1
CQA ASQ CERTIFIED QUALITY AUDITOR
EXAMINATION – EXAM PREP GUIDE: STUDY
GUIDE | LATEST UPDATE 2026/2027 | PRACTICE
QUESTIONS AND ANSWERS | 100% CORRECT
ANSWERS | VERIFIED SOLUTIONS
This comprehensive practice examination is meticulously designed for candidates
preparing for the ASQ Certified Quality Auditor (CQA) examination. It serves as
an essential study guide, reflecting the latest update for 2026/2027. The material
covers the full spectrum of the CQA Body of Knowledge, including audit
fundamentals, program management, planning, execution, reporting, and follow-
up. Featuring advanced practice questions and answers with verified solutions,
this guide simulates the rigor of the actual exam. Each question is crafted to test
theoretical knowledge and practical application, ensuring candidates are
thoroughly prepared to achieve a 100% correct answers score on their
professional credentialing journey. This is an indispensable resource for mastering
the competencies required of a certified quality auditor.
Table of Contents
I. Audit Fundamentals and Principles
II. Audit Program Management and Administration
III. Audit Planning and Preparation
IV. Audit Execution and Evidence Collection
V. Audit Reporting and Communication
VI. Audit Follow-up and Corrective Action
VII. Professional Conduct and Ethics
, 2
Question 1: An audit team is preparing for a Stage 2 certification audit of a
medical device manufacturer against ISO 13485:2016. The audit manager is
reviewing the audit plan to ensure it aligns with the standard's requirements. Which
of the following elements is LEAST critical to include in the initial audit plan,
according to ISO 19011:2018 guidelines?
A) The audit objectives, scope, and criteria
B) The dates and locations where the audit activities will be conducted
C) The specific nonconformities identified during the previous internal audit
D) The roles and responsibilities of the audit team members and guides
Correct Answer: C
According to ISO 19011:2018, the audit plan should provide the basis for
agreement regarding the conduct of the audit. It includes objectives, scope,
criteria, dates, locations, roles, and responsibilities. While previous audit findings
(like nonconformities) are crucial inputs for planning the audit's focus and
sampling strategy, the specific list of nonconformities is not a standard element of
the formal audit plan itself. Options A, B, and D are all explicitly listed as elements
to be included in the audit plan.
Question 2: A quality auditor is evaluating a supplier's calibration system. The
auditor discovers that a critical torque wrench used on an assembly line was
calibrated six months ago, but the calibration certificate has a stated uncertainty of
±3%. The torque specification is 50 Nm ±5%. What is the most significant risk
associated with this situation?
A) The torque wrench may be out of calibration, invalidating all assemblies made
in the last six months.
B) The measurement uncertainty is a significant portion of the tolerance,
potentially leading to a false accept or false reject decision.
C) The calibration interval is too long, and the wrench should be calibrated
monthly.
D) The calibration certificate is invalid because it does not state the "as found"
condition.
Correct Answer: B
The core issue is the ratio of measurement uncertainty to the specification
tolerance. A ±3% uncertainty on a 50 Nm target is ±1.5 Nm, while the tolerance is
±2.5 Nm. This means the uncertainty consumes 60% of the total tolerance
(1.5/2.5), which is a very high risk. This can lead to accepting a nonconforming
, 3
torque (false accept) or rejecting a conforming one (false reject). While A is a risk,
it's a consequence of the core problem. C is a premature conclusion without data.
D is incorrect as "as found" data is not always required on a certificate.
Question 3: During an audit of a software development company's configuration
management process, the auditor finds that a developer has been granted direct
write access to the production code repository to fix a critical bug. This bypasses
the formal change control process. According to ITIL and COBIT best practices,
what is the primary control failure in this scenario?
A) Failure to enforce segregation of duties between development and production
environments.
B) Failure to perform a proper risk assessment before making the fix.
C) Failure to document the bug and its resolution in the problem management
system.
D) Failure to notify the change advisory board (CAB) post-implementation.
Correct Answer: A
The fundamental control principle violated here is the segregation of duties (SoD),
a key component of ITIL and COBIT frameworks. Developers should not have
direct, unfettered access to modify production systems. This access should be
controlled through a formal change management process where a separate
individual or team reviews, approves, and implements the change. Option B is a
result of bypassing the process. Option C is a documentation issue, secondary to
the control failure. Option D is incorrect because the issue is bypassing the CAB,
not failing to notify them afterward.
