IIA PRACTICE
TEST - PART 1
IIA
Evatee 8/29/24 IIA
,IIA PRACTICE TEST - PART 1
You are asked to audit the control environment for an organization. Elements
you will look at include integrity and ethical values, organizational structure,
and human resources policies and practices. Which is another element to
consider?
-Creation of a mission statement
-Adherence to regulations
-Competence of stakeholders
-Assignment of authority and responsibility Answer - Assignment of authority
and responsibility -
Per the Practice Guide "Auditing the Control Environment," additional
elements to consider include the assignment of authority and responsibility,
management philosophy and operating style, and competence of personnel
(not of stakeholders).
Goods received from a certain supplier occasionally arrive without a proper bill
of lading. In these situations, the receiving clerk is directed to telephone the
supplier and request a bill of lading by fax so that he or she can compare what
was actually received to the bill and research any discrepancies. Which of the
following is this type of control?
-Governance control
-Detective control
-Preventive control
-Application control Answer - Detective control -
Because it detects something wrong, it is a detective control.
, Which of the following is the appropriate way to respond to an ethics violation
that involves workplace theft in the U.S.?
-Start a progressive disciplinary process with counseling or probation as the
first step.
-Terminate the employee, but do not press charges to keep the matter from
becoming public.
-Report the issue directly to legal authorities.
-Terminate the employee, but press charges only if the employee fails to return
all of the funds. Answer - Report the issue directly to legal authorities. -
In the U.S., illegal activities must be reported to the police. In some countries,
victims may choose not to press charges, especially if the loss has been
recovered.
Who should be the direct recipient of reports that show the results of periodic
reviews for internal assessment of the internal audit function?
-Board of directors
-Process owners
-Chief audit executive (CAE)
-Senior management Answer - Chief audit executive (CAE) -
Typically, those individuals conducting ongoing and periodic reviews should
report to the CAE while performing the reviews and should communicate their
results directly to the CAE.
A chief audit executive (CAE) suspects that several employees have used
desktop computers for personal gain. In conducting an investigation, the
primary reason that the CAE chooses to engage a forensic information systems
auditor rather than using the organization's information systems auditor is that
a forensic auditor would possess
-knowledge of the computing system that would enable a more comprehensive
assessment of the computer use and abuse.
TEST - PART 1
IIA
Evatee 8/29/24 IIA
,IIA PRACTICE TEST - PART 1
You are asked to audit the control environment for an organization. Elements
you will look at include integrity and ethical values, organizational structure,
and human resources policies and practices. Which is another element to
consider?
-Creation of a mission statement
-Adherence to regulations
-Competence of stakeholders
-Assignment of authority and responsibility Answer - Assignment of authority
and responsibility -
Per the Practice Guide "Auditing the Control Environment," additional
elements to consider include the assignment of authority and responsibility,
management philosophy and operating style, and competence of personnel
(not of stakeholders).
Goods received from a certain supplier occasionally arrive without a proper bill
of lading. In these situations, the receiving clerk is directed to telephone the
supplier and request a bill of lading by fax so that he or she can compare what
was actually received to the bill and research any discrepancies. Which of the
following is this type of control?
-Governance control
-Detective control
-Preventive control
-Application control Answer - Detective control -
Because it detects something wrong, it is a detective control.
, Which of the following is the appropriate way to respond to an ethics violation
that involves workplace theft in the U.S.?
-Start a progressive disciplinary process with counseling or probation as the
first step.
-Terminate the employee, but do not press charges to keep the matter from
becoming public.
-Report the issue directly to legal authorities.
-Terminate the employee, but press charges only if the employee fails to return
all of the funds. Answer - Report the issue directly to legal authorities. -
In the U.S., illegal activities must be reported to the police. In some countries,
victims may choose not to press charges, especially if the loss has been
recovered.
Who should be the direct recipient of reports that show the results of periodic
reviews for internal assessment of the internal audit function?
-Board of directors
-Process owners
-Chief audit executive (CAE)
-Senior management Answer - Chief audit executive (CAE) -
Typically, those individuals conducting ongoing and periodic reviews should
report to the CAE while performing the reviews and should communicate their
results directly to the CAE.
A chief audit executive (CAE) suspects that several employees have used
desktop computers for personal gain. In conducting an investigation, the
primary reason that the CAE chooses to engage a forensic information systems
auditor rather than using the organization's information systems auditor is that
a forensic auditor would possess
-knowledge of the computing system that would enable a more comprehensive
assessment of the computer use and abuse.
