UPTIME Data center infrastructure audit |
Practice Questions & Study Guide
ID14183
,UPTIME Data center infrastructure audit | Practice Questions & Study Guide
1. A client recommendation is being prepared. With respect to Provider-neutral 10. A customer file is missing required verification. Which action is most likely
competency coverage rather than a claimed single official blueprint, because the to prevent recurrence of a problem involving business knowledge supporting audit
title does not identify one standardized examination; study is framed around Data conclusions?
center infrastructure audit without presenting it as an official standardized A. Approve the transaction because the requester is senior.
exam blueprint, what is the best FIRST action? B. Use an undocumented assumption because it produces a more favorable result.
A. Recommend the highest-return option without considering client constraints. C. Obtain the required independent approval and preserve the audit trail, then confirm
B. Force the reconciliation to zero with an unsupported journal entry. that the corrective action is effective before closure.
C. Delete the exception from the report once the immediate transaction is complete. D. Bypass verification when the customer relationship is longstanding.
D. Document the exception, investigate its cause and remediate the control weakness. Correct Answer: C
Correct Answer: D Explanation: The strongest exam-style response is the one that controls immediate risk,
Explanation: The correct choice follows a verify-act-confirm sequence. That is more checks the relevant condition, and then acts within the defined requirements for
reliable than bypassing controls or making multiple uncontrolled changes. business knowledge supporting audit conclusions.
2. A valuation assumption changes materially before reporting. Which evidence is 11. A customer file is missing required verification. Which sequence is most
most important when evaluating Provider-neutral competency coverage rather than a appropriate when carrying out Internal-audit purpose, authority, independence and
claimed single official blueprint? objectivity?
A. Use an undocumented assumption because it produces a more favorable result. A. Force the reconciliation to zero with an unsupported journal entry.
B. Bypass verification when the customer relationship is longstanding. B. Base the recommendation on documented client facts, constraints and applicable
C. Review reconciliation trail and independently verifiable evidence and compare the requirements, then verify the resulting state before moving to the next step.
findings with the applicable criteria. C. Delete the exception from the report once the immediate transaction is complete.
D. Approve the transaction because the requester is senior. D. Recommend the highest-return option without considering client constraints.
Correct Answer: C Correct Answer: B
Explanation: The strongest exam-style response is the one that controls immediate risk, Explanation: The correct response protects the integrity of the process: establish the
checks the relevant condition, and then acts within the defined requirements for facts, apply the appropriate control, and verify the result before closure.
Provider-neutral competency coverage rather than a claimed single official blueprint.
12. A valuation assumption changes materially before reporting; a transaction
3. An unusual transaction triggers a control alert. Which response best controls exceeds the normal threshold. Which choice demonstrates the strongest control of
the primary risk associated with because the title does not identify one Internal-audit purpose?
standardized examination? A. Bypass verification when the customer relationship is longstanding.
A. Delete the exception from the report once the immediate transaction is complete. B. Escalate suspicious activity through the prescribed process without tipping off
B. Document the exception, investigate its cause and remediate the control weakness. inappropriate parties.
C. Recommend the highest-return option without considering client constraints. C. Approve the transaction because the requester is senior.
D. Force the reconciliation to zero with an unsupported journal entry. D. Use an undocumented assumption because it produces a more favorable result.
Correct Answer: B Correct Answer: B
Explanation: The correct response protects the integrity of the process: establish the Explanation: This approach preserves control of the situation while producing evidence
facts, apply the appropriate control, and verify the result before closure. that can confirm whether the action actually corrected the issue involving
Internal-audit purpose.
4. A reconciliation identifies an unexplained difference; the reconciliation
difference is $2,450. Before proceeding with work involving study is framed 13. A reconciliation identifies an unexplained difference. What is required
around Data center infrastructure audit without presenting it as an official before accepting the result related to Risk-based audit planning, scoping and
standardized exam blueprint, what should be verified? engagement objectives?
A. Review transaction purpose, authorization and supporting records and compare the A. Recommend the highest-return option without considering client constraints.
findings with the applicable criteria. B. Force the reconciliation to zero with an unsupported journal entry.
B. Approve the transaction because the requester is senior. C. Delete the exception from the report once the immediate transaction is complete.
C. Use an undocumented assumption because it produces a more favorable result. D. Review policy requirements and segregation-of-duties controls and compare the
D. Bypass verification when the customer relationship is longstanding. findings with the applicable criteria.
Correct Answer: A Correct Answer: D
Explanation: This approach preserves control of the situation while producing evidence Explanation: This answer uses verified evidence before action, which reduces the chance
that can confirm whether the action actually corrected the issue involving study is of masking the real problem and supports a traceable decision about Risk-based audit
framed around Data center infrastructure audit without presenting it as an official planning, scoping and engagement objectives.
standardized exam blueprint. 14. A control owner discovers a recurring exception. Under these conditions, when
5. A control owner discovers a recurring exception. Which troubleshooting should the issue involving Risk-based audit planning be escalated?
approach is most appropriate for Professional ethics and applicable A. Use an undocumented assumption because it produces a more favorable result.
internal-audit standards? B. Bypass verification when the customer relationship is longstanding.
A. Force the reconciliation to zero with an unsupported journal entry. C. Approve the transaction because the requester is senior.
B. Document the exception, investigate its cause and remediate the control weakness. D. Escalate suspicious activity through the prescribed process without tipping off
C. Delete the exception from the report once the immediate transaction is complete. inappropriate parties.
D. Recommend the highest-return option without considering client constraints. Correct Answer: D
Correct Answer: B Explanation: The selected action best supports safe, compliant, and technically sound
Explanation: This answer uses verified evidence before action, which reduces the chance performance because it addresses Risk-based audit planning using observable evidence
of masking the real problem and supports a traceable decision about Professional ethics rather than convenience.
and applicable internal-audit standards. 15. An unusual transaction triggers a control alert. Which comparison is most
6. A reconciliation identifies an unexplained difference. Which action best useful for interpreting engagement objectives?
supports a defensible decision about Professional ethics? A. Delete the exception from the report once the immediate transaction is complete.
A. Bypass verification when the customer relationship is longstanding. B. Review client objectives, constraints and documented risk profile and compare the
B. Approve the transaction because the requester is senior. findings with the applicable criteria.
C. Escalate suspicious activity through the prescribed process without tipping off C. Recommend the highest-return option without considering client constraints.
inappropriate parties. D. Force the reconciliation to zero with an unsupported journal entry.
D. Use an undocumented assumption because it produces a more favorable result. Correct Answer: B
Correct Answer: C Explanation: A defensible professional decision should be based on current evidence and
Explanation: The selected action best supports safe, compliant, and technically sound applicable criteria. The other choices rely on assumption, remove safeguards, or change
performance because it addresses Professional ethics using observable evidence rather conditions before the cause is understood.
than convenience. 16. A report contains figures that do not agree with the source ledger; the
7. A control owner discovers a recurring exception. A change affecting applicable reconciliation difference is $2,450. Which action best distinguishes the
internal-audit standards is being considered. How should it be handled? underlying cause from a symptom in Governance, enterprise risk management and
A. Recommend the highest-return option without considering client constraints. control frameworks?
B. Force the reconciliation to zero with an unsupported journal entry. A. Approve the transaction because the requester is senior.
C. Document the exception, investigate its cause and remediate the control weakness. B. Obtain the required independent approval and preserve the audit trail, then confirm
D. Delete the exception from the report once the immediate transaction is complete. that the corrective action is effective before closure.
Correct Answer: C C. Use an undocumented assumption because it produces a more favorable result.