Question 4: An auditor is using a statistical sampling plan for an inspection of
incoming raw material. The plan has an AQL (Acceptable Quality Level) of 1.0%
and an LTPD (Lot Tolerance Percent Defective) of 5.0%. What is the primary risk
to the organization if the auditor consistently accepts lots that are at or just below
the LTPD level?
A) The producer's risk (alpha risk) is being increased.
B) The consumer's risk (beta risk) is being increased.
C) The sampling plan is not operating correctly and should be replaced.
D) The AQL is set too low and should be increased.
Correct Answer: B
The LTPD is the level of defectiveness that a consumer (the organization) is willing
, 4
to reject. The probability of accepting a lot at the LTPD level is the consumer's
risk (beta risk). If the auditor consistently accepts lots near this level, they are
increasing the organization's exposure to poor quality, thereby increasing the
consumer's risk. Producer's risk (A) relates to rejecting good lots at the AQL level.
Option C is a possibility but not the primary risk definition. Option D would not
solve the problem and would increase risk.
Question 5: A lead auditor is reviewing an audit report written by a junior team
member. The junior auditor's report contains the following finding: "The
production manager was uncooperative and clearly didn't understand the
importance of quality." How should the lead auditor handle this statement?
A) Approve it, as it reflects the auditor's professional judgment of the situation.
B) Remove it, as it is subjective, personal, and not an objective statement of fact.
C) Ask the junior auditor to provide specific examples of the manager's
uncooperativeness.
D) Reword it to say "The production manager lacked a quality-driven mindset."
Correct Answer: B
Audit findings must be based on objective evidence and be factual, not subjective
opinions or personal attacks. Statements about a person's attitude or
understanding are not objective and have no place in a formal audit report. They
undermine the report's credibility. Option A is incorrect because this is not a valid
professional judgment. Option C would only gather evidence for a still-
inappropriate statement. Option D is a rephrasing of the same subjective
judgment.
Question 6: An organization is implementing a new Quality Management System
(QMS) and wants to conduct a gap analysis against the requirements of ISO
9001:2015. Which of the following activities would be the MOST effective for this
purpose?
A) A review of the organization's financial records to ensure adequate funding for
the QMS.
B) A series of interviews with top management to assess their commitment.
C) A document review comparing existing procedures and processes to each clause
of the standard.
D) A survey of employees to gauge their understanding of quality principles.
CQA ASQ CERTIFIED QUALITY AUDITOR
EXAMINATION – EXAM PREP GUIDE: STUDY
GUIDE | LATEST UPDATE 2026/2027 | PRACTICE
QUESTIONS AND ANSWERS | 100% CORRECT
ANSWERS | VERIFIED SOLUTIONS
This comprehensive practice examination is meticulously designed for candidates
preparing for the ASQ Certified Quality Auditor (CQA) examination. It serves as
an essential study guide, reflecting the latest update for 2026/2027. The material
covers the full spectrum of the CQA Body of Knowledge, including audit
fundamentals, program management, planning, execution, reporting, and follow-
up. Featuring advanced practice questions and answers with verified solutions,
this guide simulates the rigor of the actual exam. Each question is crafted to test
theoretical knowledge and practical application, ensuring candidates are
thoroughly prepared to achieve a 100% correct answers score on their
professional credentialing journey. This is an indispensable resource for mastering
the competencies required of a certified quality auditor.
Table of Contents
I. Audit Fundamentals and Principles
II. Audit Program Management and Administration
III. Audit Planning and Preparation
IV. Audit Execution and Evidence Collection
V. Audit Reporting and Communication
VI. Audit Follow-up and Corrective Action
VII. Professional Conduct and Ethics
, 2
Question 1: An audit team is preparing for a Stage 2 certification audit of a
medical device manufacturer against ISO 13485:2016. The audit manager is
reviewing the audit plan to ensure it aligns with the standard's requirements. Which
of the following elements is LEAST critical to include in the initial audit plan,
according to ISO 19011:2018 guidelines?
A) The audit objectives, scope, and criteria
B) The dates and locations where the audit activities will be conducted
C) The specific nonconformities identified during the previous internal audit
D) The roles and responsibilities of the audit team members and guides
Correct Answer: C
According to ISO 19011:2018, the audit plan should provide the basis for
agreement regarding the conduct of the audit. It includes objectives, scope,
criteria, dates, locations, roles, and responsibilities. While previous audit findings
(like nonconformities) are crucial inputs for planning the audit's focus and
sampling strategy, the specific list of nonconformities is not a standard element of
the formal audit plan itself. Options A, B, and D are all explicitly listed as elements
to be included in the audit plan.
