IIA IIA-CIA-Part2 Quiz 30 Topic 5 Questions 146-150

Question: 1

The scope of a business process review primarily involves:

AAppraising the environment and comparing against established criteria.

BAssessing the organization's system of internal controls.

CReviewing routine financial information and assessing the appropriateness of various accounting treatments.

DEvaluating organizational and departmental structures, including assessments of transaction flows.

Show Answer

Question: 2

An audit identified a number of weaknesses in the configuration of a critical client/server system. Although some of the weaknesses were corrected prior to the issuance of the audit report, correction of the rest will require between six and 18 months for completion. Consequently, management has developed a detailed action plan, with anticipated completion dates, for addressing the weaknesses. Which of the following is the most appropriate course of action for the chief audit executive to take?

AAssess the adequacy of the action plan and monitor key dates and deliverables.

BSchedule a follow-up audit engagement to assess the status of corrective action.

CReassign information systems auditors to assist the information technology department in correcting the weaknesses.

DEvaluate statistics related to unplanned system outages, unauthorized access attempts, and denials of service to assess the effectiveness of corrections.

Show Answer

Question: 3

As part of an operational audit, an auditor compared records of current inventory with usage during the prior two-year period and determined that the spare parts inventory was excessive. What step should the auditor perform first?

ADetermine the effects of a stock-out on the organization's profitability.

BDetermine whether a clear policy exists for setting inventory limits.

CDetermine who approved the purchase orders for the spare parts.

DDetermine whether purchases were properly recorded.

Show Answer

Question: 4

During a systems development audit, software developers indicated that all programs were moved from the development environment to the production environment and then tested in the production environment. What should the auditor recommend?

1. Implement a test environment to ensure that testing is not performed in the production environment.

2. Require developers to move modified programs from the development environment to the test environment and from the test environment to the production environment.

3. Eliminate access by developers to the production environment.

AI only

BIII only

CI and II only

DI and III only

Show Answer

Question: 5

A post-audit questionnaire sent to audit clients is an effective mechanism for:

ASubstantiating audit observations.

BPromoting the internal audit activity.

CImproving future audit engagements.

DValidating process flow.

Show Answer

IIA IIA-CIA-Part2 Quiz:30 Topic:5 Questions:146-150