Free IIA-CIA-Part2 Practice Test Questions 2026

When determining the level of staff and resources to be dedicated to an assurance engagement, which of the following would be the most relevant to the chief audit executive?

A. The overall adequacy of the internal audit activity's resources

B. The availability of guest auditors for the engagement

C. The number of internal auditors used for the previous review of the same area.

D. The available resources with the specific skill set required

During the planning phase of an assurance engagement, an internal auditor seeks to gam an understanding of now when the area under review is accomplishing its objectives When of the Following information-gathering techniques is the auditor most likely to use?

A. A review of the key performance indicators of me area under review.

B. A walkthrough of the key processes of the area under review.

C. An interview with the manager regarding the area's business plan.

D. A review of previous audit and follow- up results of the area under review

How should an internal auditor approach preparing a detailed risk assessment during engagement planning?

A. Complete the risk assessment independently to prevent conflicts of interest with the function being reviewed.

B. Work with external auditors to ensure that the risk assessment includes items reflected on the independent auditor's report.

C. Work with management of the function being reviewed, as management would be most familiar with the business objectives and related risks.

D. Consult with the compliance department, which typically has a more comprehensive view of the organization.

Which of the following internal audit activity staffing models has the disadvantage that auditors are always new and in training?

A. Career model.

B. Center of competence model.

C. Rotational model.

D. Hybrid model.

An internal auditor is conducting a preliminary survey of the investments area, and sends an internal control questionnaire to the management of the function. (An extract of the survey is provided below).

1. Are there any restrictions for any company's investments?

2. Are there any written policies and procedures that document the flow of investment processing?

3. Are investment purchases recorded in the general ledger on the date traded?

4. Is the documentation easily accessible to an persons who need in to perform their job? Which of the following is a drawback of testing methods like this?

A. They ore kitted as they do not allow the auditor to test many controls.

B. They do not highlight control gaps

C. They are not useful for identifying areas on which the auditor should locus.

D. They are limited as there is a risk that management may not answer fairly.

Which of the following is an example of a compliance assurance engagement?

A. Providing in-house training to senior management regarding applicable laws and regulations.

B. Providing an assessment of the design adequacy of controls related to consumer privacy and confidentiality.

C. Providing an assessment of customer satisfaction with customer service provided by the organization.

D. Providing testing on the operating effectiveness of controls over the reliability of financial reporting.

A chief audit executive (CAE) determined that management chose to accept a high-level risk that may be unacceptable lo the organization. Which is the best course of action for the CAE to Follow?

A. Include using in a subsequent audit to determine if the risks are still present

B. Discuss the matter with senior management and it not reserved with the board

C. Require that management implement controls to mitigate lie risks

D. Report the risks to the process owners so that they can modify their process

The head of customer service asked the chief audit executive (CAE) whether internal auditors could assist her staff with conducting a risk self-assessment in the customer service department The CAE promised to meet with customer service managers analyze relevant business processes and come up with a proposal Who is most likely to be the final approver of the engagement objectives and scope?

A. Senior management of the organization

B. The chief audit executive

C. The head of customer service

D. The board of directors

An internal auditor wants to determine if employees spend more than their approved daily stipend for meals. Which technique would be most appropriate to identify meal expenses that exceed the approved threshold?

A. Using compliance verification data analytics

B. Using regression analysis

C. Using software with a gap testing function

D. Drafting a flowchart of the meal expense reporting process

Which of the following would be most useful for an internal auditor to obtain during the preliminary survey of an engagement on internal controls over user access management?

A. The policy for granting, modifying, and deleting user access to ensure processing requirements are clearly articulated.

B. A sample of change request forms to verify whether the forms bear the required approval for the user access change.

C. User access reports that were reviewed by management to ensure that access rights are appropriate for employee roles.

D. A current listing of system users and an employee listing to determine whether system users are active employees of the organization.

What information would be most useful to an internal auditor who is attempting to identify specific processes to include in the scope of an assurance engagement?

A. Recent organizationwide recognition awards given to employees within the area.

B. The timing of the most recent audit of the area.

C. Management's presentation to the board regarding recent area achievements.

D. Recent area performance indicators against productivity metrics.

Which of the following offers the best explanation of why the auditor in charge would assign a junior auditor to complete a complex part of the audit engagement?

A. The senior auditors are unavailable, as they are currently working on other portions of the engagement.

B. The auditor in charge believes that the junior auditor should obtain a specific type of experience.

C. The audit engagement has a tight deadline and the work must be completed timely.

D. The auditor in charge is unable to identify audit staff with all of the required skills needed to complete the engagement.