Question 2: A quality auditor is evaluating a supplier's calibration system. The
auditor discovers that a critical torque wrench used on an assembly line was
calibrated six months ago, but the calibration certificate has a stated uncertainty of
±3%. The torque specification is 50 Nm ±5%. What is the most significant risk
associated with this situation?
A) The torque wrench may be out of calibration, invalidating all assemblies made
in the last six months.
B) The measurement uncertainty is a significant portion of the tolerance,
potentially leading to a false accept or false reject decision.
C) The calibration interval is too long, and the wrench should be calibrated
monthly.
D) The calibration certificate is invalid because it does not state the "as found"
condition.
Correct Answer: B
The core issue is the ratio of measurement uncertainty to the specification
tolerance. A ±3% uncertainty on a 50 Nm target is ±1.5 Nm, while the tolerance is
±2.5 Nm. This means the uncertainty consumes 60% of the total tolerance
(1.5/2.5), which is a very high risk. This can lead to accepting a nonconforming
, 3
torque (false accept) or rejecting a conforming one (false reject). While A is a risk,
it's a consequence of the core problem. C is a premature conclusion without data.
D is incorrect as "as found" data is not always required on a certificate.
Question 3: During an audit of a software development company's configuration
management process, the auditor finds that a developer has been granted direct
write access to the production code repository to fix a critical bug. This bypasses
the formal change control process. According to ITIL and COBIT best practices,
what is the primary control failure in this scenario?
A) Failure to enforce segregation of duties between development and production
environments.
B) Failure to perform a proper risk assessment before making the fix.
C) Failure to document the bug and its resolution in the problem management
system.
D) Failure to notify the change advisory board (CAB) post-implementation.
Correct Answer: A
The fundamental control principle violated here is the segregation of duties (SoD),
a key component of ITIL and COBIT frameworks. Developers should not have
direct, unfettered access to modify production systems. This access should be
controlled through a formal change management process where a separate
individual or team reviews, approves, and implements the change. Option B is a
result of bypassing the process. Option C is a documentation issue, secondary to
the control failure. Option D is incorrect because the issue is bypassing the CAB,
not failing to notify them afterward.
Question 4: An auditor is using a statistical sampling plan for an inspection of
incoming raw material. The plan has an AQL (Acceptable Quality Level) of 1.0%
and an LTPD (Lot Tolerance Percent Defective) of 5.0%. What is the primary risk
to the organization if the auditor consistently accepts lots that are at or just below
the LTPD level?
A) The producer's risk (alpha risk) is being increased.
B) The consumer's risk (beta risk) is being increased.
C) The sampling plan is not operating correctly and should be replaced.
D) The AQL is set too low and should be increased.
Correct Answer: B
The LTPD is the level of defectiveness that a consumer (the organization) is willing
, 4
to reject. The probability of accepting a lot at the LTPD level is the consumer's
risk (beta risk). If the auditor consistently accepts lots near this level, they are
increasing the organization's exposure to poor quality, thereby increasing the
consumer's risk. Producer's risk (A) relates to rejecting good lots at the AQL level.
Option C is a possibility but not the primary risk definition. Option D would not
solve the problem and would increase risk.
Question 5: A lead auditor is reviewing an audit report written by a junior team
member. The junior auditor's report contains the following finding: "The
production manager was uncooperative and clearly didn't understand the
importance of quality." How should the lead auditor handle this statement?
A) Approve it, as it reflects the auditor's professional judgment of the situation.
B) Remove it, as it is subjective, personal, and not an objective statement of fact.
C) Ask the junior auditor to provide specific examples of the manager's
uncooperativeness.
D) Reword it to say "The production manager lacked a quality-driven mindset."
Correct Answer: B
Audit findings must be based on objective evidence and be factual, not subjective
opinions or personal attacks. Statements about a person's attitude or
understanding are not objective and have no place in a formal audit report. They
undermine the report's credibility. Option A is incorrect because this is not a valid
professional judgment. Option C would only gather evidence for a still-
inappropriate statement. Option D is a rephrasing of the same subjective
judgment.
Question 6: An organization is implementing a new Quality Management System
(QMS) and wants to conduct a gap analysis against the requirements of ISO
9001:2015. Which of the following activities would be the MOST effective for this
purpose?
A) A review of the organization's financial records to ensure adequate funding for
the QMS.
B) A series of interviews with top management to assess their commitment.
C) A document review comparing existing procedures and processes to each clause
of the standard.
D) A survey of employees to gauge their understanding of quality principles.
