IIA CIA Certification Exam Questions with AI Explanations

QUESTION: 86

A recently appointed chief audit executive (CAE) learns that the audit plan for the upcoming year prepared by the CAE's predecessor has only been reviewed by the audit committee. Which of the following would be the most appropriate action for the CAE to take next in order to gain management support for the audit plan?

Send a copy of the entire audit plan to management of the areas to be audited, with specific assigned dates when the engagements will be conducted.
Meet with management of each area to be audited and explain the purpose and scope of the audit engagement in their area.
Plan for formal entry meetings and engagement letters at the beginning of each engagement and ensure that management understands all work to be undertaken.
Proceed with the audit plan because it is already approved.

Answer(s): B

Reveal Solution Next Question

QUESTION: 87

An internal audit activity that reports both functionally and administratively to the chief financial officer is more likely to

Produce business-oriented and relevant findings.
Have its audit independence questioned.
Produce fewer audit recommendations.
Have its recommendations implemented by management.

Answer(s): B

Reveal Solution Next Question

QUESTION: 88

An internal auditor would review prior audit reports when planning an audit engagement in order to

I). Identify previously reported problem areas for further follow-up.
II). Eliminate previously reviewed areas from further examination.
III). Gain an understanding of the audited area's business processes and control activities.
IV). Understand the concerns or requests of management.

II only.
I and III only.
I and IV only.
II and III only.

Answer(s): B

Reveal Solution Next Question

QUESTION: 89

Which of the following best describes the internal audit activity's role in supporting the board in enterprise-wide risk assessment?

Ensure that sound risk management processes are in place and functioning.
Oversee risk management processes to determine if they are adequate and effective.
Examine, evaluate, report on, and recommend improvements on the adequacy and effectiveness of risk processes.
Implement risk management methodologies and controls to address risks identified.

Answer(s): C

Reveal Solution Next Question