Explanation: A defensible professional decision should be based on current evidence and D. Bypass verification when the customer relationship is longstanding.
applicable criteria. The other choices rely on assumption, remove safeguards, or change Correct Answer: B
conditions before the cause is understood. Explanation: This is the most appropriate option because it connects the observed
condition to the governing requirement and leaves a record of why the decision was made.
8. A report contains figures that do not agree with the source ledger; the
reconciliation difference is $2,450. The abnormal condition directly affects 17. A customer file is missing required verification. Which response is most
Organizational strategy, finance and business knowledge supporting audit consistent with the professional or compliance requirements governing enterprise
conclusions. What is the most appropriate response? risk management?
A. Use an undocumented assumption because it produces a more favorable result. A. Force the reconciliation to zero with an unsupported journal entry.
B. Bypass verification when the customer relationship is longstanding. B. Delete the exception from the report once the immediate transaction is complete.
C. Approve the transaction because the requester is senior. C. Recommend the highest-return option without considering client constraints.
D. Escalate suspicious activity through the prescribed process without tipping off D. Document the exception, investigate its cause and remediate the control weakness.
inappropriate parties. Correct Answer: D
Correct Answer: D Explanation: The correct choice follows a verify-act-confirm sequence. That is more
Explanation: This is the most appropriate option because it connects the observed reliable than bypassing controls or making multiple uncontrolled changes.
condition to the governing requirement and leaves a record of why the decision was made. 18. An unusual transaction triggers a control alert. Which handoff practice best
9. An unusual transaction triggers a control alert. Which documentation approach reduces error risk for control frameworks?
best supports traceability for Organizational strategy? A. Record the observed condition, supporting evidence, decision and responsible
A. Record the observed condition, supporting evidence, decision and responsible follow-up; communicate any unresolved risk to the next responsible person.
follow-up; communicate any unresolved risk to the next responsible person. B. Bypass verification when the customer relationship is longstanding.
B. Delete the exception from the report once the immediate transaction is complete. C. Approve the transaction because the requester is senior.
C. Recommend the highest-return option without considering client constraints. D. Use an undocumented assumption because it produces a more favorable result.
D. Force the reconciliation to zero with an unsupported journal entry. Correct Answer: A
Correct Answer: A Explanation: The strongest exam-style response is the one that controls immediate risk,
Explanation: The correct choice follows a verify-act-confirm sequence. That is more checks the relevant condition, and then acts within the defined requirements for control
reliable than bypassing controls or making multiple uncontrolled changes. frameworks.
1
,UPTIME Data center infrastructure audit | Practice Questions & Study Guide
19. A client recommendation is being prepared. Which decision about Evidence 29. A payment is requested outside the normal approval path. Which documentation
gathering, sampling, interviews, analytics and documentation is best supported by approach best supports traceability for Information technology risks?
the available evidence? A. Force the reconciliation to zero with an unsupported journal entry.
A. Recommend the highest-return option without considering client constraints. B. Delete the exception from the report once the immediate transaction is complete.
B. Force the reconciliation to zero with an unsupported journal entry. C. Record the observed condition, supporting evidence, decision and responsible
C. Delete the exception from the report once the immediate transaction is complete. follow-up; communicate any unresolved risk to the next responsible person.
D. Document the exception, investigate its cause and remediate the control weakness. D. Recommend the highest-return option without considering client constraints.
Correct Answer: D Correct Answer: C
Explanation: The correct response protects the integrity of the process: establish the Explanation: This answer uses verified evidence before action, which reduces the chance
facts, apply the appropriate control, and verify the result before closure. of masking the real problem and supports a traceable decision about Information
technology risks.
20. An unusual transaction triggers a control alert; two approvals are missing.
Which review step adds the most value before closing work involving Evidence 30. A valuation assumption changes materially before reporting. Which action is
gathering? most likely to prevent recurrence of a problem involving controls relevant to
A. Obtain the required independent approval and preserve the audit trail, then confirm audit engagements?
that the corrective action is effective before closure. A. Obtain the required independent approval and preserve the audit trail, then confirm
B. Use an undocumented assumption because it produces a more favorable result. that the corrective action is effective before closure.
C. Bypass verification when the customer relationship is longstanding. B. Bypass verification when the customer relationship is longstanding.
D. Approve the transaction because the requester is senior. C. Approve the transaction because the requester is senior.
Correct Answer: A D. Use an undocumented assumption because it produces a more favorable result.
Explanation: This approach preserves control of the situation while producing evidence Correct Answer: A
that can confirm whether the action actually corrected the issue involving Evidence Explanation: The selected action best supports safe, compliant, and technically sound
gathering. performance because it addresses controls relevant to audit engagements using observable
evidence rather than convenience.
21. A control owner discovers a recurring exception. With respect to
Business-process controls and evaluation of control design and effectiveness, 31. A client recommendation is being prepared. Which sequence is most appropriate
what is the best FIRST action? when carrying out Provider-neutral competency coverage rather than a claimed
A. Document the exception, investigate its cause and remediate the control weakness. single official blueprint, because the title does not identify one standardized
B. Delete the exception from the report once the immediate transaction is complete. examination; study is framed around Data center infrastructure audit without
C. Recommend the highest-return option without considering client constraints. presenting it as an official standardized exam blueprint?
D. Force the reconciliation to zero with an unsupported journal entry. A. Recommend the highest-return option without considering client constraints.
Correct Answer: A B. Force the reconciliation to zero with an unsupported journal entry.
Explanation: This answer uses verified evidence before action, which reduces the chance C. Delete the exception from the report once the immediate transaction is complete.
of masking the real problem and supports a traceable decision about Business-process D. Trace the item to authoritative source records before posting an adjustment, then
controls and evaluation of control design and effectiveness. verify the resulting state before moving to the next step.
Correct Answer: D
22. A customer file is missing required verification. Which evidence is most
Explanation: A defensible professional decision should be based on current evidence and
important when evaluating Business-process controls? applicable criteria. The other choices rely on assumption, remove safeguards, or change
A. Approve the transaction because the requester is senior. conditions before the cause is understood.
B. Use an undocumented assumption because it produces a more favorable result.
C. Review transaction purpose, authorization and supporting records and compare the 32. A valuation assumption changes materially before reporting; a transaction
findings with the applicable criteria. exceeds the normal threshold. Which choice demonstrates the strongest control of
D. Bypass verification when the customer relationship is longstanding. Provider-neutral competency coverage rather than a claimed single official
Correct Answer: C blueprint?
Explanation: The selected action best supports safe, compliant, and technically sound A. Use an undocumented assumption because it produces a more favorable result.
performance because it addresses Business-process controls using observable evidence B. Bypass verification when the customer relationship is longstanding.
rather than convenience. C. Approve the transaction because the requester is senior.
23. A valuation assumption changes materially before reporting. Which response D. Escalate suspicious activity through the prescribed process without tipping off
inappropriate parties.
best controls the primary risk associated with evaluation of control design?
Correct Answer: D
A. Document the exception, investigate its cause and remediate the control weakness.
Explanation: This is the most appropriate option because it connects the observed
B. Force the reconciliation to zero with an unsupported journal entry.
condition to the governing requirement and leaves a record of why the decision was made.
C. Delete the exception from the report once the immediate transaction is complete.
D. Recommend the highest-return option without considering client constraints. 33. An unusual transaction triggers a control alert. What is required before
Correct Answer: A accepting the result related to because the title does not identify one
Explanation: A defensible professional decision should be based on current evidence and standardized examination?
applicable criteria. The other choices rely on assumption, remove safeguards, or change A. Review client objectives, constraints and documented risk profile and compare the
conditions before the cause is understood. findings with the applicable criteria.
