View Full IIA IIA-CIA-Part2 Exam Dumps and Practice Test Dumps
Question 161.
What is the primary purpose of developing a fraud-risk hypothesis during an internal audit engagement?
- Identify plausible ways fraud could occur so audit procedures can address relevant exposure
- Prove that management has committed fraud
- Replace the engagement risk assessment
- Require investigation of every employee
Correct Answer: 1. Identify plausible ways fraud could occur so audit procedures can address relevant exposure
Explanation:
A fraud-risk hypothesis helps auditors think systematically about how intentional misconduct might occur within the process being reviewed. The auditor may consider incentives, opportunities, management override, collusion, and control weaknesses. The purpose is not to assume wrongdoing but to design procedures capable of identifying relevant indicators. Significant anomalies should be investigated objectively and supported by sufficient evidence before any conclusion is reached.
Question 162.
Which situation would MOST strongly indicate a need for additional fraud-related audit procedures?
- A routine transaction follows established controls
- Management provides complete supporting documentation
- An automated reconciliation contains no exceptions
- Several unusual transactions bypass normal approval procedures and lack clear business justification
Correct Answer: 4. Several unusual transactions bypass normal approval procedures and lack clear business justification
Explanation:
Transactions that bypass established controls and lack reasonable support may indicate elevated fraud or management-override risk. Such conditions do not prove fraud, but they warrant further investigation. Internal audit may examine authorization, supporting documentation, user access, related parties, timing, and similar transactions. Professional skepticism requires the auditor to seek an evidence-based explanation rather than either dismissing the anomaly or assuming misconduct immediately.
Question 163.
What is the primary purpose of preserving potentially relevant electronic evidence during a suspected fraud review?
- Allow anyone on the audit team to modify the files
- Protect the integrity and availability of information that may be needed for investigation or further action
- Replace interviews and other evidence
- Guarantee that disciplinary action will result
Correct Answer: 2. Protect the integrity and availability of information that may be needed for investigation or further action
Explanation:
Electronic evidence can be altered, overwritten, or deleted if it is not preserved properly. When potential misconduct is identified, relevant records may need to be secured in accordance with organizational, legal, and investigative requirements. Internal audit should protect confidentiality and maintain appropriate documentation regarding evidence handling. Specialized forensic or legal assistance may be necessary for complex or sensitive matters.
Question 164.
What is the MOST appropriate action when an internal auditor lacks sufficient expertise to investigate suspected manipulation of digital records?
- Continue independently to avoid delaying the engagement
- Ask the suspected employee to conduct the technical review
- Obtain qualified digital-forensics or other specialist assistance
- Ignore the issue because it is outside the auditor’s specialty
Correct Answer: 3. Obtain qualified digital-forensics or other specialist assistance
Explanation:
Internal auditors should recognize the limits of their competence. Complex digital investigations may require forensic tools, evidence-preservation techniques, cybersecurity knowledge, or legal considerations beyond the audit team’s expertise. Qualified specialists can help ensure evidence is collected and analyzed appropriately. Internal audit should still understand the specialist’s scope and evaluate the work sufficiently before relying on the resulting conclusions.
Question 165.
What is the primary purpose of performing unannounced audit procedures in selected high-risk circumstances?
- Reduce the opportunity for individuals to temporarily conceal irregularities before testing occurs
- Replace planned engagement procedures
- Eliminate the need for professional judgment
- Guarantee detection of all fraud
Correct Answer: 1. Reduce the opportunity for individuals to temporarily conceal irregularities before testing occurs
Explanation:
Unannounced procedures can be useful where advance notice could allow records, cash, inventory, or other conditions to be temporarily altered. Examples include surprise cash counts or selected physical inspections. Such procedures should be justified by the risk and conducted appropriately. They supplement rather than replace normal planning, evidence gathering, and professional judgment.
Question 166.
Which analytical procedure would BEST help identify transactions structured to avoid an authorization threshold?
- Reviewing only year-end balances
- Searching for multiple related transactions just below the approval limit
- Comparing payroll expense with headcount
- Confirming bank balances externally
Correct Answer: 2. Searching for multiple related transactions just below the approval limit
Explanation:
Transaction splitting may occur when a larger purchase or payment is divided into smaller amounts to avoid higher-level approval. Internal audit can analyze transactions by requester, vendor, date, amount, and related purchase information to identify suspicious patterns. Flagged items should then be investigated to determine whether they represent legitimate separate transactions or inappropriate circumvention of controls.
Question 167.
What is the primary purpose of analyzing transactions occurring at unusual times?
