IIA IIA-CIA-Part3 - Certified Internal Auditor - Part 3, Business Analysis and Information Technology Exam
Page: 2 / 129
Total 642 questions
Question #6 (Topic: Single Topic)
The first stage in the development of a crisis management program is to:
A. Formulate contingency plans.
B. Conduct a risk analysis.
C. Create a crisis management team.
D. Practice the response to a crisis.
Answer: C
Question #7 (Topic: Single Topic)
When developing an effective risk-based plan to determine audit priorities, an internal audit activity should start by:
A. Identifying risks to the organization's operations.
B. Observing and analyzing controls.
C. Prioritizing known risks.
D. Reviewing organizational objectives.
Answer: D
Question #8 (Topic: Single Topic)
The decision to implement enhanced failure detection and back-up systems to improve data integrity is an example of which risk response?
A. Risk acceptance.
B. Risk sharing.
C. Risk avoidance.
D. Risk reduction.
Answer: D
Question #9 (Topic: Single Topic)
Which of the following activities most significantly increases the risk that a bank will make poor-quality loans to its customers?
A. Borrowers may not sign all required mortgage loan documentation.
B. Fees paid by the borrower at the time of the loan may not be deposited in a timely manner.
C. The bank's loan documentation may not meet the government's disclosure requirements.
D. Loan officers may override the lending criteria established by senior management.
Answer: D
Question #10 (Topic: Single Topic)
The main reason to establish internal controls in an organization is to:
A. Encourage compliance with policies and procedures.
B. Safeguard the resources of the organization.
C. Ensure the accuracy, reliability, and timeliness of information.
D. Provide reasonable assurance on the achievement of objectives.
Answer: D
