IIA CIA Exam Questions
Certified Internal Auditor Exam (Page 51 )

Updated On: 8-Mar-2026

Which of the following is not an appropriate role for internal auditors after a disaster occurs?

  1. Monitor the effectiveness of the recovery and control of operations.
  2. Correct deficiencies of the entity's business continuity plan.
  3. Recommend future improvements to the entity's business continuity plan.
  4. Assist in the identification of lessons learned from the disaster and the recovery operations.

Answer(s): B



Which component is the foundation of the COSO internal control framework?

  1. Risk assessment.
  2. Control environment.
  3. Control activities.
  4. Monitoring.

Answer(s): B



Which of the following best describes the underlying premise of the COSO enterprise risk management framework?

  1. Management should set objectives before assessing risk.
  2. Every entity exists to provide value for its stakeholders.
  3. Policies are established to ensure that risk responses are performed effectively.
  4. Enterprise risk management can minimize the impact and likelihood of unanticipated events.

Answer(s): B



Which of the following is an example of sharing risk?

  1. An organization redesigned a business process to change the risk pattern.
  2. An organization outsourced a portion of its services to a third-party service provider.
  3. An organization sold an unprofitable business unit to its competitor.
  4. In order to spread total risk, an organization used multiple vendors for critical materials.

Answer(s): B



A records management system is an example of what type of control?

  1. Preventive.
  2. Detective.
  3. Corrective.
  4. Directive.

Answer(s): A



Viewing page 51 of 342
Viewing questions 251 - 255 out of 1702 questions



Post your Comments and Discuss IIA CIA exam dumps with other Community members:

CIA Exam Discussions & Posts

AI Tutor