Page |1
ASQ CQA CERTIFIED QUALITY AUDITOR
EXAMINATION: STUDY GUIDE | LATEST
UPDATE 2026/2027 | PRACTICE QUESTIONS
AND ANSWERS | EXAM REVIEW
TABLE OF CONTENTS
I. Auditing Fundamentals
II. Audit Process
III. Auditor Competencies
IV. Audit Program Management and Business Applications
V. Quality Tools and Techniques
question 1: Which of the following best describes the primary purpose of a first-party audit?
Correct Answer: An internal audit conducted by an organization on itself to verify
conformity and identify improvement opportunities.
A first-party audit is an internal audit where the organization audits its own processes,
systems, or products. It is used for self-assessment, management review input, and continuous
improvement. Second-party audits are conducted on suppliers, and third-party audits are
conducted by independent certification bodies.
, Page |2
question 2: An auditor is reviewing a supplier's quality management system against ISO
9001:2015. This is an example of which type of audit?
Correct Answer: Second-party audit.
A second-party audit is conducted by an organization on its supplier or potential supplier. It
is also called a supplier audit. The purpose is to verify the supplier's capability to meet
contractual and quality requirements before or during the business relationship.
question 3: Which audit type is conducted by an independent certification body to verify that
an organization meets the requirements of a standard?
Correct Answer: Third-party audit.
Third-party audits are performed by external, independent organizations, such as registrars
or certification bodies. They result in formal certification or registration. They provide the
highest level of objectivity and are recognized across industries.
question 4: What is the primary difference between a product audit and a process audit?
Correct Answer: A product audit evaluates a specific product or service against
specifications, while a process audit evaluates the effectiveness and efficiency of a
process against defined criteria.
Product audits verify conformity of finished goods or services. Process audits examine the
methods, procedures, and controls used to produce the product. System audits evaluate the
entire quality management system. Each audit type has a different scope and objective.
question 5: Which audit type focuses on verifying that corrective and preventive actions have
been effectively implemented?
Correct Answer: CAPA verification audit.
A CAPA verification audit, also called a follow-up audit, is conducted after corrective or
preventive actions have been implemented. Its purpose is to verify that the actions were
effective in eliminating the root cause and preventing recurrence. It is a critical part of the
audit closure process.
question 6: What is a risk-based audit?
, Page |3
Correct Answer: An audit that prioritizes areas of higher risk to the organization,
focusing resources on processes or systems most likely to have significant failures or
impacts.
Risk-based auditing uses risk assessment to determine audit scope, frequency, and depth. It
ensures that audit resources are allocated where they are most needed. This approach is
increasingly emphasized in the 2026 CQA BoK.
question 7: What is a surveillance audit?
Correct Answer: A periodic audit conducted after initial certification to ensure
continued compliance with standards and requirements.
Surveillance audits are typically conducted annually or semi-annually by certification bodies.
They are shorter in duration than full certification audits and focus on key areas. They help
maintain the validity of the certification.
question 8: What is a for-cause audit?
Correct Answer: An audit triggered by a specific event, such as a customer complaint,
regulatory finding, or significant process failure.
For-cause audits, also called special audits, are conducted when there is a specific reason to
investigate. They are focused and often expedited. They may be conducted by internal or
external auditors depending on the trigger.
question 9: What is an integrated audit?
Correct Answer: An audit that combines two or more audit types or standards into a
single audit process.
Integrated audits, also called combined or joint audits, evaluate multiple systems or
standards simultaneously. For example, an integrated audit might cover ISO 9001, ISO
14001, and ISO 45001. They reduce audit burden on the auditee and provide a holistic view
of the management system.
question 10: What is a remote audit?
Correct Answer: An audit conducted using information and communication
technologies when the auditor is not physically present at the auditee's location.
, Page |4
Remote audits use video conferencing, document sharing, and screen-sharing tools. They are
useful for geographically dispersed organizations or during travel restrictions. The 2026
CQA BoK emphasizes remote and hybrid audit competencies.
question 11: What is a hybrid audit?
Correct Answer: An audit that combines remote and on-site auditing methods.
Hybrid audits use remote techniques for some audit activities (e.g., document review) and on-
site presence for others (e.g., physical inspection, interviews). They balance efficiency and
thoroughness. The 2026 BoK recognizes hybrid audits as a distinct audit type.
question 12: Which of the following is a key benefit of conducting audits?
Correct Answer: Providing independent assessment of system effectiveness and
identifying opportunities for improvement.
Audits provide objective evidence of conformity and effectiveness. They help identify risks,
inefficiencies, and nonconformities. They also support management review and continuous
improvement. The 2026 BoK emphasizes the business value of audits.
question 13: What is the purpose of the ASQ Code of Ethics for auditors?
Correct Answer: To establish the ethical principles and standards of conduct that
auditors must uphold to maintain credibility and public trust.
The ASQ Code of Ethics emphasizes due diligence, due care, confidentiality, conflict of
interest, and professional integrity. Auditors must avoid situations that compromise
objectivity. Violations can result in loss of certification and legal consequences.
question 14: An auditor discovers a serious safety violation during an audit. What is the most
appropriate action?
Correct Answer: Report the violation to the appropriate management immediately and
document it in the audit report.
Auditors have an ethical responsibility to report illegal or unsafe conditions. Immediate
reporting prevents harm. The violation should be documented as a finding. The auditor
should follow organizational escalation procedures and applicable regulations.
question 15: What is a conflict of interest in auditing?
