CQA ASQ CERTIFIED QUALITY AUDITOR
EXAMINATION – EXAM PREP GUIDE | LATEST
UPDATE 2026-2027 | PRACTICE QUESTIONS AND
ANSWERS WITH DETAILED RATIONALES.
Audit Fundamentals and Principles
Audit Program Management and Administration
Audit Planning and Preparation
Audit Execution and Evidence Collection
Audit Reporting and Documentation
Audit Follow-Up and Corrective Action
Quality Tools and Techniques
Standards, Regulations, and Compliance
Auditor Competencies and Ethics
Risk-Based Auditing and Process Improvement
,Question 1: An organization is transitioning from a paper-based quality
management system (QMS) to a fully integrated cloud-based ERP system. As a
lead auditor, you are tasked with planning a process audit of the new system's
implementation. Which of the following is the most critical first step to ensure the
audit's effectiveness?
A) Reviewing the vendor's software documentation and user manuals.
B) Defining the audit scope, criteria, and objectives based on a risk assessment of
the new system.
C) Interviewing IT personnel to understand the system's technical architecture.
D) Scheduling the audit for a time when the system is fully operational.
Correct Answer: B
The most critical first step in any audit is to define its scope, criteria, and
objectives. This foundational planning ensures the audit is focused, relevant, and
addresses the highest-risk areas. A risk-based approach to defining the scope is
particularly crucial during a major system transition. Option A is a subsequent
step for gathering information once the scope is set. Option C is too narrow and
technical, missing the overall process focus. Option D addresses timing, not the
fundamental purpose and boundaries of the audit.
Question 2: An auditor observes a final inspection station where a technician uses a
go/no-go gauge. The technician performs the check but places a green sticker on all
parts before checking them, relying on a quick visual glance instead of the gauge.
The most significant audit finding is:
A) The technician lacks competence and requires retraining.
B) The gauge calibration records are incomplete.
C) The control of nonconforming product is ineffective.
D) The procedure for final inspection is not being followed.
Correct Answer: D
This finding represents a direct nonconformity to the documented procedure and a
failure to implement an essential control. While A and B might be related issues,
the primary, observable nonconformity is the deviation from the defined process.
Option D is the most direct and accurate description of the systemic failure
,observed at the process level, which is the auditor's focus. Option C is a
consequence, but the root cause is the failure to follow the inspection procedure.
Question 3: When conducting a remote audit of a supplier's manufacturing facility,
you are unable to verify the calibration status of a critical test fixture due to a poor
camera connection. The supplier provides a digitally signed calibration certificate
via email. As the auditor, the most appropriate action is to:
A) Accept the certificate and close the audit finding.
B) Issue a major nonconformity for lack of objective evidence.
C) Document the limitation and plan a follow-up on-site verification.
D) Request a live video walkthrough of the calibration lab.
Correct Answer: C
A core principle of auditing is to gather sufficient and appropriate objective
evidence. When access is limited, the auditor must document the limitation and its
potential impact on the audit conclusions. Planning a follow-up is the most prudent
action to ensure the evidence is obtained. Option A is premature, as the direct
verification was not possible. Option B is too harsh, as the supplier has provided
evidence and the issue may be technological. Option D may not be feasible and
could be seen as an attempt to circumvent the limitation without proper
documentation.
Question 4: An auditor is reviewing the corrective action process for an injection
molding company. The internal nonconformities are frequently due to "flash"
(excess material on the part). The corrective action plan is consistently "re-train
operator." What is the most significant weakness in this corrective action process?
A) The corrective action does not address the potential root causes.
B) The corrective action is not timely.
C) The corrective action is not documented properly.
D) The nonconformity is not being accurately classified.
Correct Answer: A
A corrective action's fundamental purpose is to eliminate the cause of a
nonconformity. Repeatedly citing "re-train operator" without investigating other
potential causes (e.g., mold wear, pressure settings, material viscosity) indicates a
superficial approach that fails to identify the true root cause. This violates a key
, principle of corrective action effectiveness. Options B, C, and D describe
procedural issues but do not address the more critical failure of the substantive
problem-solving effort.
===== Page 2 =====
Question 5: In the context of ISO 19011:2018, which of the following best
describes "audit evidence"?
A) The documented results of the audit.
B) Records, statements of fact, or other information which are relevant to the audit
criteria and verifiable.
C) The audit team's professional judgment and conclusions.
D) The audit plan and checklist used by the auditor.
Correct Answer: B
ISO 19011:2018 defines audit evidence as records, statements of fact, or other
information that are relevant to the audit criteria and verifiable. This definition
underscores the need for evidence to be objective and not based on hearsay.
Option A refers to audit findings or records. Option C is the auditor's
interpretation, not the evidence itself. Option D describes the audit tools, not the
evidence gathered.
Question 6: An organization's management review meeting minutes show that a
major customer complaint trend was discussed, but no action was assigned. A year
later, the same trend has worsened. During an audit, this finding is most likely to
be classified as a nonconformity related to:
A) The lack of an effective corrective action process.
B) The failure of management to provide resources.
C) The absence of a process for identifying customer complaints.
D) The failure of management review as a process.
Correct Answer: D
The nonconformity is a failure of the management review process to be effective.
The process should ensure that inputs are not just discussed but lead to decisions
and actions related to improvement and resource needs. The fact that a significant
issue was discussed but resulted in no action is a clear failure of the process itself.
