Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. IIA
  5. IIA-CRMA

IIA IIA-CRMA Exam
Certification in Risk Management Assurance (CRMA) Exam (Page 7 )

Updated On: 9-Feb-2026
Page 7 of 58
PDF with 283 Questions

Suspecting fraud, the chief financial officer (CFO) asked the internal audit activity to investigate a significant increase in travel related expenditures. Work was performed by a qualified internal auditor. Following the completion of the engagement, the chief audit executive (CAE) reported to the CFO that no violations were found and no fraud had occurred.
According to the Standards, which of the following principles did the CAE violate?

  1. Due professional care.
  2. Individual objectivity.
  3. Proficiency.
  4. Organizational independence.

Answer(s): A



A new chief audit executive (CAE) of a large internal audit activity (IAA) is dissatisfied with the current amount and quality of training being provided to the staff and wishes to implement improvements. According to IIA guidance, which of the following actions would best help the CAE reach this objective?

  1. Require that all staff obtain a minimum of two relevant audit certifications.
  2. Perform a gap analysis of the IAA's existing knowledge, skills and competencies.
  3. Engage a consultant to benchmark the IAA's training program against its peers.
  4. Assign one experienced manager to better coordinate staff training and development activities.

Answer(s): B



According to IIA guidance, which of the following individuals would best be considered independent for the purpose of participating in an external assessment of the quality assurance and improvement program for an internal audit activity (IAA)?

  1. A former employee knowledgeable of the IAA who resigned three years earlier from the organization.
  2. Acompetentemployeeofanindependentexternalorganizationthatprovidesco-sourcingservices to the IAA.
  3. An employee in an affiliated organization who has never worked directly with the IAA.
  4. An employee in the parent organization who has not had any previous contact with the IAA.

Answer(s): A



The results of an internal audit activity's (IAA) quality assurance and improvement program are favorable and an external assessment was completed within the last five years. Which of the following statements may the IAA use to describe its work?

  1. "Completed with the advance certification of the External Assessors Association for Auditing Review."
  2. "Conforms with the International Standards for the Professional Practice of Internal Auditing."
  3. "Certified 100% accuracy, per the International Standards of External Assessment."
  4. "Compliant with all domestic and international legal statutes, and certified quality assured for ten years."

Answer(s): B



Why are preventative controls generally preferred to detective controls?

  1. Because preventive controls promote doing the right thing in the first place, and lessen the need for corrective action.
  2. Because preventive controls are more sensitive and identify more exceptions than detective controls.
  3. Because preventive controls include output procedures, which cover the full range of possible reviews, reconciliations and analysis.
  4. Because preventive controls identify exceptions after-the-fact, allowing them to be used after the entire review is complete and therefore finding exceptions that detective controls may have missed.

Answer(s): A






Post your Comments and Discuss IIA IIA-CRMA exam prep with other Community members:

Join the IIA-CRMA Discussion