Labour Day - Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dpm65

Note! The IIA-CRMA Exam is no longer available.

IIA-CRMA Certification in Risk Management Assurance (CRMA) Exam Questions and Answers

Questions 4

The chief audit executive (CAE) has been asked to manage the regulatory compliance function for the organization's retail store operations. Store operations are included in the annual audit plan.

Which of the following strategies best fulfills the requirements of the Standards regarding these audits?

Options:

A.

The scope of store operations audits should exclude compliance.

B.

Store operations audits can be fully executed with appropriate disclosure to the board.

C.

Store operations audits should be performed by an external service provider.

D.

A store operations compliance audit should be performed by a staff internal auditor under the direction of the CAE.

Buy Now
Questions 5

Which of the following is not an appropriate activity for internal auditors to perform?

Options:

A.

Recommend management seek a consulting firm to advise on outsourcing.

B.

Highlight matters that require management's attention.

C.

Implement solutions for specific organizational problems.

D.

Accumulate data, obtain varying views, and report information to senior management.

Buy Now
Questions 6

Which of the following would provide the best evidence of errors in the quantities of items received from suppliers?

Options:

A.

Suppliers' reports of over shipments.

B.

Warehouse receiving logs.

C.

Purchase requisitions and purchase orders.

D.

Observation and inspection of inventory.

Buy Now
Questions 7

Which of the following is a preventive control?

Options:

A.

Creating an audit trail.

B.

Placing controls on physical access to inventory.

C.

Reconciling purchase orders with approvals.

D.

Reviewing expense accounts for irregularities.

Buy Now
Questions 8

An internal auditor wants to sample data to test an audit theory in a cost-effective way. Which of the following sampling strategies should she use?

Options:

A.

Statistical sampling only

B.

Nonstatistical sampling only

C.

A combination of both statistical and nonstatistical sampling.

D.

Neither approach to testing the audit theory would be cost effective.

Buy Now
Questions 9

Which of the following factors have the greatest influence on the independence of the internal audit activity?

Options:

A.

Quality assessments and cultural biases of the internal audit activity.

B.

Rotational assignments and familiarity of the internal audit activity.

C.

Employee incentives and self review of the internal audit activity.

D.

Organizational positioning and scope control of the internal audit activity.

Buy Now
Questions 10

An internal audit team is performing an audit of workplace accident claims.

Which of the following actions by the audit team best demonstrates due professional care?

Options:

A.

Having an occupational health officer on the engagement team.

B.

Determining that the claims have been classified properly.

C.

Placing reliance on medical reports from the injured worker's doctor.

D.

Reviewing claims to ensure all accidents actually occurred in the workplace.

Buy Now
Questions 11

According to IIA guidance, the results of a formal quality assessment should be reported to which of the following groups?

Options:

A.

The audit committee and senior management.

B.

The audit committee and the external auditors.

C.

Senior management and management of the audited area.

D.

Senior management and the external auditors.

Buy Now
Questions 12

Which of the following is a common type of payroll fraud?

Options:

A.

Unauthorized overtime.

B.

Fictitious employees.

C.

Unearned bonuses or commissions.

D.

Skimming.

Buy Now
Questions 13

Which of the following best describes the misdirection of payments on accounts receivable to an employee's bank account?

Options:

A.

Fraud open on the books.

B.

Fraud hidden on the books.

C.

Fraud off the books.

D.

Fraud on the balance sheet.

Buy Now
Questions 14

Which the following activities should be performed by the internal audit activity to facilitate an effective relationship with the audit committee?

1. Periodically report about the accounting standards followed by the organization.

2. Provide assurance to the audit committee that its charter, activities, and processes are appropriate.

3. Ensure that the role and activities of the internal audit activity are clearly understood and responsive to the needs of the audit committee.

4. Maintain open and effective communications with the audit committee.

Options:

A.

1 and 2 only

B.

3 and 4 only

C.

1, 3, and 4 only

D.

2, 3, and 4 only

Buy Now
Questions 15

Which of the following decisions made during the testing phase of a compliance audit requires the most judgment by an internal auditor?