- Prove that after-hours activity is fraudulent
- Replace user-access testing
- Eliminate the need for supporting documentation
- Identify activity that may warrant investigation because it differs from normal operating patterns
Correct Answer: 4. Identify activity that may warrant investigation because it differs from normal operating patterns
Explanation:
Transactions processed late at night, on weekends, or during unusual periods can be useful indicators when such timing is inconsistent with normal operations. Legitimate explanations may exist, especially in global or continuously operating organizations. Internal audit should combine timing analysis with user access, transaction type, authorization, and other evidence before reaching conclusions.
Question 168.
What is the primary purpose of reviewing related-party transactions during an engagement?
- Assume all related-party activity is inappropriate
- Eliminate transactions with affiliated entities
- Evaluate whether relationships are disclosed, authorized, and managed in accordance with applicable requirements
- Replace conflict-of-interest controls
Correct Answer: 3. Evaluate whether relationships are disclosed, authorized, and managed in accordance with applicable requirements
Explanation:
Related-party transactions may present elevated conflict-of-interest, pricing, disclosure, or fraud risk because the parties are not fully independent. Internal audit may examine approval, disclosure, business purpose, pricing, contractual terms, and compliance with policy. The existence of a relationship is not itself evidence of wrongdoing, but appropriate transparency and controls are important.
Question 169.
What is the primary purpose of comparing employee and vendor master data?
- Identify unusual relationships or shared information that may indicate conflicts or fictitious vendors
- Guarantee that matching records represent fraud
- Replace vendor due diligence
- Eliminate legitimate employee-vendor relationships
Correct Answer: 1. Identify unusual relationships or shared information that may indicate conflicts or fictitious vendors
Explanation:
Comparing addresses, bank accounts, phone numbers, tax identifiers, or other relevant fields can reveal relationships that deserve further review. A match may have a legitimate explanation, so it should be treated as a risk indicator rather than proof of misconduct. Internal audit should verify data quality and investigate significant matches using supporting evidence.
Question 170.
Which control would BEST reduce the risk that fictitious vendors are created and paid?
- Allow accounts payable staff unrestricted vendor creation rights
- Require independent approval of vendor creation and separate payment authorization
- Eliminate vendor master-file reviews
- Allow employees to approve payments to vendors they created
Correct Answer: 2. Require independent approval of vendor creation and separate payment authorization
Explanation:
Separating vendor setup from payment approval reduces the opportunity for one person to establish a fictitious vendor and direct payments to it. Additional controls may include due diligence, restricted master-data access, duplicate analysis, bank-account verification, and periodic vendor reviews. Internal audit should assess both formal responsibilities and actual system permissions.
Question 171.
What is the primary purpose of audit procedures over expense reimbursements?
- Determine whether claims are authorized, supported, business-related, and consistent with policy
- Prevent employees from traveling
- Guarantee that all expenses are tax deductible
- Replace managerial approval
Correct Answer: 1. Determine whether claims are authorized, supported, business-related, and consistent with policy
Explanation:
Expense reimbursements can present risks of duplicate claims, personal expenditures, excessive amounts, fabricated receipts, or policy violations. Internal audit may examine supporting documentation, approval, duplicate patterns, merchant categories, weekend transactions, and spending limits. Analytics can help identify higher-risk claims, but unusual transactions should be investigated before conclusions are reached.
Question 172.
Which situation would MOST strongly suggest potential abuse of expense-report controls?
- A properly supported travel expense approved according to policy
- A recurring subscription approved by the responsible manager
- An employee repeatedly submits multiple receipts just below the level requiring additional approval
- A business meal includes appropriate supporting documentation
Correct Answer: 3. An employee repeatedly submits multiple receipts just below the level requiring additional approval
Explanation:
Repeated claims just below approval thresholds can indicate possible structuring to avoid additional scrutiny. Such patterns do not automatically prove misuse, but they warrant investigation. Internal audit may examine timing, merchants, supporting receipts, business purpose, approval history, and whether related expenses should have been treated as a single claim.
Question 173.
What is the primary purpose of testing revenue cutoff near the end of a reporting period?
- Determine whether revenue is recorded in the appropriate accounting period
- Increase reported revenue
- Replace contract review
- Guarantee customer payment
Correct Answer: 1. Determine whether revenue is recorded in the appropriate accounting period
Explanation:
Cutoff testing helps determine whether transactions recorded around period-end belong in the correct reporting period. Internal audit may examine shipping records, contracts, invoices, delivery evidence, or subsequent activity. Period-end transactions can present elevated risk because pressure to meet performance targets may encourage premature or delayed recognition.
Question 174.
Which audit procedure would BEST help identify possible premature revenue recognition?
