Free IIA IIA-CIA-Part1 Practice Questions 2026 - Page 17

According to IIA guidance, which of the following activities are considered a core internal audit role with regard to enterprise risk management?

Reviewing the management of key risks.

Evaluating the reporting of key risks.

Evaluating risk management processes.

Consolidating the reporting of risks.

A. 1 and 4.

B. 2 and 4.

C. 2, 3, and 4.

D. 1, 2, and 3.

The largest risks facing an organization should be mitigated by which type of controls?

A. Entity-level

B. Activity-level

C. Transaction-level

D. Process-level

Which of the following scenarios would cause a chief audit executive (CAE) to immediately discontinue using any statements that would indicate conformance with the Standards in an audit report?

A. The internal audit activity used a risk-based approach to create the internal audit plan.

B. The engagement supervisor considered requests from senior management regarding engagements to include in the internal audit plan.

C. The CAE only accepted engagements that the internal audit activity collectively had the knowledge to perform.

D. The area under review restricted the internal audit activity's ability to access records, impacting the audit results.

The internal audit activity is undergoing a self-assessment as part of its quality assurance and improvement program. Which of the following observations must be addressed in order for the internal audit activity to achieve conformance with the Standards?

A. The internal audit charter does not identify which audit services are outsourced.

B. The internal audit charter has not been reviewed by the legal department.

C. The internal audit charter has not been approved by the board within the past year.

D. The internal audit charter does not describe the authority of the internal audit activity.

According to NA guidance, which of the following actions by the chief audit executive would best ensure that internal auditors demonstrate due professional care?

A. Developing policies and procedures for the internal audit activity.

B. Ensuring the internal audit activity is not found fallible during audit engagements.

C. Undertaking all engagements that management requests of the internal audit activity.

D. Ensuring the internal audit activity reports functionally to the board of directors.

Which of the following demonstrates that the internal audit activity exercises due professional care?

A. Supervisors provide feedback to internal auditors after workpapers are reviewed

B. A self-assessment is conducted through the quality assurance and improvement program every five years

C. Internal auditors are required to give absolute assurance of regulatory compliance

D. The chief audit executive reports functionally to the board

Which of the following is a detective control strategy against fraud?

A. Requiring employees to attend ethics training.

B. Performing background checks on employees.

C. Implementing a control self-assessment.

D. Performing a surprise audit

Which of the following is an example of a detective control?

A. Automatic shut-off valve.

B. Auto-correct software functionality.

C. Confirmation with suppliers and vendors.

D. Safety instructions.

Who is responsible for ensuring internal auditors’ continuing professional development?

A. Individual internal auditors.

B. Chief audit executive.

C. The board.

D. Engagement supervisors.

Which of the following scenarios violates The IIA's standard regarding internal audit independence?

A. The chief audit executive (CAE) reports on the internal audit activity's day-to-day tasks and responsibilities to the CEO.

B. An assessment of the risk management function is reviewed by an outside consulting firm because the CAE is temporarily fulfilling the role of risk manager.

C. The CAE regularly meets with the organization's chief risk officer, who validates all reported audit findings and dictates which will be Included In the package to the audit committee.

D. The internal audit activity will experience staffing shortages for the next six months due to planned and unplanned leaves of absence; therefore the CAE proposed including fewer audits in the annual audit plan compared to the previous financial year.