24. Supporting information for a high-risk transaction is incomplete; the same B. Delete the exception from the report once the immediate transaction is complete.
exception appears for a third month. Before proceeding with work involving Fraud C. Recommend the highest-return option without considering client constraints.
D. Force the reconciliation to zero with an unsupported journal entry.
risks, red flags, investigation boundaries and escalation, what should be
Correct Answer: A
verified?
Explanation: The correct choice follows a verify-act-confirm sequence. That is more
A. Delete the alert after obtaining an informal verbal explanation. reliable than bypassing controls or making multiple uncontrolled changes.
B. Clear the alert because no single transaction is illegal on its face.
C. Tell the customer that a suspicious-activity report will be filed. 34. A reconciliation identifies an unexplained difference. Under these
D. Review pattern, frequency, counterparties and whether activity is consistent with conditions, when should the issue involving study is framed around Data center
expected behavior and compare the findings with the applicable criteria. infrastructure audit without presenting it as an official standardized exam
Correct Answer: D blueprint be escalated?
Explanation: This is the most appropriate option because it connects the observed A. Approve the transaction because the requester is senior.
condition to the governing requirement and leaves a record of why the decision was made. B. Use an undocumented assumption because it produces a more favorable result.
25. A transaction is structured just below a reporting threshold. Which C. Bypass verification when the customer relationship is longstanding.
troubleshooting approach is most appropriate for Fraud risks? D. Escalate suspicious activity through the prescribed process without tipping off
inappropriate parties.
A. Tell the customer that a suspicious-activity report will be filed.
Correct Answer: D
B. Investigate according to the prescribed risk-based process, preserve evidence and
Explanation: The strongest exam-style response is the one that controls immediate risk,
escalate/report through the authorized channel when criteria are met.
checks the relevant condition, and then acts within the defined requirements for study
C. Split the transaction further to avoid the monitoring threshold.
is framed around Data center infrastructure audit without presenting it as an official
D. Clear the alert because no single transaction is illegal on its face.
standardized exam blueprint.
Correct Answer: B
Explanation: The correct choice follows a verify-act-confirm sequence. That is more 35. A control owner discovers a recurring exception. Which comparison is most
reliable than bypassing controls or making multiple uncontrolled changes. useful for interpreting Professional ethics and applicable internal-audit
26. An unusual transaction triggers a control alert. Which action best supports a standards?
defensible decision about red flags? A. Force the reconciliation to zero with an unsupported journal entry.
A. Escalate suspicious activity through the prescribed process without tipping off B. Delete the exception from the report once the immediate transaction is complete.
inappropriate parties. C. Review source documents, ledger entries and approval evidence and compare the
B. Use an undocumented assumption because it produces a more favorable result. findings with the applicable criteria.
C. Bypass verification when the customer relationship is longstanding. D. Recommend the highest-return option without considering client constraints.
D. Approve the transaction because the requester is senior. Correct Answer: C
Correct Answer: A Explanation: The correct response protects the integrity of the process: establish the
facts, apply the appropriate control, and verify the result before closure.
Explanation: The strongest exam-style response is the one that controls immediate risk,
checks the relevant condition, and then acts within the defined requirements for red 36. A reconciliation identifies an unexplained difference; the reconciliation
flags. difference is $2,450. Which action best distinguishes the underlying cause from a
27. A client recommendation is being prepared. A change affecting investigation symptom in Professional ethics?
boundaries is being considered. How should it be handled? A. Bypass verification when the customer relationship is longstanding.
A. Delete the exception from the report once the immediate transaction is complete. B. Approve the transaction because the requester is senior.
B. Document the exception, investigate its cause and remediate the control weakness. C. Use an undocumented assumption because it produces a more favorable result.
C. Recommend the highest-return option without considering client constraints. D. Obtain the required independent approval and preserve the audit trail, then confirm
D. Force the reconciliation to zero with an unsupported journal entry. that the corrective action is effective before closure.
Correct Answer: B Correct Answer: D
Explanation: The correct response protects the integrity of the process: establish the Explanation: This approach preserves control of the situation while producing evidence
facts, apply the appropriate control, and verify the result before closure. that can confirm whether the action actually corrected the issue involving Professional
ethics.
28. A suspected fraud indicator appears in an otherwise routine transaction; the
same exception appears for a third month. The abnormal condition directly affects 37. A control owner discovers a recurring exception. Which response is most
Information technology risks and controls relevant to audit engagements. What is consistent with the professional or compliance requirements governing applicable
the most appropriate response? internal-audit standards?
A. Approve the transaction because the requester is senior. A. Recommend the highest-return option without considering client constraints.
B. Use an undocumented assumption because it produces a more favorable result. B. Document the exception, investigate its cause and remediate the control weakness.
C. Escalate suspicious activity through the prescribed process without tipping off C. Force the reconciliation to zero with an unsupported journal entry.
inappropriate parties. D. Delete the exception from the report once the immediate transaction is complete.
D. Bypass verification when the customer relationship is longstanding. Correct Answer: B
Correct Answer: C Explanation: This answer uses verified evidence before action, which reduces the chance
of masking the real problem and supports a traceable decision about applicable
Explanation: This approach preserves control of the situation while producing evidence
internal-audit standards.
that can confirm whether the action actually corrected the issue involving Information
technology risks and controls relevant to audit engagements.
2
, UPTIME Data center infrastructure audit | Practice Questions & Study Guide
38. A report contains figures that do not agree with the source ledger. Which 48. An unusual transaction triggers a control alert; two approvals are missing.
handoff practice best reduces error risk for Organizational strategy, finance and The abnormal condition directly affects control frameworks. What is the most
business knowledge supporting audit conclusions? appropriate response?
A. Use an undocumented assumption because it produces a more favorable result. A. Bypass verification when the customer relationship is longstanding.
B. Record the observed condition, supporting evidence, decision and responsible B. Escalate suspicious activity through the prescribed process without tipping off
follow-up; communicate any unresolved risk to the next responsible person. inappropriate parties.
C. Bypass verification when the customer relationship is longstanding. C. Approve the transaction because the requester is senior.
D. Approve the transaction because the requester is senior. D. Use an undocumented assumption because it produces a more favorable result.
Correct Answer: B Correct Answer: B
Explanation: The selected action best supports safe, compliant, and technically sound Explanation: This is the most appropriate option because it connects the observed
performance because it addresses Organizational strategy, finance and business knowledge condition to the governing requirement and leaves a record of why the decision was made.
supporting audit conclusions using observable evidence rather than convenience.
49. A client recommendation is being prepared. Which documentation approach best
39. An unusual transaction triggers a control alert. Which decision about supports traceability for Evidence gathering, sampling, interviews, analytics and
Organizational strategy is best supported by the available evidence? documentation?
A. Delete the exception from the report once the immediate transaction is complete. A. Recommend the highest-return option without considering client constraints.
B. Recommend the highest-return option without considering client constraints. B. Force the reconciliation to zero with an unsupported journal entry.
C. Force the reconciliation to zero with an unsupported journal entry. C. Record the observed condition, supporting evidence, decision and responsible
D. Document the exception, investigate its cause and remediate the control weakness. follow-up; communicate any unresolved risk to the next responsible person.
Correct Answer: D D. Delete the exception from the report once the immediate transaction is complete.
Explanation: A defensible professional decision should be based on current evidence and Correct Answer: C
applicable criteria. The other choices rely on assumption, remove safeguards, or change Explanation: The correct choice follows a verify-act-confirm sequence. That is more
conditions before the cause is understood. reliable than bypassing controls or making multiple uncontrolled changes.
