IIA-CRMA Exam Questions and Answers

QUESTION: 11

Which of the following actions does not violate the IIA Code of Ethics or Standards?

An internal auditor performing an audit on an operation that they managed less than a year ago.
An internal auditor performing an audit on procedures that they were responsible for creating.
An internal auditor disclosing details of an audit report to colleagues from a different organization.
An internal auditor disclosing confidential information in response to a lawsuit.

Answer(s): D

Reveal Solution Next Question

QUESTION: 12

Which of the following controls is not appropriate for sales in a manufacturing organization?

Customers' orders are recorded promptly.
Goods shipped are matched with valid customer orders.
Goods returned are inspected for damage by the receiving department for proper disposition.
Sales department approval is required for credit sales transactions.

Answer(s): D

Reveal Solution Next Question

QUESTION: 13

A manufacturing organization discovers that the waste water released has failed to meet permitted limits. Which control function will be least effective in correcting the issue?

Performing a chemical analysis of the water, prior to discharge, for components specified in the permit.
Posting signs that tell employees which substances may be disposed of via sinks and floor drains within the facility.
Diluting pollutants by flushing sinks and floor drains daily with large volumes of clean water.
Establishing a preventive maintenance program for the pretreatment system.

Answer(s): C

Reveal Solution Next Question

QUESTION: 14

A computer system automatically locks a user's account after three unsuccessful attempts to logon. Which type of control does this scenario represent?

Corrective control.
Preventive control.
Detective control.
Compensating control.

Answer(s): B

Reveal Solution Next Question

QUESTION: 15

Why is it important for the chief audit executive to periodically review the audit charter and present the results to senior management and the board?

Because management requires the review to measure effectiveness of the internal audit activity.
So that the individual objectivity of the internal audit staff can be more clearly established.
So that there is assurance of the internal audit staff's proficiency to complete audit activities.
Because changes in the organization may impair the internal audit activity's ability to meet its objectives.

Answer(s): D

Reveal Solution Next Question

IIA IIA-CRMA Exam (page: 3) IIA Certification in Risk Management Assurance (CRMA) Exam Updated on: 12-Feb-2026

QUESTION: 11

QUESTION: 12

QUESTION: 13

QUESTION: 14

QUESTION: 15

IIA IIA-CRMA Exam (page: 3)
IIA Certification in Risk Management Assurance (CRMA) Exam
Updated on: 12-Feb-2026