IIA IIA-CRMA Exam Dumps

Certification in Risk Management Assurance (CRMA) Exam

IIA IIA-CRMA Sample Questions

Question # 1

Which of the following enhances the independence of the internal audit activity? 

A. The chief audit executive (CAE) approves the annual internal audit plan.
B. The CAE administratively reports to the board.
C. The audit committee approves the CAE's annual salary increase.
D. The chief executive officer approves the internal audit charter.

Answer: C

Show Answer

Question # 2

An internal auditor completed an audit of a bank's loan department and found all significant risks to be managed adequately through effective internal controls. Which of the following would be an appropriate conclusion to report to management?

A. The residual risk is lower than or equal to the risk appetite. 
B. The residual risk is higher than or equal to the risk appetite. 
C. The inherent risk is lower than or equal to the risk tolerance. 
D. The inherent risk is higher than or equal to the risk tolerance. 

Answer: A

Show Answer

Question # 3

According to the COSO internal control framework, which of the following best describes the use of continuous auditing programs by the internal audit activity?

A. Control environment.
B. Control activities.
C. Risk assessment.
D. Monitoring.

Answer: D

Show Answer

Question # 4

During an audit, the client questions the internal audit activity's authority to perform procedures over fraud allegations. According to HA guidance, which of the following would provide the most relevant support to respond to the client's concerns?

A. Definition of Internal Auditing.
B. MA Standards.
C. Internal audit charter.
D. The IIA's Code of Ethics

Answer: C

Show Answer

Question # 5

A new director was hired to lead the internal audit activity at a small start-up company. Which of the following assignments would impair the director's independence? 

A. Preparing the financial statements for the company's defined contribution plan.
B. Performing a pre-implementation review of the company's payroll application.
C. Providing the COBIT framework as a possible IT management tool.
D. Reviewing the company's policy for foreign currency translation adjustments for compliance with accounting standards.

Answer: A

Show Answer

Question # 6

What is the primary benefit to the internal audit activity for undertaking an internal quality assessment?

A. To help the internal audit activity complete its annual assurance plan.
B. To identify inefficiencies within the internal audit team.
C. To help improve the overall quality of the internal audit activity's work.
D. To identify key risks and areas of concern within the organization.

Answer: C

Show Answer

Question # 7

In the area of business acumen, which of the following competencies would be the sole responsibility of an internal audit staff member?

A. Maintaining industry-specific knowledge appropriate to the organization.
B. Assessing how IT contributes to organization objectives, risks, and relevance to audit.
C. Maintaining technical aspects of accounting standards and reporting processes.
D. Understanding regulatory and legal framework and assessing its relevance.

Answer: D

Show Answer

Question # 8

To fill a critical vacancy, an internal auditor is assigned temporarily to a nonaudit role in the purchasing department, where she worked previously before joining the internal audit activity. According to IIA guidance, which of the following statements is true regarding these circumstances?

A. The chief audit executive (CAE) should review all work performed by the auditor during her temporary assignment to ensure no impairments.
B. The CAE may conduct audits in the purchasing department during the auditor's temporary assignment.
C. The auditor should obtain the CAE's approval as to the nature and scope of the duties she is permitted to perform during her temporary assignment.
D. Any work performed by the auditor during her temporary assignment must conform to the internal audit charter.

Answer: C

Show Answer

Question # 9

Which of the following are components of the ISO 31000 risk management process?1. Setting the context.2. Risk treatment.3. Risk avoidance.4. Communication.

A. 1 and 2 only.
B. 2 and 3.
C. 3 and 4.
D. 1,2, and 4.

Answer: A

Show Answer

Question # 10

A chief audit executive (CAE) is reviewing the internal audit activity's performance and is concerned that the average number of revisions to findings is steadily rising, making it increasingly difficult to trace the finding to the supporting evidence and workpapers. According to MA guidance, which of the following elements of the internal audit activity's quality assurance and improvement program would provide the CAE with the most helpful insight into the cause of this problem?

A. The overall effectiveness of the internal audit activity's periodic self assessments.
B. The type of audit productivity and performance statistics reported.
C. The adequacy of the day-to-day supervision and review process.
D. The scope and frequency of external assessments.

Answer: C

Show Answer

Question # 11

According to IIA guidance, which of the following statements describes one of the similarities between assurance and consulting services?

A. When planning assurance and consulting engagements, internal auditors must consider the strategies and objectives of the activity being reviewed.
B. Internal auditors determine the engagement objectives, scope, and work program for both assurance and consulting services.
C. Internal auditors must not provide assurance or consulting services for an activity for which they had responsibility within the previous year.
D. Both assurance and consulting services generally involve the internal auditor, the area under review, senior management, and the board.

Answer: A

Show Answer

Question # 12

Which of the following best describes the details that must be included in the quality assurance and improvement program (QAIP) report to senior management and the board?

A. The scope and frequency of internal and external assessments as well as the qualifications and independence of the assessor.
B. The scope and cost of the QAIP. frequency of internal and external assessments, and conclusions of the assessor.
C. The scope, findings, risks, recommendations, and agreed-upon improvement actions.
D. The number and types of people involved in the assessment, costs, and duration of the QAIP

Answer: C

Show Answer

Question # 13

An internal auditor in a small broadcasting organization was assigned to review the revenue collection process. The auditor discovered that some checks from three customers were never recorded in the organization's financial records. Which of the following documents would be the least useful for the auditor to verify the finding?

A. Bank statements.
B. Customer confirmation letters.
C. Copies of sales invoices.
D. Copies of deposit slips.

Answer: D

Show Answer

Question # 14

According to the HA Code of Ethics, which of the following statements best describes the principle of competency? 

A. Internal auditors shall perform their work with honesty, diligence, and responsibility.
B. Internal auditors shall perform their work in accordance with the Standards.
C. Internal auditors shall perform their work in accordance with the law and make disclosures expected by the law.
D. Internal auditors shall be prudent in the use of information acquired while performing their work.

Answer: B

Show Answer