support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. IIA
  4. IIA-CIA-Part2

Free IIA-CIA-Part2 Exam Braindumps
Certified Internal Auditor - Part 2, Practice of Internal Auditing Questions 141–145 (page: 30)

Updated On: 10-Feb-2026
Page 30 of 103
PDF with 956 Questions

Which of the following would not be an appropriate step for an internal auditor to perform during an assessment of compliance with an organization's privacy policy?

  1. Determine who can access databases containing confidential information.
  2. Evaluate the organization's privacy policy to determine if appropriate information is covered.
  3. Analyze access to permanent files and reports containing confidential information.
  4. Evaluate the government's security measures related to confidential information received from the organization.

Answer(s): D



An internal auditor for a financial institution has just completed an audit of loan processing. Of the 81 loans approved by the loan committee, the auditor found seven loans which exceeded the approved amount. Which of the following actions would be inappropriate on the part of the auditor?

  1. Examine the seven loans to determine if there is a pattern. Summarize amounts and include in the engagement final communication.
  2. Report the amounts to the loan committee and leave it up to them to correct. Take no further follow-up action at this time and do not include the items in the engagement final communication.
  3. Follow up with the appropriate vice president and include the vice president's acknowledgment of the situation in the engagement final communication.
  4. Determine the amount of the differences and make an assessment as to whether the dollar differences are material. If the amounts are not material, not in violation of government regulations, and can be rationally explained, omit the observation from the engagement final communication.

Answer(s): B



During a systems development audit, software developers indicated that all programs were moved
from the development environment to the production environment and then tested in the production environment. What should the auditor recommend?

  1. Implement a test environment to ensure that testing is not performed in the production environment.
    II. Require developers to move modified programs from the development environment to the test environment and from the test environment to the production environment.
    III. Eliminate access by developers to the production environment.
  2. I only
  3. III only
  4. I and II only
  5. I and III only

Answer(s): D



A post-audit questionnaire sent to audit clients is an effective mechanism for:

  1. Substantiating audit observations.
  2. Promoting the internal audit activity.
  3. Improving future audit engagements.
  4. Validating process flow.

Answer(s): C



As part of an operational audit, an auditor compared records of current inventory with usage during the prior two-year period and determined that the spare parts inventory was excessive.
What step should the auditor perform first?

  1. Determine the effects of a stock-out on the organization's profitability.
  2. Determine whether a clear policy exists for setting inventory limits.
  3. Determine who approved the purchase orders for the spare parts.
  4. Determine whether purchases were properly recorded.

Answer(s): B



  PDF
Viewing page 30 of 103
Viewing questions 146 - 150 out of 956 questions


Post your Comments and Discuss IIA IIA-CIA-Part2 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!