40. A customer file is missing required verification; the source ledger differs 50. An unusual transaction triggers a control alert. Which action is most likely
from the report. Which review step adds the most value before closing work to prevent recurrence of a problem involving Evidence gathering?
involving business knowledge supporting audit conclusions? A. Obtain the required independent approval and preserve the audit trail, then confirm
A. Obtain the required independent approval and preserve the audit trail, then confirm that the corrective action is effective before closure.
that the corrective action is effective before closure. B. Use an undocumented assumption because it produces a more favorable result.
B. Approve the transaction because the requester is senior. C. Bypass verification when the customer relationship is longstanding.
C. Use an undocumented assumption because it produces a more favorable result. D. Approve the transaction because the requester is senior.
D. Bypass verification when the customer relationship is longstanding. Correct Answer: A
Correct Answer: A Explanation: The strongest exam-style response is the one that controls immediate risk,
Explanation: This is the most appropriate option because it connects the observed checks the relevant condition, and then acts within the defined requirements for
condition to the governing requirement and leaves a record of why the decision was made. Evidence gathering.
41. A customer file is missing required verification. With respect to 51. A control owner discovers a recurring exception. Which sequence is most
Internal-audit purpose, authority, independence and objectivity, what is the best appropriate when carrying out Business-process controls and evaluation of control
FIRST action? design and effectiveness?
A. Document the exception, investigate its cause and remediate the control weakness. A. Delete the exception from the report once the immediate transaction is complete.
B. Force the reconciliation to zero with an unsupported journal entry. B. Recommend the highest-return option without considering client constraints.
C. Delete the exception from the report once the immediate transaction is complete. C. Document the exception, investigate its cause and remediate the control weakness,
D. Recommend the highest-return option without considering client constraints. then verify the resulting state before moving to the next step.
Correct Answer: A D. Force the reconciliation to zero with an unsupported journal entry.
Explanation: The correct choice follows a verify-act-confirm sequence. That is more Correct Answer: C
reliable than bypassing controls or making multiple uncontrolled changes. Explanation: The correct response protects the integrity of the process: establish the
facts, apply the appropriate control, and verify the result before closure.
42. A valuation assumption changes materially before reporting. Which evidence is
most important when evaluating Internal-audit purpose? 52. A customer file is missing required verification; the source ledger differs
A. Review exception history, root cause and remediation evidence and compare the from the report. Which choice demonstrates the strongest control of
findings with the applicable criteria. Business-process controls?
B. Bypass verification when the customer relationship is longstanding. A. Escalate suspicious activity through the prescribed process without tipping off
C. Approve the transaction because the requester is senior. inappropriate parties.
D. Use an undocumented assumption because it produces a more favorable result. B. Approve the transaction because the requester is senior.
Correct Answer: A C. Use an undocumented assumption because it produces a more favorable result.
Explanation: The strongest exam-style response is the one that controls immediate risk, D. Bypass verification when the customer relationship is longstanding.
checks the relevant condition, and then acts within the defined requirements for Correct Answer: A
Internal-audit purpose. Explanation: This approach preserves control of the situation while producing evidence
that can confirm whether the action actually corrected the issue involving
43. A reconciliation identifies an unexplained difference. Which response best
Business-process controls.
controls the primary risk associated with Risk-based audit planning, scoping and
engagement objectives? 53. A valuation assumption changes materially before reporting. What is required
A. Recommend the highest-return option without considering client constraints. before accepting the result related to evaluation of control design?
B. Force the reconciliation to zero with an unsupported journal entry. A. Review source documents, ledger entries and approval evidence and compare the
C. Document the exception, investigate its cause and remediate the control weakness. findings with the applicable criteria.
D. Delete the exception from the report once the immediate transaction is complete. B. Force the reconciliation to zero with an unsupported journal entry.
Correct Answer: C C. Delete the exception from the report once the immediate transaction is complete.
Explanation: The correct response protects the integrity of the process: establish the D. Recommend the highest-return option without considering client constraints.
facts, apply the appropriate control, and verify the result before closure. Correct Answer: A
Explanation: This answer uses verified evidence before action, which reduces the chance
44. A control owner discovers a recurring exception; two approvals are missing. of masking the real problem and supports a traceable decision about evaluation of
Before proceeding with work involving Risk-based audit planning, what should be control design.
verified?
A. Review reconciliation trail and independently verifiable evidence and compare the 54. Customer activity is inconsistent with the stated business purpose. Under
findings with the applicable criteria. these conditions, when should the issue involving Fraud risks, red flags,
B. Use an undocumented assumption because it produces a more favorable result. investigation boundaries and escalation be escalated?
C. Bypass verification when the customer relationship is longstanding. A. Clear the alert because no single transaction is illegal on its face.
D. Approve the transaction because the requester is senior. B. Avoid tipping off the customer while completing required internal escalation and
Correct Answer: A documentation.
Explanation: This approach preserves control of the situation while producing evidence C. Delete the alert after obtaining an informal verbal explanation.
that can confirm whether the action actually corrected the issue involving Risk-based D. Split the transaction further to avoid the monitoring threshold.
audit planning. Correct Answer: B
Explanation: The selected action best supports safe, compliant, and technically sound
45. An unusual transaction triggers a control alert. Which troubleshooting performance because it addresses Fraud risks, red flags, investigation boundaries and
approach is most appropriate for engagement objectives? escalation using observable evidence rather than convenience.
A. Delete the exception from the report once the immediate transaction is complete.
B. Recommend the highest-return option without considering client constraints. 55. An unusual transaction pattern triggers a monitoring alert. Which comparison
C. Document the exception, investigate its cause and remediate the control weakness. is most useful for interpreting Fraud risks?
D. Force the reconciliation to zero with an unsupported journal entry. A. Review customer profile, transaction history, source/purpose information and
Correct Answer: C applicable escalation criteria and compare the findings with the applicable criteria.
Explanation: This answer uses verified evidence before action, which reduces the chance B. Split the transaction further to avoid the monitoring threshold.
of masking the real problem and supports a traceable decision about engagement C. Tell the customer that a suspicious-activity report will be filed.
objectives. D. Delete the alert after obtaining an informal verbal explanation.
Correct Answer: A
46. A report contains figures that do not agree with the source ledger. Which Explanation: A defensible professional decision should be based on current evidence and
action best supports a defensible decision about Governance, enterprise risk applicable criteria. The other choices rely on assumption, remove safeguards, or change
management and control frameworks? conditions before the cause is understood.
A. Escalate suspicious activity through the prescribed process without tipping off
inappropriate parties. 56. An unusual transaction triggers a control alert; two approvals are missing.
B. Approve the transaction because the requester is senior. Which action best distinguishes the underlying cause from a symptom in red flags?
C. Use an undocumented assumption because it produces a more favorable result. A. Use an undocumented assumption because it produces a more favorable result.
D. Bypass verification when the customer relationship is longstanding. B. Bypass verification when the customer relationship is longstanding.
Correct Answer: A C. Obtain the required independent approval and preserve the audit trail, then confirm
Explanation: The selected action best supports safe, compliant, and technically sound that the corrective action is effective before closure.
performance because it addresses Governance, enterprise risk management and control D. Approve the transaction because the requester is senior.
frameworks using observable evidence rather than convenience. Correct Answer: C
Explanation: This is the most appropriate option because it connects the observed
47. A customer file is missing required verification. A change affecting condition to the governing requirement and leaves a record of why the decision was made.
enterprise risk management is being considered. How should it be handled?
A. Document the exception, investigate its cause and remediate the control weakness.
B. Force the reconciliation to zero with an unsupported journal entry.
C. Delete the exception from the report once the immediate transaction is complete.
D. Recommend the highest-return option without considering client constraints.
Correct Answer: A
Explanation: A defensible professional decision should be based on current evidence and
applicable criteria. The other choices rely on assumption, remove safeguards, or change
conditions before the cause is understood.
