CIA Exam Questions and Answers | Exam-Dumps (Page: 5)

QUESTION: 21

An organization receives the most value from an internal audit activity's enterprise-wide risk assessment when the auditor

Focuses primarily on enterprise-level risks
Considers activities at all levels of the organization
Reviews special projects and new initiatives
Validates supporting financial and operational data

Answer(s): B

Reveal Solution Next Question

QUESTION: 22

Internal auditors who are concerned with potential risks due to the mishandling of records or transactions should take into consideration

The type and nature of the activities to be examined
Whether employees in key positions of trust are bonded
The history of losses suffered by the company
The results of prior risk assessments

Answer(s): A

Reveal Solution Next Question

A chief audit executive (CAE) used an electronic spreadsheet to facilitate the risk assessment process for a number of different divisions. The spreadsheet included the following factors Complexity of operations Competence of divisional personnel Dollar amount of accounts where management's judgment can affect the expense. The CAE used a group meeting of audit managers to reach a consensus on the competence of divisional personnel. Other factors were assessed as high, medium, or low risk by either the CAE or an audit manager who had audited the division. The CAE weighted each factor and computed a composite risk score. Which of the following statements is correct regarding this risk assessment process?

The risk analysis would not be appropriate because it mixes both quantitative and qualitative factors.
Assessing factors at discrete levels, such as high, medium, and low, is inappropriate for the risk assessment process because the ratings are not quantifiable.
The weighting is subjective and should have been determined through a process such as multiple regression analysis.
Using a subjective group consensus to assess personnel competence is appropriae.

Answer(s): D

Reveal Solution Next Question

QUESTION: 24

Which of the following is a risk factor that a chief audit executive should consider when prioritizing audit work schedules?

I). Quality of internal control
II). Management competence
III). Time of last audit engagement
IV). Degree of change or organizational stability

I and III only
I, II, and IV only
II, III, and IV only
I, II, III, and IV

Answer(s): D

Reveal Solution Next Question

QUESTION: 25

A company has entered into a $20, 000, 000 fixed-price contract with a general contractor for the construction of a new retail outlet. For this contract, which of the following would represent the greatest risk?

Excessive labor charged to the project
Poor physical protection of materials and equipment
Failure to complete the project within budget
Substitution of inferior materials

Answer(s): D

Reveal Solution Next Question

IIA CIA Exam (page: 5)
IIA Certified Internal Auditor Exam
Updated on: 15-Feb-2026

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

QUESTION: 25

IIA CIA Exam (page: 5) IIA Certified Internal Auditor Exam Updated on: 15-Feb-2026

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

QUESTION: 25

IIA CIA Exam (page: 5)
IIA Certified Internal Auditor Exam
Updated on: 15-Feb-2026