Question 1

Which of the following statements are true regarding the use of heat maps as risk assessment tools?

1. They focus primarily on known risks, limiting the ability to identify new risks.

2. They rely heavily on objective assessments and related risk tolerances.

3. They are too complex to provide an easily understandable view of key risks.

4. They are helpful but limited in value in a rapidly changing environment.

Options :

A : 1 and 2 only

B : 1 and 4 only

C : 2 and 3 only

D : 3 and 4 only

Answer: B

Question 2

Which of the following is an example of a physical security control that should be in place at an organization's data center?

Options :

A : Backup servers in the data center are stored in an environmentally controlled location

B : All users have a unique ID and password to access data

C : Swipe cards are used to access the data center

D : Firewalls and antivirus protection are in place to prevent unauthorized access to data.

Answer: C

Question 3

Which of the following controls could an internal auditor reasonably conclude is effective by observing the physical controls of a large server room?

Options :

A : Adequate signs are in place to assist in locating safety equipment.

B : Servers are secured individually to their racks by locks.

C : Foam fire extinguishers are operable to protect against electrical fires.

D : Swipe card access is required to gain access to the server room.

Answer: A

Question 4

The chief audit executive (CAE) has assigned an internal auditor to an upcoming engagement. Which of the following requirements would most likely indicate that the internal auditor was assigned to an assurance engagement?

Options :

A : The assigned internal auditor must determine the objectives, scope, and techniques of the engagement.

B : The CAE must personally obtain the needed skills, knowledge, or other competencies if the internal auditor does not have them.

C : The assigned internal auditor must not assume management responsibilities while performing the engagement.

D : The assigned internal auditor must maintain objectivity while performing the engagement.

Answer: A

Question 5

Which of the following is an effective approach for internal auditors to take to improve collaboration with audit clients during an engagement?

1. Obtain control concerns from the client before the audit begins so the internal auditor can tailor the scope accordingly.

2. Discuss the engagement plan with the client so the client can understand the reasoning behind the approach.

3. Review test criteria and procedures where the client expresses concerns about the type of tests to be conducted.

4. Provide all observations at the end of the audit to ensure the client is in agreement with the facts before publishing the report.

Options :

A : 1 and 2 only

B : 1 and 4 only

C : 2 and 3 only

D : 3 and 4 only

Answer: A

Higher Test Marks with Free Online IIA-ACCA Exam Practice

Buying Options: