Free IIA IIA-CIA-Part2 Exam Questions

Become IIA Certified with updated IIA-CIA-Part2 exam questions and correct answers

Page: 1 / 97

Total 485 Questions | Updated On: Sep 22, 2026

Add To Cart

Question 1

Which of the following is a primary reason for an internal auditor to use a risk and control questionnaire when auditing financial processes?

A : To gam an understanding of the control environment

B : To collect as much financial data as possible before engagement fieldwork begins.

C : To test the effectiveness of financial controls in an efficient and relatively inexpensive way

D : To facilitate the quantification of financial data obtained

Answer: A

Question 2

When constructing a staffing schedule for the internal audit activity (IAA), which of the following criteria are

most important for the chief audit executive to consider for the effective use of audit resources?

1. The competency and qualifications of the audit staff for specific assignments.

2. The effectiveness of IAA staff performance measures.

3. The number of training hours received by staff auditors compared to the budget.

4. The geographical dispersion of audit staff across the organization.

Section: Volume E

A : 1 and 3

B : 1 and 4

C : 2 and 3

D : 2 and 4

Answer: B

Question 3

An internal audit report includes a recommendation to remove inappropriate user access to an IT application. Which of the following does the recommendation represent?

A : An agreed action adopted by management.

B : A condition-based recommendation as an interim solution to correct a current condition.

C : A cause-based recommendation to prevent inappropriate access being granted again.

D : A management action plan.

Answer: B

Question 4

An internal auditor recommended that an organization implement computerized controls in its sales system in

order to prevent sales representatives from executing contracts in excess of their delegated authority levels. A

follow-up review found that the sales system had not been modified, but a process had been implemented to

obtain written approval by the vice president of sales for all contracts in excess of $1 million. The chief audit

executive (CAE) would be justified in reporting this situation to the organization's board if:

I. In the opinion of the CAE, the level of residual risk assumed by senior management is too high.

II. Testing of compliance with the new process finds that all new contracts in excess of $1 million have been

approved by the vice president of sales.

III. The cost of modifying the sales system to include a preventive control is less than $100,000.

Section: Volume C

A : only

B : I only

C : and III only

D : I, II, and III

Answer: A

Question 5

According to the International Professional Practices Framework, which of the following statements is correct

regarding the communication of audit results?

I. Summary reports may be issued separately from or in conjunction with the final report.

II. Interim reports may be written or oral.

III. Detailed reports should always be issued to the audit committee.

IV. Interim reports should be used to communicate information which requires immediate attention.

Section: Volume A

A : and III only

B : and IV only

C : II, and IV only

D : I, II, III, and IV.

Answer: C

Page: 1 / 97

Total 485 Questions | Updated On: Sep 22, 2026

Add To Cart