- Reviewing only annual revenue totals
- Comparing recorded period-end sales with shipping, delivery, or contractual evidence
- Examining only customer credit limits
- Reviewing payroll transactions
Correct Answer: 2. Comparing recorded period-end sales with shipping, delivery, or contractual evidence
Explanation:
To evaluate whether revenue was recognized appropriately, internal audit can compare recorded sales with evidence that the relevant transaction conditions were actually satisfied. Documentation may include shipping records, delivery confirmation, customer acceptance, or contract terms. Unusual period-end entries should be investigated in light of applicable accounting policies and the economic substance of the transaction.
Question 175.
What is the primary purpose of testing inventory cutoff procedures?
- Determine whether inventory receipts and shipments are recorded in the correct period
- Eliminate the need for physical counts
- Determine employee productivity
- Replace inventory valuation procedures
Correct Answer: 1. Determine whether inventory receipts and shipments are recorded in the correct period
Explanation:
Inventory cutoff affects inventory balances, cost recognition, purchases, and potentially revenue. Internal audit may examine receiving and shipping documents around the reporting date to determine whether transactions were recorded in the appropriate period. Weak cutoff controls can result in misstated inventory and related financial information.
Question 176.
Which factor is MOST important when evaluating inventory-count procedures?
- Whether the warehouse is large
- Whether the count process provides reliable evidence about actual quantities and discrepancies are properly investigated
- Whether every item has the same value
- Whether counting occurs during business hours
Correct Answer: 2. Whether the count process provides reliable evidence about actual quantities and discrepancies are properly investigated
Explanation:
An effective count process should establish clear instructions, control count sheets or devices, address inventory movement, provide appropriate supervision, and investigate material differences. Internal audit may observe the count, perform independent test counts, and reconcile results to records. The objective is reliable evidence about inventory quantities rather than merely completing a counting exercise.
Question 177.
What is the primary purpose of reviewing inventory adjustments after physical counts?
- Determine whether significant differences are appropriately supported, authorized, and investigated
- Ensure all differences are written off automatically
- Replace physical safeguards
- Eliminate cycle counting
Correct Answer: 1. Determine whether significant differences are appropriately supported, authorized, and investigated
Explanation:
Inventory adjustments can conceal theft, processing errors, or weak inventory controls if they are not reviewed carefully. Internal audit should assess whether significant adjustments have legitimate explanations, appropriate approval, and adequate supporting evidence. Recurring differences may indicate broader problems in receiving, production, shipping, security, or recordkeeping.
Question 178.
Which audit procedure would BEST help determine whether recorded fixed assets physically exist?
- Reviewing depreciation calculations only
- Examining the capital budget
- Reviewing purchase approvals only
- Physically inspecting selected assets and tracing them to asset records**
Correct Answer: 4. Physically inspecting selected assets and tracing them to asset records
Explanation:
Physical inspection provides direct evidence about whether recorded tangible assets actually exist. The auditor may select assets from the register and locate them physically, checking identification, condition, and location. Additional procedures may be needed to evaluate ownership, valuation, useful life, or completeness of the asset register.
Question 179.
What is the primary purpose of testing controls over fixed-asset disposals?
- Determine whether disposals are authorized, documented, and properly reflected in accounting and asset records
- Prevent all assets from being sold
- Guarantee that every disposal generates a gain
- Replace physical asset verification
Correct Answer: 1. Determine whether disposals are authorized, documented, and properly reflected in accounting and asset records
Explanation:
Asset disposal controls help prevent unauthorized removal and ensure that retired or sold assets are removed from records appropriately. Internal audit may examine approval, proceeds, asset-register updates, accounting treatment, and secure data removal from technology equipment. Weak disposal controls can result in missing assets, inaccurate records, or information-security exposure.
Question 180.
Which approach BEST supports effective internal audit testing of fraud-sensitive financial and operational transactions?
- Assume unusual transactions indicate fraud
- Focus exclusively on high-value transactions
- Use risk-based analytics and targeted testing, investigate unusual patterns, verify supporting evidence, assess control override, and involve specialists when necessary
- Rely solely on management explanations
Correct Answer: 3. Use risk-based analytics and targeted testing, investigate unusual patterns, verify supporting evidence, assess control override, and involve specialists when necessary
Explanation:
Fraud-sensitive auditing requires professional skepticism and a balanced approach. Internal audit should use analytics and targeted procedures to identify unusual transactions, evaluate supporting evidence and authorization, and consider management override or collusion. Anomalies are indicators rather than proof of wrongdoing. Complex investigations may require legal, forensic, or technical specialists to ensure evidence is handled and evaluated appropriately.