IIA-CIA-Part1 practice questions, page 3 of 47, with answer review and explanations.
Question 11
Which of the following lists the audit activities in the order in which they would generally be completed during a preliminary survey? I. Write detailed audit procedures. II. Identify client objectives, goals, and standards. III. Identify risks and controls intended to prevent associated losses. IV. Determine relevant engagement objectives.
II, I, IV, III.
II, III, IV, I.
III, IV, II, I.
II, IV, I, III.
Question 12
During the planning phase of an audit of suspected overbilling on contracts for security services, an auditor should perform all of the following except:
Interviewing an official of the security services company to determine the cause of recent increases in billings for services.
Interviewing the manager who requested the audit engagement.
Obtaining a copy of the contract between the two organizations.
Preparing an engagement program.
Question 13
Which of the following statements regarding segregation of duties is true?
When evaluating an organization's policy on segregation of duties, employee competence does not need to be considered.
An organizational chart provides an accurate definition of segregation of duties.
A restrictive segregation-of-duties policy can help improve an organization's communication.
Policies on segregation of duties in information systems must recognize the difference between logical and physical access to assets.
Question 14
An auditor plans to analyze customer satisfaction, including. (1) customer complaints recorded by the customer service department during the last three months; (2) merchandise returned in the last three months; and (3) responses to a survey of customers who made purchases in the last three months. Which of the following statements regarding this audit approach is correct?
Although useful, such an analysis does not address any risk factors.
The survey would not consider customers who did not make purchases in the last three months.
Steps 1 and 2 of the analysis are not necessary or cost-effective if the customer survey is comprehensive.
Analysis of three months' activity would not evaluate customer satisfaction.
Question 15
If an internal auditor discloses confidential information in response to a lawsuit, the internal auditor has violated.