CIA-Part1-2025

CIA-Part1-2025 practice questions, page 4 of 5, with answer review and explanations.

Question 16

Which of the following audit types will be most applicable if senior management believes that the ongoing enterprisewide resource planning system development project is not progressing well and actual costs exceed budgeted ones?

  1. Readiness assessment.
  2. Project management methodology assessment.
  3. Risk assessment
  4. A post-implementation review.

Question 17

An internal auditor interviews for a position within the organization’s IT department while simultaneously conducting an audit of the area’s ability to manage the organization’s user network accounts. This presents a conflict of which of the following principles?

  1. Confidentiality.
  2. Objectivity.
  3. Competency.
  4. Integrity.

Question 18

Which of the following will help the chief audit executive (CAE) of a large organization ensure that the independence of the internal audit function is maintained?

  1. The board is required to approve the salary package for all audit staff.
  2. The internal audit charter is approved by the CAE.
  3. The internal audit budget and resource plan are approved by the board.
  4. The decision regarding the appointment or termination of the CAE belongs to the CEO.

Question 19

Which of the following statements is true regarding organizationwide risk management?

  1. Risk management is a function centralized at the top-level of management.
  2. Risk management centers on inventorying the applicable risks to the organization.
  3. Risk management is complementary to the system of internal controls.
  4. Risk management centers on governance and culture.

Question 20

An organization uses hedging to address foreign currency risk. Which of the following best describes this risk strategy?

  1. Avoidance.
  2. Acceptance.
  3. Reduction.
  4. Sharing.