ASQ CQA CERTIFIED QUALITY AUDITOR
EXAMINATION: STUDY GUIDE | LATEST
UPDATE 2026/2027 | PRACTICE QUESTIONS
AND ANSWERS | EXAM REVIEW
TABLE OF CONTENTS
I. Auditing Fundamentals
II. Audit Process
III. Auditor Competencies
IV. Audit Program Management and Business Applications
V. Quality Tools and Techniques
question 1: Which of the following best describes the primary purpose of a first-party audit?
Correct Answer: An internal audit conducted by an organization on itself to verify
conformity and identify improvement opportunities.
A first-party audit is an internal audit where the organization audits its own processes,
systems, or products. It is used for self-assessment, management review input, and continuous
improvement. Second-party audits are conducted on suppliers, and third-party audits are
conducted by independent certification bodies.
, Page |2
question 2: An auditor is reviewing a supplier's quality management system against ISO
9001:2015. This is an example of which type of audit?
Correct Answer: Second-party audit.
A second-party audit is conducted by an organization on its supplier or potential supplier. It
is also called a supplier audit. The purpose is to verify the supplier's capability to meet
contractual and quality requirements before or during the business relationship.
question 3: Which audit type is conducted by an independent certification body to verify that
an organization meets the requirements of a standard?
Correct Answer: Third-party audit.
Third-party audits are performed by external, independent organizations, such as registrars
or certification bodies. They result in formal certification or registration. They provide the
highest level of objectivity and are recognized across industries.
question 4: What is the primary difference between a product audit and a process audit?
Correct Answer: A product audit evaluates a specific product or service against
specifications, while a process audit evaluates the effectiveness and efficiency of a
process against defined criteria.
Product audits verify conformity of finished goods or services. Process audits examine the
methods, procedures, and controls used to produce the product. System audits evaluate the
entire quality management system. Each audit type has a different scope and objective.
question 5: Which audit type focuses on verifying that corrective and preventive actions have
been effectively implemented?
Correct Answer: CAPA verification audit.
A CAPA verification audit, also called a follow-up audit, is conducted after corrective or
preventive actions have been implemented. Its purpose is to verify that the actions were
effective in eliminating the root cause and preventing recurrence. It is a critical part of the
audit closure process.
question 6: What is a risk-based audit?
, Page |3
Correct Answer: An audit that prioritizes areas of higher risk to the organization,
focusing resources on processes or systems most likely to have significant failures or
impacts.
Risk-based auditing uses risk assessment to determine audit scope, frequency, and depth. It
ensures that audit resources are allocated where they are most needed. This approach is
increasingly emphasized in the 2026 CQA BoK.
question 7: What is a surveillance audit?
Correct Answer: A periodic audit conducted after initial certification to ensure
continued compliance with standards and requirements.
Surveillance audits are typically conducted annually or semi-annually by certification bodies.
They are shorter in duration than full certification audits and focus on key areas. They help
maintain the validity of the certification.
question 8: What is a for-cause audit?
Correct Answer: An audit triggered by a specific event, such as a customer complaint,
regulatory finding, or significant process failure.
For-cause audits, also called special audits, are conducted when there is a specific reason to
investigate. They are focused and often expedited. They may be conducted by internal or
external auditors depending on the trigger.
question 9: What is an integrated audit?
Correct Answer: An audit that combines two or more audit types or standards into a
single audit process.
Integrated audits, also called combined or joint audits, evaluate multiple systems or
standards simultaneously. For example, an integrated audit might cover ISO 9001, ISO
14001, and ISO 45001. They reduce audit burden on the auditee and provide a holistic view
of the management system.
question 10: What is a remote audit?
Correct Answer: An audit conducted using information and communication
technologies when the auditor is not physically present at the auditee's location.
, Page |4
Remote audits use video conferencing, document sharing, and screen-sharing tools. They are
useful for geographically dispersed organizations or during travel restrictions. The 2026
CQA BoK emphasizes remote and hybrid audit competencies.
question 11: What is a hybrid audit?
Correct Answer: An audit that combines remote and on-site auditing methods.
Hybrid audits use remote techniques for some audit activities (e.g., document review) and on-
site presence for others (e.g., physical inspection, interviews). They balance efficiency and
thoroughness. The 2026 BoK recognizes hybrid audits as a distinct audit type.
question 12: Which of the following is a key benefit of conducting audits?
Correct Answer: Providing independent assessment of system effectiveness and
identifying opportunities for improvement.
Audits provide objective evidence of conformity and effectiveness. They help identify risks,
inefficiencies, and nonconformities. They also support management review and continuous
improvement. The 2026 BoK emphasizes the business value of audits.
question 13: What is the purpose of the ASQ Code of Ethics for auditors?
Correct Answer: To establish the ethical principles and standards of conduct that
auditors must uphold to maintain credibility and public trust.
The ASQ Code of Ethics emphasizes due diligence, due care, confidentiality, conflict of
interest, and professional integrity. Auditors must avoid situations that compromise
objectivity. Violations can result in loss of certification and legal consequences.
question 14: An auditor discovers a serious safety violation during an audit. What is the most
appropriate action?
Correct Answer: Report the violation to the appropriate management immediately and
document it in the audit report.
Auditors have an ethical responsibility to report illegal or unsafe conditions. Immediate
reporting prevents harm. The violation should be documented as a finding. The auditor
should follow organizational escalation procedures and applicable regulations.
question 15: What is a conflict of interest in auditing?
