[Apr-2023] 100% Guarantee Download IIA-CIA-Part2 Exam Dumps PDF Q&A [Q160-Q178]

NO.160 Which of the following actions has the least influence on the chief audit executive’s development of an audit plan?

NO.161 Which of the following items should be addressed in an organization’s privacy statement?
I. Intended use of collected information.
II. Data storage and security.
III. Network/infrastructure authentication controls.
IV. Data retention policy of the organization.
Parties authorized to access information.

NO.162 During a systems development audit, software developers indicated that all programs were moved from the development environment to the production environment and then tested in the production environment. What should the auditor recommend?
I.Implement a test environment to ensure that testing is not performed in the production environment.
II.
Require developers to move modified programs from the development environment to the test environment and from the test environment to the production environment.
III.
Eliminate access by developers to the production environment.

NO.163 Which of the following does not represent a difficulty in using red flags as fraud indicators?

NO.164 The chief audit executive of a medium-sized financial institution is evaluating the staffing model of the internal audit activity (IAA). According to IIA guidance, which of the following are the most appropriate strategies to maximize the value of the current IAA resources?
* The annual audit plan should include audits that are consistent with the skills of the IAA.
* Audits of high-risk areas of the organization should be conducted by internal audit staff.
* External resources may be hired to provide subject-matter expertise but should be supervised.
* Auditors should develop their skills by being assigned to complex audits for learning opportunities.

NO.165 According to the Standards, which of the following should be the basis for scheduling follow-up of engagement recommendations?

NO.166 An organization has developed a large database that tracks employees, employee benefits, payroll deductions, job classifications, and other similar information. The internal auditor reviews the retirement benefits plan and determines that the pension and medical benefits have been changed several times in the past ten years. The auditor wishes to determine whether there is justification to perform further audit investigation. The most appropriate audit procedure would be to:

NO.167 An auditor plans to analyze customer satisfaction, including: (1) customer complaints recorded by the customer service department during the last three months; (2) merchandise returned in the last three months; and (3) responses to a survey of customers who made purchases in the last three months. Which of the following statements regarding this audit approach is correct?

NO.168 Management has asked the internal audit activity to perform an operational audit of a division that recently reported an increase in expenditures in addition to a decrease in profits. However, existing internal audit resources are currently engaged in a legal compliance audit. Which factor would be considered least important in deciding whether resources should be removed from the legal compliance audit to the operational audit?

NO.169 Which role is not considered a change agent when an organization wants to implement structural changes?

NO.170 Which of the following is the primary reason the chief audit executive should consider the organization’s strategic plans when developing the annual audit plan?

NO.171 An audit of customer accounts receivable found that outstanding receivables as a percentage of revenue had increased significantly during the past two years. The increase was attributed to the extension of credit, at the urging of the marketing department, to a number of companies that were not credit worthy. Which of the following would be least useful in monitoring the disposition of this finding?

NO.172 Which of the following audit steps would be most effective to review proper recording of and accountability over physical assets?
I. Physically inspect all assets on the organization’s property.
II. Select a sample department and physically inspect assets in the department.
III. Select a sample from the organization’s records of physical assets and physically locate each asset.
IV. Identify assets at a sample of locations and trace to the organization’s records.

NO.173 A large retail organization, which sells most of its products online, experiences a computer hacking incident. The chief IT officer immediately investigates the incident and concludes that the attempt was not successful. The chief audit executive (CAE) learns of the attack in a casual conversation with an IT auditor. Which of the following actions should the CAE take?
1.Meet with the chief IT officer to discuss the report and control improvements that will be implemented as a result of the security breach, if any.
2.Immediately inform the chair of the audit committee of the security breach, because thus far only the chief IT officer is aware of the incident.
3.Meet with the IT auditor to develop an appropriate audit program to review the organization’s Internet-based sales process and key controls.
4.Include the incident in the next quarterly report to the audit committee.

NO.174 A chief audit executive is preparing interview questions for the upcoming recruitment of a senior internal auditor. According to IIA guidance, which of the following attributes shows a candidate’s ability to probe further when reviewing incidents that have the appearance of misbehavior?

NO.175 Which of the following would be the most effective method to prevent installation of new equipment that does not meet environmental permit requirements, or to prevent modification of current processes in such a way that they no longer meet permit requirements?

NO.176 After issuance of the engagement final communication for an audit of an organization’s accounts payable function, which of the following should be sent satisfaction surveys?
I. Manager of disbursements.
II. Controller.
III. Chief operating officer.
IV.
Audit committee members.

NO.177 An auditor is performing a review of a complex process to identify opportunities to increase efficiency. What is the most practical way to document the process to identify areas of inefficiency?

NO.178 An internal auditor provided the following statement about division A’s performance during the month:
“Because supplies of raw material X were scarce, division A’s profits declined by 15 percent.” Which of the following can be validly concluded from the auditor’s statement?
I. Division A’s production level declined by 15 percent.
II. Division A could have sold more products than it produced.
III. Division A usually sells all of the products that it produces.