3
Practice Questions & Study Guide
ID14183
,UPTIME Data center infrastructure audit | Practice Questions & Study Guide
1. A client recommendation is being prepared. With respect to Provider-neutral 10. A customer file is missing required verification. Which action is most likely
competency coverage rather than a claimed single official blueprint, because the to prevent recurrence of a problem involving business knowledge supporting audit
title does not identify one standardized examination; study is framed around Data conclusions?
center infrastructure audit without presenting it as an official standardized A. Approve the transaction because the requester is senior.
exam blueprint, what is the best FIRST action? B. Use an undocumented assumption because it produces a more favorable result.
A. Recommend the highest-return option without considering client constraints. C. Obtain the required independent approval and preserve the audit trail, then confirm
B. Force the reconciliation to zero with an unsupported journal entry. that the corrective action is effective before closure.
C. Delete the exception from the report once the immediate transaction is complete. D. Bypass verification when the customer relationship is longstanding.
D. Document the exception, investigate its cause and remediate the control weakness. Correct Answer: C
Correct Answer: D Explanation: The strongest exam-style response is the one that controls immediate risk,
Explanation: The correct choice follows a verify-act-confirm sequence. That is more checks the relevant condition, and then acts within the defined requirements for
reliable than bypassing controls or making multiple uncontrolled changes. business knowledge supporting audit conclusions.
2. A valuation assumption changes materially before reporting. Which evidence is 11. A customer file is missing required verification. Which sequence is most
most important when evaluating Provider-neutral competency coverage rather than a appropriate when carrying out Internal-audit purpose, authority, independence and
claimed single official blueprint? objectivity?
A. Use an undocumented assumption because it produces a more favorable result. A. Force the reconciliation to zero with an unsupported journal entry.
B. Bypass verification when the customer relationship is longstanding. B. Base the recommendation on documented client facts, constraints and applicable
C. Review reconciliation trail and independently verifiable evidence and compare the requirements, then verify the resulting state before moving to the next step.
findings with the applicable criteria. C. Delete the exception from the report once the immediate transaction is complete.
D. Approve the transaction because the requester is senior. D. Recommend the highest-return option without considering client constraints.
Correct Answer: C Correct Answer: B
Explanation: The strongest exam-style response is the one that controls immediate risk, Explanation: The correct response protects the integrity of the process: establish the
checks the relevant condition, and then acts within the defined requirements for facts, apply the appropriate control, and verify the result before closure.
Provider-neutral competency coverage rather than a claimed single official blueprint.
12. A valuation assumption changes materially before reporting; a transaction
3. An unusual transaction triggers a control alert. Which response best controls exceeds the normal threshold. Which choice demonstrates the strongest control of
the primary risk associated with because the title does not identify one Internal-audit purpose?
standardized examination? A. Bypass verification when the customer relationship is longstanding.
A. Delete the exception from the report once the immediate transaction is complete. B. Escalate suspicious activity through the prescribed process without tipping off
B. Document the exception, investigate its cause and remediate the control weakness. inappropriate parties.
C. Recommend the highest-return option without considering client constraints. C. Approve the transaction because the requester is senior.
D. Force the reconciliation to zero with an unsupported journal entry. D. Use an undocumented assumption because it produces a more favorable result.
Correct Answer: B Correct Answer: B
Explanation: The correct response protects the integrity of the process: establish the Explanation: This approach preserves control of the situation while producing evidence
facts, apply the appropriate control, and verify the result before closure. that can confirm whether the action actually corrected the issue involving
Internal-audit purpose.
4. A reconciliation identifies an unexplained difference; the reconciliation
difference is $2,450. Before proceeding with work involving study is framed 13. A reconciliation identifies an unexplained difference. What is required
around Data center infrastructure audit without presenting it as an official before accepting the result related to Risk-based audit planning, scoping and
standardized exam blueprint, what should be verified? engagement objectives?
A. Review transaction purpose, authorization and supporting records and compare the A. Recommend the highest-return option without considering client constraints.
findings with the applicable criteria. B. Force the reconciliation to zero with an unsupported journal entry.
B. Approve the transaction because the requester is senior. C. Delete the exception from the report once the immediate transaction is complete.
C. Use an undocumented assumption because it produces a more favorable result. D. Review policy requirements and segregation-of-duties controls and compare the
D. Bypass verification when the customer relationship is longstanding. findings with the applicable criteria.
Correct Answer: A Correct Answer: D
Explanation: This approach preserves control of the situation while producing evidence Explanation: This answer uses verified evidence before action, which reduces the chance
that can confirm whether the action actually corrected the issue involving study is of masking the real problem and supports a traceable decision about Risk-based audit
framed around Data center infrastructure audit without presenting it as an official planning, scoping and engagement objectives.
standardized exam blueprint. 14. A control owner discovers a recurring exception. Under these conditions, when
5. A control owner discovers a recurring exception. Which troubleshooting should the issue involving Risk-based audit planning be escalated?
approach is most appropriate for Professional ethics and applicable A. Use an undocumented assumption because it produces a more favorable result.
internal-audit standards? B. Bypass verification when the customer relationship is longstanding.
A. Force the reconciliation to zero with an unsupported journal entry. C. Approve the transaction because the requester is senior.
B. Document the exception, investigate its cause and remediate the control weakness. D. Escalate suspicious activity through the prescribed process without tipping off
C. Delete the exception from the report once the immediate transaction is complete. inappropriate parties.
D. Recommend the highest-return option without considering client constraints. Correct Answer: D
Correct Answer: B Explanation: The selected action best supports safe, compliant, and technically sound
Explanation: This answer uses verified evidence before action, which reduces the chance performance because it addresses Risk-based audit planning using observable evidence
of masking the real problem and supports a traceable decision about Professional ethics rather than convenience.
and applicable internal-audit standards. 15. An unusual transaction triggers a control alert. Which comparison is most
6. A reconciliation identifies an unexplained difference. Which action best useful for interpreting engagement objectives?
supports a defensible decision about Professional ethics? A. Delete the exception from the report once the immediate transaction is complete.
A. Bypass verification when the customer relationship is longstanding. B. Review client objectives, constraints and documented risk profile and compare the
B. Approve the transaction because the requester is senior. findings with the applicable criteria.
C. Escalate suspicious activity through the prescribed process without tipping off C. Recommend the highest-return option without considering client constraints.
inappropriate parties. D. Force the reconciliation to zero with an unsupported journal entry.
D. Use an undocumented assumption because it produces a more favorable result. Correct Answer: B
Correct Answer: C Explanation: A defensible professional decision should be based on current evidence and
Explanation: The selected action best supports safe, compliant, and technically sound applicable criteria. The other choices rely on assumption, remove safeguards, or change
performance because it addresses Professional ethics using observable evidence rather conditions before the cause is understood.
than convenience. 16. A report contains figures that do not agree with the source ledger; the
7. A control owner discovers a recurring exception. A change affecting applicable reconciliation difference is $2,450. Which action best distinguishes the
internal-audit standards is being considered. How should it be handled? underlying cause from a symptom in Governance, enterprise risk management and
A. Recommend the highest-return option without considering client constraints. control frameworks?
B. Force the reconciliation to zero with an unsupported journal entry. A. Approve the transaction because the requester is senior.
C. Document the exception, investigate its cause and remediate the control weakness. B. Obtain the required independent approval and preserve the audit trail, then confirm
D. Delete the exception from the report once the immediate transaction is complete. that the corrective action is effective before closure.
Correct Answer: C C. Use an undocumented assumption because it produces a more favorable result.
