Free IIA-CIA-Part2 Practice Test Questions 2026

Explanation:

This question tests the purpose of an exit conference in an internal audit engagement. Exit conferences are conducted to discuss observations, validate facts, obtain management responses, and communicate important matters before issuing the final report. They help improve report accuracy and ensure management understands significant issues requiring attention.

🟢 Correct Option:

A. A primary purpose of the exit conference is to provide for the timely communication of observations that call for immediate management action.
Exit conferences allow auditors and management to discuss significant findings before the final report is issued. Communicating observations that require prompt action helps reduce risk exposure and allows management to begin corrective measures early. This process also provides an opportunity to clarify facts, resolve misunderstandings, and improve the quality of final engagement communication.

🔴 Incorrect options:

B. Both the chief audit executive and the chief executive over the activity or function reviewed must attend the exit conference to validate the findings.
IIA guidance does not require mandatory attendance by specific executives. Attendance depends on the engagement circumstances and organizational practices.

C. The exit conference provides only anticipated results for inclusion in the final audit communication.
Exit conferences involve discussion of findings, observations, and management responses rather than only presenting expected final report content.

D. During the exit conference, the performance of the internal auditors who executed the engagement is reviewed.
The purpose of an exit conference is to discuss engagement results and related issues, not to evaluate the auditors' performance.

🔧 Reference:
⇒ IIA Standards – Communicating Results
Confirms the purpose of communicating significant observations and engagement results.

⇒ IIA Practice Guide – Audit Reporting and Communication
Confirms that discussions with management support timely communication and validation of findings.

Explanation:

This question tests what an internal auditor should consider first when setting engagement objectives for a newly acquired subsidiary. The most important input is the business context: what the organization is trying to achieve, what risks exist, how controls are designed, and what stakeholders expect from the assurance work. Those factors directly shape relevant, risk-based audit objectives.

✔️ Correct Option:

C. Organizational strategy, objectives, risks, control framework, and the expectations of stakeholders regarding the audit
These are the core items that should drive engagement objectives. In a newly acquired subsidiary, the auditor must understand how the subsidiary fits into the parent organization’s strategy, what risks are most significant, what control environment exists, and what the board or management expects from the engagement. This ensures the audit objectives are aligned with business needs and risk priorities.

❌ Incorrect options:

A. Previous performance of the subsidiary specifically its financial results over the last three years and the outcome of external audit reviews
Historical financial results and external audit outcomes may be useful background, but they do not define the engagement objectives. They are narrower than the broader strategic, risk, and control considerations that should drive planning.

B. The results of previous internal audits of the subsidiary the recommendations provided and whether the recommended actions have been implemented
Prior internal audit work can help the auditor understand recurring issues, but it is still only one part of planning. Engagement objectives should be based on current risks, strategy, controls, and stakeholder expectations, not only past audit results.

D. The qualifications and competencies of the subsidiary's management team and their understanding of risk and control
Management capability matters, but it is not the most important basis for defining engagement objectives. The audit should be planned around the organization’s risks and control environment, while management competence is only one factor within that assessment.

🔧 Reference:
→ The IIA — Engagement Planning: Establishing Objectives and Scope — confirms that engagement planning should consider strategy, objectives, risks, and stakeholder expectations.

→ The IIA — Establishing Objectives and Scope — supports using contextual and risk-based factors to form engagement objectives.

Explanation:

This question tests your ability to distinguish between types of audit evidence and select an appropriate procedure that satisfies specific constraints. The question explicitly asks for sufficient, indirect evidence to confirm the existence of the asset.

✅ Correct Option:

A. Review logs of the vehicles assigned to employees for the delivery of goods during the engagement period.
Reviewing third-party or operationally independent documentation—such as vehicle assignment logs, trip sheets, fuel cards, or maintenance records—provides excellent indirect evidence of existence. If a vehicle is consistently racking up mileage, consuming fuel, and being checked out by employees to deliver goods during the audit period, it proves the vehicle exists and is operational, without requiring the auditor to physically see it.

❌ Incorrect options:

B. Visit the home address of the specific employee to see the selected vehicle.
Physically inspecting the vehicle at an employee's home provides direct evidence of existence, not indirect evidence. Additionally, this approach is operationally inefficient, costly, and raises potential privacy or safety concerns, making it an inappropriate response under the question's constraints.

C. Compare the registered details of the vehicle in the fixed asset register to a datestamped photograph of the vehicle.
A photograph can be easily manipulated, misdated, or taken from a different asset altogether. It does not provide reliable or sufficient evidence to verify current existence, as the photo does not independently prove the vehicle is still in the company's possession or exists at the time of the audit.

D. Seek independent confirmation of the vehicle's details from one of the delivery employees.
Inquiring with a delivery employee provides oral evidence, which is considered weak when used in isolation for existence testing. Furthermore, an employee within the same operational line is not considered a truly "independent" third party, making their verbal confirmation insufficient to prove the physical existence of the asset.

🔧 Reference:
→ The IIA Performance Standard 2310 (Identifying Information) requires auditors to identify sufficient, reliable, relevant, and useful information. Analytical and documentary trails (like usage logs) serve as valid indirect evidence when direct physical inspection is unfeasible.

Explanation:

This question tests the reliability and strength of audit evidence used to verify the existence of inventory. Evidence obtained directly by the auditor is generally more reliable than evidence obtained indirectly from others. Physical observation provides stronger support for confirming that inventory recorded in accounting records actually exists.

🟢 Correct Option:

A. The auditor performs an observation.
Direct observation by the auditor provides strong evidence of inventory existence because the auditor personally verifies that the product is physically present. Evidence obtained directly by the auditor is generally considered more reliable than representations from employees or external parties. Physical observation supports the conclusion that the inventory recorded in accounting records actually exists at the time of testing.

🔴 Incorrect options:

B. The vendor provides third-party confirmation.
Third-party confirmation can provide reliable information but usually confirms transactions, ownership, or balances rather than directly proving that inventory currently exists within the organization.

C. The auditor documents interviews with multiple warehouse personnel.
Employee interviews provide testimonial evidence, which is generally less reliable than physical evidence because it depends on individual statements and recollections.

D. Warehouse management submits photographs of the product on the inventory shelf.
Photographs provide supporting information but are less reliable than direct observation because images may be outdated, incomplete, or manipulated.

🔧 Reference:
⇒ Global Internal Audit Standards – Engagement Evidence
Confirms that auditors should obtain sufficient, reliable, and relevant evidence.

⇒ IIA Practice Guide – Audit Evidence
Confirms that evidence obtained directly by auditors is generally more reliable than indirect evidence.