Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. IIA
  5. IIA-CRMA

IIA IIA-CRMA Exam
Certification in Risk Management Assurance (CRMA) Exam (Page 4 )

Updated On: 9-Feb-2026
Page 4 of 58
PDF with 283 Questions

Which of the following actions does not violate the IIA Code of Ethics or Standards?

  1. An internal auditor performing an audit on an operation that they managed less than a year ago.
  2. An internal auditor performing an audit on procedures that they were responsible for creating.
  3. An internal auditor disclosing details of an audit report to colleagues from a different organization.
  4. An internal auditor disclosing confidential information in response to a lawsuit.

Answer(s): D



Which of the following controls is not appropriate for sales in a manufacturing organization?

  1. Customers' orders are recorded promptly.
  2. Goods shipped are matched with valid customer orders.
  3. Goods returned are inspected for damage by the receiving department for proper disposition.
  4. Sales department approval is required for credit sales transactions.

Answer(s): D



A manufacturing organization discovers that the waste water released has failed to meet permitted limits. Which control function will be least effective in correcting the issue?

  1. Performing a chemical analysis of the water, prior to discharge, for components specified in the permit.
  2. Posting signs that tell employees which substances may be disposed of via sinks and floor drains within the facility.
  3. Diluting pollutants by flushing sinks and floor drains daily with large volumes of clean water.
  4. Establishing a preventive maintenance program for the pretreatment system.

Answer(s): C



A computer system automatically locks a user's account after three unsuccessful attempts to logon. Which type of control does this scenario represent?

  1. Corrective control.
  2. Preventive control.
  3. Detective control.
  4. Compensating control.

Answer(s): B



Why is it important for the chief audit executive to periodically review the audit charter and present the results to senior management and the board?

  1. Because management requires the review to measure effectiveness of the internal audit activity.
  2. So that the individual objectivity of the internal audit staff can be more clearly established.
  3. So that there is assurance of the internal audit staff's proficiency to complete audit activities.
  4. Because changes in the organization may impair the internal audit activity's ability to meet its objectives.

Answer(s): D






Post your Comments and Discuss IIA IIA-CRMA exam prep with other Community members:

Join the IIA-CRMA Discussion