Explanation: A defensible professional decision should be based on current evidence and D. Bypass verification when the customer relationship is longstanding.
applicable criteria. The other choices rely on assumption, remove safeguards, or change Correct Answer: B
conditions before the cause is understood. Explanation: This is the most appropriate option because it connects the observed
condition to the governing requirement and leaves a record of why the decision was made.
8. A report contains figures that do not agree with the source ledger; the
reconciliation difference is $2,450. The abnormal condition directly affects 17. A customer file is missing required verification. Which response is most
Organizational strategy, finance and business knowledge supporting audit consistent with the professional or compliance requirements governing enterprise
conclusions. What is the most appropriate response? risk management?
A. Use an undocumented assumption because it produces a more favorable result. A. Force the reconciliation to zero with an unsupported journal entry.
B. Bypass verification when the customer relationship is longstanding. B. Delete the exception from the report once the immediate transaction is complete.
C. Approve the transaction because the requester is senior. C. Recommend the highest-return option without considering client constraints.
D. Escalate suspicious activity through the prescribed process without tipping off D. Document the exception, investigate its cause and remediate the control weakness.
inappropriate parties. Correct Answer: D
Correct Answer: D Explanation: The correct choice follows a verify-act-confirm sequence. That is more
Explanation: This is the most appropriate option because it connects the observed reliable than bypassing controls or making multiple uncontrolled changes.
condition to the governing requirement and leaves a record of why the decision was made. 18. An unusual transaction triggers a control alert. Which handoff practice best
9. An unusual transaction triggers a control alert. Which documentation approach reduces error risk for control frameworks?
best supports traceability for Organizational strategy? A. Record the observed condition, supporting evidence, decision and responsible
A. Record the observed condition, supporting evidence, decision and responsible follow-up; communicate any unresolved risk to the next responsible person.
follow-up; communicate any unresolved risk to the next responsible person. B. Bypass verification when the customer relationship is longstanding.
B. Delete the exception from the report once the immediate transaction is complete. C. Approve the transaction because the requester is senior.
C. Recommend the highest-return option without considering client constraints. D. Use an undocumented assumption because it produces a more favorable result.
D. Force the reconciliation to zero with an unsupported journal entry. Correct Answer: A
Correct Answer: A Explanation: The strongest exam-style response is the one that controls immediate risk,
Explanation: The correct choice follows a verify-act-confirm sequence. That is more checks the relevant condition, and then acts within the defined requirements for control
reliable than bypassing controls or making multiple uncontrolled changes. frameworks.
1
,UPTIME Data center infrastructure audit | Practice Questions & Study Guide
19. A client recommendation is being prepared. Which decision about Evidence 29. A payment is requested outside the normal approval path. Which documentation
gathering, sampling, interviews, analytics and documentation is best supported by approach best supports traceability for Information technology risks?
the available evidence? A. Force the reconciliation to zero with an unsupported journal entry.
A. Recommend the highest-return option without considering client constraints. B. Delete the exception from the report once the immediate transaction is complete.
B. Force the reconciliation to zero with an unsupported journal entry. C. Record the observed condition, supporting evidence, decision and responsible
C. Delete the exception from the report once the immediate transaction is complete. follow-up; communicate any unresolved risk to the next responsible person.
D. Document the exception, investigate its cause and remediate the control weakness. D. Recommend the highest-return option without considering client constraints.
Correct Answer: D Correct Answer: C
Explanation: The correct response protects the integrity of the process: establish the Explanation: This answer uses verified evidence before action, which reduces the chance
facts, apply the appropriate control, and verify the result before closure. of masking the real problem and supports a traceable decision about Information
technology risks.
20. An unusual transaction triggers a control alert; two approvals are missing.
Which review step adds the most value before closing work involving Evidence 30. A valuation assumption changes materially before reporting. Which action is
gathering? most likely to prevent recurrence of a problem involving controls relevant to
A. Obtain the required independent approval and preserve the audit trail, then confirm audit engagements?
that the corrective action is effective before closure. A. Obtain the required independent approval and preserve the audit trail, then confirm
B. Use an undocumented assumption because it produces a more favorable result. that the corrective action is effective before closure.
C. Bypass verification when the customer relationship is longstanding. B. Bypass verification when the customer relationship is longstanding.
D. Approve the transaction because the requester is senior. C. Approve the transaction because the requester is senior.
Correct Answer: A D. Use an undocumented assumption because it produces a more favorable result.
Explanation: This approach preserves control of the situation while producing evidence Correct Answer: A
that can confirm whether the action actually corrected the issue involving Evidence Explanation: The selected action best supports safe, compliant, and technically sound
gathering. performance because it addresses controls relevant to audit engagements using observable
evidence rather than convenience.
21. A control owner discovers a recurring exception. With respect to
Business-process controls and evaluation of control design and effectiveness, 31. A client recommendation is being prepared. Which sequence is most appropriate
what is the best FIRST action? when carrying out Provider-neutral competency coverage rather than a claimed
A. Document the exception, investigate its cause and remediate the control weakness. single official blueprint, because the title does not identify one standardized
B. Delete the exception from the report once the immediate transaction is complete. examination; study is framed around Data center infrastructure audit without
C. Recommend the highest-return option without considering client constraints. presenting it as an official standardized exam blueprint?
D. Force the reconciliation to zero with an unsupported journal entry. A. Recommend the highest-return option without considering client constraints.
Correct Answer: A B. Force the reconciliation to zero with an unsupported journal entry.
Explanation: This answer uses verified evidence before action, which reduces the chance C. Delete the exception from the report once the immediate transaction is complete.
of masking the real problem and supports a traceable decision about Business-process D. Trace the item to authoritative source records before posting an adjustment, then
controls and evaluation of control design and effectiveness. verify the resulting state before moving to the next step.
Correct Answer: D
22. A customer file is missing required verification. Which evidence is most
Explanation: A defensible professional decision should be based on current evidence and
important when evaluating Business-process controls? applicable criteria. The other choices rely on assumption, remove safeguards, or change
A. Approve the transaction because the requester is senior. conditions before the cause is understood.
B. Use an undocumented assumption because it produces a more favorable result.
C. Review transaction purpose, authorization and supporting records and compare the 32. A valuation assumption changes materially before reporting; a transaction
findings with the applicable criteria. exceeds the normal threshold. Which choice demonstrates the strongest control of
D. Bypass verification when the customer relationship is longstanding. Provider-neutral competency coverage rather than a claimed single official
Correct Answer: C blueprint?
Explanation: The selected action best supports safe, compliant, and technically sound A. Use an undocumented assumption because it produces a more favorable result.
performance because it addresses Business-process controls using observable evidence B. Bypass verification when the customer relationship is longstanding.
rather than convenience. C. Approve the transaction because the requester is senior.
23. A valuation assumption changes materially before reporting. Which response D. Escalate suspicious activity through the prescribed process without tipping off
inappropriate parties.
best controls the primary risk associated with evaluation of control design?
Correct Answer: D
A. Document the exception, investigate its cause and remediate the control weakness.
Explanation: This is the most appropriate option because it connects the observed
B. Force the reconciliation to zero with an unsupported journal entry.
condition to the governing requirement and leaves a record of why the decision was made.
C. Delete the exception from the report once the immediate transaction is complete.
D. Recommend the highest-return option without considering client constraints. 33. An unusual transaction triggers a control alert. What is required before
Correct Answer: A accepting the result related to because the title does not identify one
Explanation: A defensible professional decision should be based on current evidence and standardized examination?
applicable criteria. The other choices rely on assumption, remove safeguards, or change A. Review client objectives, constraints and documented risk profile and compare the
conditions before the cause is understood. findings with the applicable criteria.
24. Supporting information for a high-risk transaction is incomplete; the same B. Delete the exception from the report once the immediate transaction is complete.
exception appears for a third month. Before proceeding with work involving Fraud C. Recommend the highest-return option without considering client constraints.
