the status of corrective action in a follow-up engagement in six months.

D.Meet with the audit committee to determine the appropriate follow-up action.

Question 145

Direct staff as a percentage of total staff is an example of which of the following types of efficiency measures?

A.Productivity ratio.

B.Resource utilization rate.

C.Operating ratio.

D.Productivity index.

Other Version: 1726IIA.IIA-CIA-Part2.v2024-12-09.q342; 7771IIA.IIA-CIA-Part2.v2023-05-26.q379; 7868IIA.IIA-CIA-Part2.v2023-04-08.q383; 3169IIA.IIA-CIA-Part2.v2023-03-09.q121; 13461IIA.IIA-CIA-Part2.v2022-09-28.q589; 9271IIA.IIA-CIA-Part2.v2022-01-22.q283; 108IIA.Prepawaypdf.IIA-CIA-Part2.v2021-10-22.by.nat.555q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 166TheSecOpsGroup.CNSP.v2025-09-08.q20; 229CFAInstitute.ESG-Investing.v2025-09-08.q173; 176PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 152Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 141

Question 142

Question 143

Question 144

Question 145

Download PDF File