EXAMINATION – EXAM PREP GUIDE | LATEST
UPDATE 2026-2027 | PRACTICE QUESTIONS AND
ANSWERS WITH DETAILED RATIONALES.
Audit Fundamentals and Principles
Audit Program Management and Administration
Audit Planning and Preparation
Audit Execution and Evidence Collection
Audit Reporting and Documentation
Audit Follow-Up and Corrective Action
Quality Tools and Techniques
Standards, Regulations, and Compliance
Auditor Competencies and Ethics
Risk-Based Auditing and Process Improvement
,Question 1: An organization is transitioning from a paper-based quality
management system (QMS) to a fully integrated cloud-based ERP system. As a
lead auditor, you are tasked with planning a process audit of the new system's
implementation. Which of the following is the most critical first step to ensure the
audit's effectiveness?
A) Reviewing the vendor's software documentation and user manuals.
B) Defining the audit scope, criteria, and objectives based on a risk assessment of
the new system.
C) Interviewing IT personnel to understand the system's technical architecture.
D) Scheduling the audit for a time when the system is fully operational.
Correct Answer: B
The most critical first step in any audit is to define its scope, criteria, and
objectives. This foundational planning ensures the audit is focused, relevant, and
addresses the highest-risk areas. A risk-based approach to defining the scope is
particularly crucial during a major system transition. Option A is a subsequent
step for gathering information once the scope is set. Option C is too narrow and
technical, missing the overall process focus. Option D addresses timing, not the
fundamental purpose and boundaries of the audit.
Question 2: An auditor observes a final inspection station where a technician uses a
go/no-go gauge. The technician performs the check but places a green sticker on all
parts before checking them, relying on a quick visual glance instead of the gauge.
The most significant audit finding is:
A) The technician lacks competence and requires retraining.
B) The gauge calibration records are incomplete.
C) The control of nonconforming product is ineffective.
D) The procedure for final inspection is not being followed.
Correct Answer: D
This finding represents a direct nonconformity to the documented procedure and a
failure to implement an essential control. While A and B might be related issues,
the primary, observable nonconformity is the deviation from the defined process.
Option D is the most direct and accurate description of the systemic failure
,observed at the process level, which is the auditor's focus. Option C is a
consequence, but the root cause is the failure to follow the inspection procedure.
Question 3: When conducting a remote audit of a supplier's manufacturing facility,
you are unable to verify the calibration status of a critical test fixture due to a poor
camera connection. The supplier provides a digitally signed calibration certificate
via email. As the auditor, the most appropriate action is to:
A) Accept the certificate and close the audit finding.
B) Issue a major nonconformity for lack of objective evidence.
C) Document the limitation and plan a follow-up on-site verification.
D) Request a live video walkthrough of the calibration lab.
Correct Answer: C
A core principle of auditing is to gather sufficient and appropriate objective
evidence. When access is limited, the auditor must document the limitation and its
potential impact on the audit conclusions. Planning a follow-up is the most prudent
action to ensure the evidence is obtained. Option A is premature, as the direct
verification was not possible. Option B is too harsh, as the supplier has provided
evidence and the issue may be technological. Option D may not be feasible and
could be seen as an attempt to circumvent the limitation without proper
documentation.
Question 4: An auditor is reviewing the corrective action process for an injection
molding company. The internal nonconformities are frequently due to "flash"
(excess material on the part). The corrective action plan is consistently "re-train
operator." What is the most significant weakness in this corrective action process?
A) The corrective action does not address the potential root causes.
B) The corrective action is not timely.
C) The corrective action is not documented properly.
D) The nonconformity is not being accurately classified.
Correct Answer: A
A corrective action's fundamental purpose is to eliminate the cause of a
nonconformity. Repeatedly citing "re-train operator" without investigating other
potential causes (e.g., mold wear, pressure settings, material viscosity) indicates a
superficial approach that fails to identify the true root cause. This violates a key
, principle of corrective action effectiveness. Options B, C, and D describe
procedural issues but do not address the more critical failure of the substantive
problem-solving effort.
===== Page 2 =====
Question 5: In the context of ISO 19011:2018, which of the following best
describes "audit evidence"?
A) The documented results of the audit.
B) Records, statements of fact, or other information which are relevant to the audit
criteria and verifiable.
C) The audit team's professional judgment and conclusions.
D) The audit plan and checklist used by the auditor.
Correct Answer: B
ISO 19011:2018 defines audit evidence as records, statements of fact, or other
information that are relevant to the audit criteria and verifiable. This definition
underscores the need for evidence to be objective and not based on hearsay.
Option A refers to audit findings or records. Option C is the auditor's
interpretation, not the evidence itself. Option D describes the audit tools, not the
evidence gathered.
Question 6: An organization's management review meeting minutes show that a
major customer complaint trend was discussed, but no action was assigned. A year
later, the same trend has worsened. During an audit, this finding is most likely to
be classified as a nonconformity related to:
A) The lack of an effective corrective action process.
B) The failure of management to provide resources.
C) The absence of a process for identifying customer complaints.
D) The failure of management review as a process.
Correct Answer: D
The nonconformity is a failure of the management review process to be effective.
The process should ensure that inputs are not just discussed but lead to decisions
and actions related to improvement and resource needs. The fact that a significant
issue was discussed but resulted in no action is a clear failure of the process itself.