D. Force the reconciliation to zero with an unsupported journal entry.
risks, red flags, investigation boundaries and escalation, what should be
Correct Answer: A
verified?
Explanation: The correct choice follows a verify-act-confirm sequence. That is more
A. Delete the alert after obtaining an informal verbal explanation. reliable than bypassing controls or making multiple uncontrolled changes.
B. Clear the alert because no single transaction is illegal on its face.
C. Tell the customer that a suspicious-activity report will be filed. 34. A reconciliation identifies an unexplained difference. Under these
D. Review pattern, frequency, counterparties and whether activity is consistent with conditions, when should the issue involving study is framed around Data center
expected behavior and compare the findings with the applicable criteria. infrastructure audit without presenting it as an official standardized exam
Correct Answer: D blueprint be escalated?
Explanation: This is the most appropriate option because it connects the observed A. Approve the transaction because the requester is senior.
condition to the governing requirement and leaves a record of why the decision was made. B. Use an undocumented assumption because it produces a more favorable result.
25. A transaction is structured just below a reporting threshold. Which C. Bypass verification when the customer relationship is longstanding.
troubleshooting approach is most appropriate for Fraud risks? D. Escalate suspicious activity through the prescribed process without tipping off
inappropriate parties.
A. Tell the customer that a suspicious-activity report will be filed.
Correct Answer: D
B. Investigate according to the prescribed risk-based process, preserve evidence and
Explanation: The strongest exam-style response is the one that controls immediate risk,
escalate/report through the authorized channel when criteria are met.
checks the relevant condition, and then acts within the defined requirements for study
C. Split the transaction further to avoid the monitoring threshold.
is framed around Data center infrastructure audit without presenting it as an official
D. Clear the alert because no single transaction is illegal on its face.
standardized exam blueprint.
Correct Answer: B
Explanation: The correct choice follows a verify-act-confirm sequence. That is more 35. A control owner discovers a recurring exception. Which comparison is most
reliable than bypassing controls or making multiple uncontrolled changes. useful for interpreting Professional ethics and applicable internal-audit
26. An unusual transaction triggers a control alert. Which action best supports a standards?
defensible decision about red flags? A. Force the reconciliation to zero with an unsupported journal entry.
A. Escalate suspicious activity through the prescribed process without tipping off B. Delete the exception from the report once the immediate transaction is complete.
inappropriate parties. C. Review source documents, ledger entries and approval evidence and compare the
B. Use an undocumented assumption because it produces a more favorable result. findings with the applicable criteria.
C. Bypass verification when the customer relationship is longstanding. D. Recommend the highest-return option without considering client constraints.
D. Approve the transaction because the requester is senior. Correct Answer: C
Correct Answer: A Explanation: The correct response protects the integrity of the process: establish the
facts, apply the appropriate control, and verify the result before closure.
Explanation: The strongest exam-style response is the one that controls immediate risk,
checks the relevant condition, and then acts within the defined requirements for red 36. A reconciliation identifies an unexplained difference; the reconciliation
flags. difference is $2,450. Which action best distinguishes the underlying cause from a
27. A client recommendation is being prepared. A change affecting investigation symptom in Professional ethics?
boundaries is being considered. How should it be handled? A. Bypass verification when the customer relationship is longstanding.
A. Delete the exception from the report once the immediate transaction is complete. B. Approve the transaction because the requester is senior.
B. Document the exception, investigate its cause and remediate the control weakness. C. Use an undocumented assumption because it produces a more favorable result.
C. Recommend the highest-return option without considering client constraints. D. Obtain the required independent approval and preserve the audit trail, then confirm
D. Force the reconciliation to zero with an unsupported journal entry. that the corrective action is effective before closure.
Correct Answer: B Correct Answer: D
Explanation: The correct response protects the integrity of the process: establish the Explanation: This approach preserves control of the situation while producing evidence
facts, apply the appropriate control, and verify the result before closure. that can confirm whether the action actually corrected the issue involving Professional
ethics.
28. A suspected fraud indicator appears in an otherwise routine transaction; the
same exception appears for a third month. The abnormal condition directly affects 37. A control owner discovers a recurring exception. Which response is most
Information technology risks and controls relevant to audit engagements. What is consistent with the professional or compliance requirements governing applicable
the most appropriate response? internal-audit standards?
A. Approve the transaction because the requester is senior. A. Recommend the highest-return option without considering client constraints.
B. Use an undocumented assumption because it produces a more favorable result. B. Document the exception, investigate its cause and remediate the control weakness.
C. Escalate suspicious activity through the prescribed process without tipping off C. Force the reconciliation to zero with an unsupported journal entry.
inappropriate parties. D. Delete the exception from the report once the immediate transaction is complete.
D. Bypass verification when the customer relationship is longstanding. Correct Answer: B
Correct Answer: C Explanation: This answer uses verified evidence before action, which reduces the chance
of masking the real problem and supports a traceable decision about applicable
Explanation: This approach preserves control of the situation while producing evidence
internal-audit standards.
that can confirm whether the action actually corrected the issue involving Information
technology risks and controls relevant to audit engagements.
2
, UPTIME Data center infrastructure audit | Practice Questions & Study Guide
38. A report contains figures that do not agree with the source ledger. Which 48. An unusual transaction triggers a control alert; two approvals are missing.
handoff practice best reduces error risk for Organizational strategy, finance and The abnormal condition directly affects control frameworks. What is the most
business knowledge supporting audit conclusions? appropriate response?
A. Use an undocumented assumption because it produces a more favorable result. A. Bypass verification when the customer relationship is longstanding.
B. Record the observed condition, supporting evidence, decision and responsible B. Escalate suspicious activity through the prescribed process without tipping off
follow-up; communicate any unresolved risk to the next responsible person. inappropriate parties.
C. Bypass verification when the customer relationship is longstanding. C. Approve the transaction because the requester is senior.
D. Approve the transaction because the requester is senior. D. Use an undocumented assumption because it produces a more favorable result.
Correct Answer: B Correct Answer: B
Explanation: The selected action best supports safe, compliant, and technically sound Explanation: This is the most appropriate option because it connects the observed
performance because it addresses Organizational strategy, finance and business knowledge condition to the governing requirement and leaves a record of why the decision was made.
supporting audit conclusions using observable evidence rather than convenience.
49. A client recommendation is being prepared. Which documentation approach best
39. An unusual transaction triggers a control alert. Which decision about supports traceability for Evidence gathering, sampling, interviews, analytics and
Organizational strategy is best supported by the available evidence? documentation?
A. Delete the exception from the report once the immediate transaction is complete. A. Recommend the highest-return option without considering client constraints.
B. Recommend the highest-return option without considering client constraints. B. Force the reconciliation to zero with an unsupported journal entry.
C. Force the reconciliation to zero with an unsupported journal entry. C. Record the observed condition, supporting evidence, decision and responsible
D. Document the exception, investigate its cause and remediate the control weakness. follow-up; communicate any unresolved risk to the next responsible person.
Correct Answer: D D. Delete the exception from the report once the immediate transaction is complete.
Explanation: A defensible professional decision should be based on current evidence and Correct Answer: C
applicable criteria. The other choices rely on assumption, remove safeguards, or change Explanation: The correct choice follows a verify-act-confirm sequence. That is more
conditions before the cause is understood. reliable than bypassing controls or making multiple uncontrolled changes.