Options:

A.

Which sampling methodology to select for testing.

B.

Which fields to examine on each invoice.

C.

Whether an individual expenditure is allowable.

D.

What level of noncompliance is acceptable.

Buy Now
Questions 16

An internal audit manager of a furniture manufacturing organization is planning an audit of the procurement process for kiln-dried wood. The procurement department maintains six procurement officers to manage 24 different suppliers used by the organization.

Which of the following controls would best mitigate the risk of employees receiving kickbacks from suppliers?

Options:

A.

The periodic rotation of procurement officers' assignments to supplier accounts.

B.

A pre-award financial capacity analysis of suppliers.

C.

An automated computer report, organized by supplier, of any invoices for the same amount.

D.

Periodic inventories of kiln-dried wood at the organization's warehouse.

Buy Now
Questions 17

During the course of an audit, an internal auditor discovers that a valuable employee in the research department has been patenting new developments in the employee's name that are unrelated to the basic business of the organization.

The organization does not have a policy addressing this specific issue, but does have a general policy that all important new discoveries by employees are the property of the organization.

Division management views the employee's actions as extra incentive to retain the employee.

A decision to include the employee's action in the engagement final communication would be:

1. A violation of the IIA Code of Ethics.

2. A violation of the reporting requirements in the Standards.

3. Justified and necessary, according to the IIA Code of Ethics and Standards.

Options:

A.

1 only

B.

2 only

C.

3 only

D.

1 and 2 only

Buy Now
Questions 18

Which of the following risk management activities is most appropriate for an internal auditor to undertake?

Options:

A.

Impose risk management processes.

B.

Coordinate risk management activities.

C.

Implement risk responses on management's behalf.

D.

Review the management of key risks.

Buy Now
Questions 19

Which of the following audit procedures would provide the most relevant information to identify discrepancies between budgeted versus actual raw material consumption in a production facility?

Options:

A.

Analytical review.

B.

Inquiry.

C.

Document verification.

D.

Observation.

Buy Now
Questions 20

Management has asked the chief audit executive (CAE) to provide assurance on the organization's automated control system related to financial data. The current audit staff does not have the expertise needed to conduct this type of engagement. Which of the following would be the best response by the CAE?

Options:

A.

Accept the assignment and use control self-assessment to complete the project.

B.

Do not accept the assignment because the internal audit activity lacks the competency to perform the engagement with due professional care.

C.

Accept the assignment and use an external provider with the necessary knowledge and skills to perform the engagement.

D.

Accept the assignment if the engagement is included in the current audit plan, but inform senior management that the current audit staff does not have the knowledge and skills required.

Buy Now
Questions 21

Which of the following best demonstrates the authority of the internal audit activity?

Options:

A.

Suggesting alternatives to decision makers.

B.

Improving the integrity of information.

C.

Determining the scope of internal audit services.

D.

Achieving engagement objectives.

Buy Now
Questions 22

Which of the following is a weakness of observation as audit evidence?

Options:

A.

It cannot be used to test the completeness assertion.

B.

It cannot be used to test the existence assertion.

C.

It cannot be used to test the occurrence assertion.

D.

It cannot be relied upon because the evidence is not persuasive.

Buy Now
Questions 23

Which of the following options is the most cost-effective and efficient way for internal auditors to keep current with the latest developments in the internal audit profession?

Options:

A.

Attending annual professional conferences and seminars.

B.

Participating in on-the-job training in various departments of the organization.

C.

Pursuing as many professional certifications as possible.

D.

Maintaining membership in The HA and similar professional organizations and subscribing to relevant email updates or news feeds.

Buy Now
Questions 24

According to IIA guidance, which of the following roles would be appropriate for an internal auditor regarding fraud risk?

1. Identification.

2. Mitigation.

3. Remediation.

4. Reduction.

Options:

A.

1 only. |

B.

1 and 4 only.

C.

1, 3, and 4 only.

D.

1,2, 3, and 4.

