IIA IIA-ACCA Quiz 1 Topic 8 Questions 1-5

Question: 1

Which of the following is an example of a smart device security control intended to prevent unauthorized users from gaining access to a device's data or applications?

AAnti-malware software.

BAuthentication.

CSpyware.

DRooting.

Show Answer

Question: 2

Which of the following factors should be considered when determining the appropriate combination of manual techniques and computer-assisted audit techniques (CAATs) to be used during an audit?

1. Acceptance of CAATs findings by entity management.

2. Computer knowledge and expertise of the auditor.

3. Time constraints.

4. Level of audit risk.

A1 and 4

B2 and 3 only

C1, 2, and 3

D2, 3, and 4

Show Answer

Question: 3

According to IIA guidance, which of the following describes the primary reason to implement environmental and social safeguards within an organization?

ATo enable Triple Bottom Line reporting capability.

BTo facilitate the conduct of risk assessment.

CTo achieve and maintain sustainable development.

DTo fulfill regulatory and compliance requirements.

Show Answer

Question: 4

When auditing the award of a major contract, which of the following should an internal auditor suspect as a red flag for a bidding fraud scheme?

1. Subsequent change orders increase requirements for low-bid items.

2. Material contract requirements are different on the actual contract than on the request for bids.

3. A high percentage of employees are charged to indirect accounts.

4. Losing bidders are hired as subcontractors.

A1 only

B2 only

C1 and 3.

D2 and 4.

Show Answer

Question: 5

When setting the scope for the identification and assessment of key risks and controls in a process, which of the following would be the least appropriate approach?

ADevelop the scope of the audit based on a bottom-up perspective to ensure that all business objectives are considered.

BDevelop the scope of the audit to include controls that are necessary to manage risk associated with a critical business objective.

CSpecify that the auditors need to assess only key controls, but may include an assessment of non-key controls if there is value to the business in providing such assurance.

DEnsure the audit includes an assessment of manual and automated controls to determine whether business risks are effectively managed.

Show Answer

IIA IIA-ACCA Quiz:1 Topic:8 Questions:1-5