IIA Certified IIA-CIA-Part2 Dumps Questions Valid IIA-CIA-Part2 Materials [Q272-Q294]

Q272. What is the best course of action for a chief audit executive if an internal auditor identifies in the early stage of an audit that some employees have inappropriate access to a key system?

Q273. Which of the following should be described in the recognition element of a typical internal audit repot?

Q274. An internal auditor is reviewing a new automated human resources system. The system contains a table of pay rates which are matched to the employee job classifications. The best control to ensure that the table is updated correctly for only valid pay changes would be to:

Q275. The scope of a business process review primarily involves:

Q276. When me internal audit activity does not have sufficient time to complete its usual root cause analysis which c4 the following is most appropriate?

Q277. An audit department has received anonymous information that an employee has allegedly been able to steal and cash checks sent to the organization by customers. What is the most efficient way for an auditor to determine how this type of fraud could occur and who might be the perpetrator?

Q278. Which of the following items should be addressed in an organization’s privacy statement?
I. Intended use of collected information.
II. Data storage and security.
III. Network/infrastructure authentication controls.
IV. Data retention policy of the organization.
Parties authorized to access information.

Q279. Which of the following types of contracts would provide the least incentive for a contractor to achieve economy and efficiency?

Q280. Which of the following factors should a chief audit executive consider when determining the audit universe?
1.Components of the organization’s strategic plan.
2.Inputs from senior management and the board.
3.Views of competitors and business associates.
4.Results of exit interviews with departing employees.

Q281. A chief audit executive (CAE) a developing a work program for an upcoming engagement that will review an organization’s small contracting services. When of the following would the CAT need to consider most when developing the work program?

Q282. An internal auditor is conducting a financial audit. Which of the following audit procedures is most appropriate when existing internal controls are weak?

Q283. An organization’s policies allow buyers to authorize expenditures up to $50,000 without any other approval.
Which of the following audit procedures would be most effective in determining if fraud in the form of payments to fictitious companies has occurred?

Q284. A manufacturer is under contract to produce and deliver a number of aircraft to a major airline. As part of the contract, the manufacturer is also providing training to the airline’s pilots. At the time of the audit, the delivery of the aircraft had fallen substantially behind schedule while the training had already been completed. If half of the aircraft under contract have been delivered, which of the following should the internal auditor expect to be accounted for in the general ledger?

Q285. Which of the following situations is most critical for the chief audit executive to report to the board?

Q286. A draft internal audit report that cites deficient conditions generally should be reviewed with which of the following groups?
1. The client manager and her superior.
2. Anyone who may object to the report’s validity.
3. Anyone required to take action.
4. The same individuals who receive the final report.

Q287. According to HA guidance on IT, which of the following actions would be performed as part of the “Define IT Universe” stage of the IT audit plan development process?

Q288. An internal auditor is reviewing purchases made through the organization’s corporate credit card program.
Which of the following statements best describes a root cause of a deficiency?

Q289. Which of the following, if observed, would not indicate the need to extend the search for other indicators of fraud in a purchasing department?

Q290. Which of the following data sources would provide the least valid data for an audit of a retail store’s customer service?

Q291. Persuasive evidence indicates that a member of senior management has been involved in insider trading that would be considered fraudulent. However, the evidence was encountered during an operational audit and is not considered relevant to the audit. Which of the following is the most appropriate action for the chief audit executive to take?

Q292. An internal auditor has a recommendation to change operations which could potentially increase profits by $50,000. The best way to sell this recommendation to management is to:

Q293. An organization does not have a formal risk management function. According to the Standards, which of the following are conditions where the internal audit activity (IAA) may provide risk management consulting?
1.There is a clear strategy and timeline to migrate risk management responsibility back to management.
2.The IAA has the final approval on any risk management decisions.
3.The IAA does not give objective assurance on any part of the risk management framework for which it is responsible.
4.The nature of services provided to the organization is documented in the internal audit charter.

Q294. Which of the following should be the focus of the effect section of the preliminary observations document?