Buy Now
Questions 25

Suspecting fraud, the chief financial officer (CFO) asked the internal audit activity to investigate a significant increase in travel related expenditures. Work was performed by a qualified internal auditor. Following the completion of the engagement, the chief audit executive (CAE) reported to the CFO that no violations were found and no fraud had occurred.

According to the Standards, which of the following principles did the CAE violate?

Options:

A.

Due professional care.

B.

Individual objectivity.

C.

Proficiency.

D.

Organizational independence.

Buy Now
Questions 26

Which of the following actions should an internal auditor take to exercise due professional care?

1. Consider the probability of significant noncompliance in each audit engagement.

2. Weigh the cost of assurance against the benefits.

3. Perform assurance procedures with sufficient care to ensure that all risks are identified.

Options:

A.

1 and 2 only

B.

1 and 3 only

C.

2 and 3 only

D.

1, 2, and 3

Buy Now
Questions 27

Which of the following controls is not appropriate for sales in a manufacturing organization?

Options:

A.

Customers' orders are recorded promptly.

B.

Goods shipped are matched with valid customer orders.

C.

Goods returned are inspected for damage by the receiving department for proper disposition.

D.

Sales department approval is required for credit sales transactions.

Buy Now
Questions 28

An auditor in charge was reviewing the workpapers submitted by a newly hired internal auditor. She noted that the new auditor's analytical work did not include any rating or quantification of the risk assessment results, and she returned the workpapers for correction. Which section of the workpapers will the new auditor need to modify?

Options:

A.

Condition section.

B.

Criteria section.

C.

Effect section.

D.

Cause section.

Buy Now
Questions 29

According to IIA guidance, which of the following practices by the chief audit executive (CAE) best enhances the organizational independence of the internal audit activity?

Options:

A.

CAE reviews and approves the annual audit plan.

B.

CAE meets privately with The CEO at least annually.

C.

CAE meets privately with The board at least annually.

D.

CAE reports to the board regarding audit staff performance evaluation and compensation.

Buy Now
Questions 30

An internal auditor in a small broadcasting organization was assigned to review the revenue collection process. The auditor discovered that some checks from three customers were never recorded in the organization's financial records. Which of the following documents would be the least useful for the auditor to verify the finding?

Options:

A.

Bank statements.

B.

Customer confirmation letters.

C.

Copies of sales invoices.

D.

Copies of deposit slips.

Buy Now
Questions 31

Which of the following best explains why integrity is a necessary personal quality for internal auditors at all levels?

Options:

A.

Internal auditor integrity enables stakeholders to constantly question the work of the internal audit activity.

B.

Internal auditor integrity enables the internal auditor to avoid being challenged by any party in the organization.

C.

Internal auditor integrity enables the internal audit activity to be able to demonstrate independence.

D.

Internal auditor integrity enables users of internal auditors' work to make important business decisions.

Buy Now
Questions 32

An internal auditor uses a predefined macro provided in a popular spreadsheet application to verify the present value of the organization's investments. Which of the following is the most appropriate course of action regarding the auditor's use of this functionality?

Options:

A.

The auditor should accept the calculations generated by the function, as any further work or documentation would be inefficient.

B.

The auditor should perform a manual recalculation of several results to validate and document the results.

C.

The auditor should review the programming of the macro before its use to ensure that it is appropriate for the required calculations.

D.

The auditor should tabulate the results in the spreadsheet to ensure the macro has generated the correct results for all calculations.

Buy Now
Questions 33

Which of the following enhances the independence of the internal audit activity?

Options:

A.

The chief audit executive (CAE) approves the annual internal audit plan.

B.

The CAE administratively reports to the board.

C.

The audit committee approves the CAE's annual salary increase.

D.

The chief executive officer approves the internal audit charter.

Buy Now
Questions 34

An IT contractor applied for an internal audit position at a bank. The contractor worked for the bank's IT security manager two years ago. If the audit manager interviewed the contractor and wants to extend a job offer, which of the following actions should the chief audit executive pursue?

Options:

A.

Allow the audit manager to hire the contractor and state that the individual is free to perform IT audits, including security.

B.

