IIA IIA-ACCA Exam
ACCA CIA Challenge Exam (Page 22 )

Updated On: 12-Feb-2026

According to the COSO internal control framework, which of the following best describes the use of continuous auditing programs by the internal audit activity?

  1. Control environment.
  2. Control activities.
  3. Risk assessment.
  4. Monitoring.

Answer(s): D



Which of the following is most likely to be considered a control weakness?

  1. Vendor invoice payment requests are accompanied by a purchase order and receiving report.
  2. Purchase orders are typed by the purchasing department using prenumbered forms.
  3. Buyers promptly update the official vendor listing as new supplier sources become known.
  4. Department managers initiate purchase requests that must be approved by the plant superintendent.

Answer(s): C



What is the purpose of a secondary control?

  1. It replaces primary controls that are either ineffective or cannot fully mitigate a risk.
  2. It partially reduces the residual risk level when a key control does not operate effectively.
  3. lt combines with other controls to help reduce significant risk exposures to an acceptable level.
  4. It helps to ensure the completeness and accuracy of automated controls in a system environment.

Answer(s): C



An internal auditor who is carrying out an engagement to review controls related to corporate tax reporting must possess which of the following competencies?
1. Proficiency in analyzing key IT risks and controls.
2. The ability to recognize significant deviations from good business practices.
3. Knowledge of key indicators of fraud in tax reporting.
4. The ability to recognize the existence of problems related to tax accounting.

  1. 1 and 4 only.
  2. 3 and 4 only.
  3. 2, 3, and 4 only.
  4. 1,2, 3, and 4.

Answer(s): B



According to IIA guidance, which of the following statements is true regarding the reporting of results from an external quality assessment of the internal audit activity?

  1. The external assessment results are reported upon completion in confidence directly to the board, and senior management is advised only of the recommendations and improvement action plans.
  2. The results of self-assessments with independent external validation are shared with the board upon completion, and monitoring of recommended improvements must be reported monthly.
  3. The external assessment results are communicated upon completion to senior management and the board, but action plans for recommended improvements do not have to be reported.
  4. The requirements for reporting quality assessment results are the same for external assessments and self-assessments with independent external validation.

Answer(s): B






Post your Comments and Discuss IIA IIA-ACCA exam prep with other Community members:

Join the IIA-ACCA Discussion