40. A customer file is missing required verification; the source ledger differs 50. An unusual transaction triggers a control alert. Which action is most likely
from the report. Which review step adds the most value before closing work to prevent recurrence of a problem involving Evidence gathering?
involving business knowledge supporting audit conclusions? A. Obtain the required independent approval and preserve the audit trail, then confirm
A. Obtain the required independent approval and preserve the audit trail, then confirm that the corrective action is effective before closure.
that the corrective action is effective before closure. B. Use an undocumented assumption because it produces a more favorable result.
B. Approve the transaction because the requester is senior. C. Bypass verification when the customer relationship is longstanding.
C. Use an undocumented assumption because it produces a more favorable result. D. Approve the transaction because the requester is senior.
D. Bypass verification when the customer relationship is longstanding. Correct Answer: A
Correct Answer: A Explanation: The strongest exam-style response is the one that controls immediate risk,
Explanation: This is the most appropriate option because it connects the observed checks the relevant condition, and then acts within the defined requirements for
condition to the governing requirement and leaves a record of why the decision was made. Evidence gathering.
41. A customer file is missing required verification. With respect to 51. A control owner discovers a recurring exception. Which sequence is most
Internal-audit purpose, authority, independence and objectivity, what is the best appropriate when carrying out Business-process controls and evaluation of control
FIRST action? design and effectiveness?
A. Document the exception, investigate its cause and remediate the control weakness. A. Delete the exception from the report once the immediate transaction is complete.
B. Force the reconciliation to zero with an unsupported journal entry. B. Recommend the highest-return option without considering client constraints.
C. Delete the exception from the report once the immediate transaction is complete. C. Document the exception, investigate its cause and remediate the control weakness,
D. Recommend the highest-return option without considering client constraints. then verify the resulting state before moving to the next step.
Correct Answer: A D. Force the reconciliation to zero with an unsupported journal entry.
Explanation: The correct choice follows a verify-act-confirm sequence. That is more Correct Answer: C
reliable than bypassing controls or making multiple uncontrolled changes. Explanation: The correct response protects the integrity of the process: establish the
facts, apply the appropriate control, and verify the result before closure.
42. A valuation assumption changes materially before reporting. Which evidence is
most important when evaluating Internal-audit purpose? 52. A customer file is missing required verification; the source ledger differs
A. Review exception history, root cause and remediation evidence and compare the from the report. Which choice demonstrates the strongest control of
findings with the applicable criteria. Business-process controls?
B. Bypass verification when the customer relationship is longstanding. A. Escalate suspicious activity through the prescribed process without tipping off
C. Approve the transaction because the requester is senior. inappropriate parties.
D. Use an undocumented assumption because it produces a more favorable result. B. Approve the transaction because the requester is senior.
Correct Answer: A C. Use an undocumented assumption because it produces a more favorable result.
Explanation: The strongest exam-style response is the one that controls immediate risk, D. Bypass verification when the customer relationship is longstanding.
checks the relevant condition, and then acts within the defined requirements for Correct Answer: A
Internal-audit purpose. Explanation: This approach preserves control of the situation while producing evidence
that can confirm whether the action actually corrected the issue involving
43. A reconciliation identifies an unexplained difference. Which response best
Business-process controls.
controls the primary risk associated with Risk-based audit planning, scoping and
engagement objectives? 53. A valuation assumption changes materially before reporting. What is required
A. Recommend the highest-return option without considering client constraints. before accepting the result related to evaluation of control design?
B. Force the reconciliation to zero with an unsupported journal entry. A. Review source documents, ledger entries and approval evidence and compare the
C. Document the exception, investigate its cause and remediate the control weakness. findings with the applicable criteria.
D. Delete the exception from the report once the immediate transaction is complete. B. Force the reconciliation to zero with an unsupported journal entry.
Correct Answer: C C. Delete the exception from the report once the immediate transaction is complete.
Explanation: The correct response protects the integrity of the process: establish the D. Recommend the highest-return option without considering client constraints.
facts, apply the appropriate control, and verify the result before closure. Correct Answer: A
Explanation: This answer uses verified evidence before action, which reduces the chance
44. A control owner discovers a recurring exception; two approvals are missing. of masking the real problem and supports a traceable decision about evaluation of
Before proceeding with work involving Risk-based audit planning, what should be control design.
verified?
A. Review reconciliation trail and independently verifiable evidence and compare the 54. Customer activity is inconsistent with the stated business purpose. Under
findings with the applicable criteria. these conditions, when should the issue involving Fraud risks, red flags,
B. Use an undocumented assumption because it produces a more favorable result. investigation boundaries and escalation be escalated?
C. Bypass verification when the customer relationship is longstanding. A. Clear the alert because no single transaction is illegal on its face.
D. Approve the transaction because the requester is senior. B. Avoid tipping off the customer while completing required internal escalation and
Correct Answer: A documentation.
Explanation: This approach preserves control of the situation while producing evidence C. Delete the alert after obtaining an informal verbal explanation.
that can confirm whether the action actually corrected the issue involving Risk-based D. Split the transaction further to avoid the monitoring threshold.
audit planning. Correct Answer: B
Explanation: The selected action best supports safe, compliant, and technically sound
45. An unusual transaction triggers a control alert. Which troubleshooting performance because it addresses Fraud risks, red flags, investigation boundaries and
approach is most appropriate for engagement objectives? escalation using observable evidence rather than convenience.
A. Delete the exception from the report once the immediate transaction is complete.
B. Recommend the highest-return option without considering client constraints. 55. An unusual transaction pattern triggers a monitoring alert. Which comparison
C. Document the exception, investigate its cause and remediate the control weakness. is most useful for interpreting Fraud risks?
D. Force the reconciliation to zero with an unsupported journal entry. A. Review customer profile, transaction history, source/purpose information and
Correct Answer: C applicable escalation criteria and compare the findings with the applicable criteria.
Explanation: This answer uses verified evidence before action, which reduces the chance B. Split the transaction further to avoid the monitoring threshold.
of masking the real problem and supports a traceable decision about engagement C. Tell the customer that a suspicious-activity report will be filed.
objectives. D. Delete the alert after obtaining an informal verbal explanation.
Correct Answer: A
46. A report contains figures that do not agree with the source ledger. Which Explanation: A defensible professional decision should be based on current evidence and
action best supports a defensible decision about Governance, enterprise risk applicable criteria. The other choices rely on assumption, remove safeguards, or change
management and control frameworks? conditions before the cause is understood.
A. Escalate suspicious activity through the prescribed process without tipping off
inappropriate parties. 56. An unusual transaction triggers a control alert; two approvals are missing.
B. Approve the transaction because the requester is senior. Which action best distinguishes the underlying cause from a symptom in red flags?
C. Use an undocumented assumption because it produces a more favorable result. A. Use an undocumented assumption because it produces a more favorable result.
D. Bypass verification when the customer relationship is longstanding. B. Bypass verification when the customer relationship is longstanding.
Correct Answer: A C. Obtain the required independent approval and preserve the audit trail, then confirm
Explanation: The selected action best supports safe, compliant, and technically sound that the corrective action is effective before closure.
performance because it addresses Governance, enterprise risk management and control D. Approve the transaction because the requester is senior.
frameworks using observable evidence rather than convenience. Correct Answer: C
Explanation: This is the most appropriate option because it connects the observed
47. A customer file is missing required verification. A change affecting condition to the governing requirement and leaves a record of why the decision was made.
enterprise risk management is being considered. How should it be handled?
A. Document the exception, investigate its cause and remediate the control weakness.
B. Force the reconciliation to zero with an unsupported journal entry.
C. Delete the exception from the report once the immediate transaction is complete.
D. Recommend the highest-return option without considering client constraints.
Correct Answer: A
Explanation: A defensible professional decision should be based on current evidence and
applicable criteria. The other choices rely on assumption, remove safeguards, or change
conditions before the cause is understood.
3