Not allow the audit manager to hire the contractor, as it would be a conflict of interest.

C.

Allow the audit manager to hire the contractor, but state that the individual is not allowed to work on IT security audits for one year.

D.

Not allow the audit manager to hire the contractor and ask the individual to apply again in one year.

Buy Now
Questions 35

Which of the following would be considered a violation of The IIA's mandatory guidance on independence?

Options:

A.

The chief audit executive (CAE) reports functionally to the board and administratively to the chief financial officer.

B.

The board seeks senior management's recommendation before approving the annual salary adjustment of the CAE.

C.

The CAE confirms to the board, at least once every five years, the organizational independence of the internal audit activity.

D.

The CAE updates the internal audit charter and presents it to the board for approval periodically, not on a specific timeline.

Buy Now
Questions 36

The management at a national consumer goods organization implements a fair work and pay practice as well as a policy to treat employees equitably and consistently. Which common characteristics of fraud will the practice and policy most likely reduce?

Options:

A.

Pressure or incentive.

B.

Opportunity.

C.

Rationalization.

D.

Commitment.

Buy Now
Questions 37

According to IIA guidance, which of the following must the internal auditor consider to meet the requirements for due professional care?

Options:

A.

The training courses necessary to enhance the internal auditor's knowledge, skills, and other competencies.

B.

The appropriateness of assurance procedures necessary to ensure all significant risks will be identified.

C.

The use of innovative technology and data analysis techniques.

D.

The extent of work needed to achieve the engagement’s objectives.

Buy Now
Questions 38

A multinational organization has asked the internal audit activity to assist in setting up the organization's risk management system. The chief audit executive (CAE) agrees to take on the engagement as a consultant. Which of the following tasks is appropriate for the CAE to undertake?

Options:

A.

Coordinate and facilitate risk workshops for management to attend.

B.

Establish the degree of risk appetite for management to accept.

C.

Set risk indicators and mitigation plans for management to implement.

D.

Determine the number of significant risks for management to report to the board.

Buy Now
Questions 39

During an engagement, an internal auditor decided to use variance analysis as an auditing techniques. Which of the following steps should the auditor pursue if he discovers unexpected deviations of actual results from budget?

Options:

A.

Report the deviations immediately to the audit committee.

B.

Gather additional information to determine the cause of the deviations.

C.

Conclude that the budget was unreasonably set and accept the deviations.

D.

Perform alternative forms of analytical procedures which provide no deviations.

Buy Now
Questions 40

While reviewing first quarter sales transactions, an internal auditor discovered that 10 invoices for a new customer had not been posted into the accounts receivable subsidiary ledger. Those 10 invoices were listed in an error report automatically generated by the sales processing system. The system had rejected the invoices because the customer's account number was not found in the customer master file. In this scenario, which of the following controls was lacking?

Options:

A.

Corrective control.

B.

Preventive control.

C.

Detective control.

D.

Directive control.

Buy Now
Questions 41

An internal auditor for a large retail chain suspects that a store manager has been stealing money from cash sales by listing the sales as accounts receivable and then writing off the accounts as bad debts. Which of the following irregularities is the most likely cause of the auditor's suspicion?

Options:

A.

A much higher bad debt expense as a percentage of sales than that of previous years.

B.

A much higher bad debt expense as a percentage of sales than that of other stores.

C.

A much higher percentage of past-due accounts receivable than that of other stores.

D.

A much higher percentage of past-due accounts receivable than that of previous years.

Buy Now
Questions 42

Why is a code of ethics for the internal audit profession necessary?

Options:

A.

It ensures that all members of the profession possess the same level of competence.

B.

It provides auditors with protection from lawsuits.

C.

It guides internal auditors in their service to others.

D.

It requires auditors to exhibit loyalty to their organizations.

Buy Now
Exam Code: IIA-CRMA
Exam Name: Certification in Risk Management Assurance (CRMA) Exam
Last Update: Dec 1, 2023
Questions: 283
dumpsmate guaranteed to pass
24/7 Customer Support

DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.

Site Secure

mcafee secure

TESTED 05 May 2024