IIA Certification in Risk Management Assurance - IIA-CRMA-ADV Exam Practice Test

Which of the following scenarios exemplifies a potential internal control weakness?
Correct Answer: C
An organization has implemented a new automated payroll system that contains a table of pay rates that are matched to employee job classifications. Which control should an internal auditor suggest in order to ensure that the table is updated correctly, and is used only for valid pay changes?
Correct Answer: B
Which of the following would not be a red flag for fraud?
Correct Answer: C
According to the COSO enterprise risk management (ERM) framework, which of the following is not part of the new paradigm in ERM?
Correct Answer: D
Which of the following is the best way to detect fraud?
Correct Answer: D
Which of the following is not a standard technique that the chief audit executive (CAE) would use to provide evidence of supervisory review of working papers?
Correct Answer: A
Management would like to self-assess the overall effectiveness of the controls in place for its 200-person manufacturing department. Which of the following client-facilitated approaches is likely to be the most efficient way to accomplish this objective?
Correct Answer: B
An accounts receivable clerk receives cash payments, posts the payments to customer accounts, and prepares the daily cash deposit.
The clerk has been stealing some cash and manipulating the customer payments to hide the theft.
This fraud could be detected with which of the following controls?
Correct Answer: C
Faced with a complex, highly technical construction audit engagement, the chief audit executive (CAE) considered complementing the current internal audit resources by engaging the services of a civil engineer.
Which of the following should the CAE consider in determining whether the engineer possesses the necessary skills to perform the engagement?
1. Professional certification, license, or other recognition of the engineer's competence in the relevant discipline.
2. Experience of the engineer in the type of work being considered.
3. Compensation or other incentives that the engineer may receive.
4. The extent of other ongoing services that the engineer may be performing for the organization.
Correct Answer: B
In the area of business acumen, which of the following competencies would be the sole responsibility of an internal audit staff member?
Correct Answer: D
An auditor identifies three errors in the sample of 25 entries selected for review (a 12 percent error rate).
Based on this result, the auditor assumes that approximately 59 of the total population of 492 entries are incorrect. To reach this assumption, the auditor has used a technique known as which of the following?
Correct Answer: C
Which of the following is not one of the 10 core competencies identified in the IIA Competency Framework?
Correct Answer: B
The last quality assessment of the internal audit activity identified three areas for improvement: the achievement of audit engagement objectives, quality of work, and staff development. According to IIA guidance, which of the following should be the chief audit executive's primary focus to achieve these recommended improvements?
Correct Answer: C