{"id":20544,"date":"2026-09-24T06:02:10","date_gmt":"2026-09-24T06:02:10","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=20544"},"modified":"2026-09-24T06:02:10","modified_gmt":"2026-09-24T06:02:10","slug":"iia-iia-cia-part2-practice-test-questions-and-exam-dumps-part7-q121-140","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/iia-iia-cia-part2-practice-test-questions-and-exam-dumps-part7-q121-140\/","title":{"rendered":"IIA IIA-CIA-Part2 Practice Test Questions and Exam Dumps Part7 Q121-140"},"content":{"rendered":"

View Full <\/b>IIA IIA-CIA-Part2 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h2>\n

 <\/p>\n

Question 121.<\/b><\/p>\n

What is the primary purpose of reviewing segregation of duties during an internal audit engagement?<\/b><\/p>\n

    \n
  1. <\/b> Reduce the risk that one individual can initiate, authorize, record, and conceal inappropriate activity<\/span><\/li>\n
  2. <\/b> Eliminate all management review<\/span><\/li>\n
  3. <\/b> Ensure every department has the same staffing structure<\/span><\/li>\n
  4. <\/b> Replace system access controls<\/span><\/li>\n<\/ol>\n

    Correct Answer: 1. Reduce the risk that one individual can initiate, authorize, record, and conceal inappropriate activity<\/b><\/p>\n

    Explanation:<\/b><\/p>\n

    Segregation of duties helps reduce the opportunity for error or fraud by distributing incompatible responsibilities among different individuals. Commonly separated activities include authorization, custody, recording, and reconciliation. Where complete segregation is impractical, compensating controls such as independent review may be necessary. Internal audit should evaluate both formal role assignments and actual system access or operating practices.<\/span><\/p>\n

    Question 122.<\/b><\/p>\n

    Which situation MOST clearly indicates a segregation-of-duties weakness?<\/b><\/p>\n

      \n
    1. <\/b> One employee prepares a payment and another approves it<\/span><\/li>\n
    2. <\/b> One employee can create a vendor, approve an invoice, and release payment without independent review<\/span><\/li>\n
    3. <\/b> Management reviews exception reports monthly<\/span><\/li>\n
    4. <\/b> System access is based on job responsibilities<\/span><\/li>\n<\/ol>\n

      Correct Answer: 2. One employee can create a vendor, approve an invoice, and release payment without independent review<\/b><\/p>\n

      Explanation:<\/b><\/p>\n

      Combining vendor creation, invoice approval, and payment release gives one person the ability to initiate and complete a transaction with limited oversight. This creates a significant opportunity for error or fraud. Internal audit should determine whether duties are appropriately separated and whether any compensating controls exist where staffing or system constraints prevent ideal segregation.<\/span><\/p>\n

      Question 123.<\/b><\/p>\n

      What is the primary purpose of reviewing privileged access during an engagement?<\/b><\/p>\n

        \n
      1. <\/b> Determine whether powerful system permissions are limited to authorized users and appropriately monitored<\/span><\/li>\n
      2. <\/b> Ensure every user has administrator rights<\/span><\/li>\n
      3. <\/b> Replace user authentication controls<\/span><\/li>\n
      4. <\/b> Eliminate the need for logging<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1. Determine whether powerful system permissions are limited to authorized users and appropriately monitored<\/b><\/p>\n

        Explanation:<\/b><\/p>\n

        Privileged accounts can create elevated risk because they may allow users to modify configurations, data, security settings, or logs. Internal audit should evaluate whether such access is justified, approved, periodically reviewed, and independently monitored. Strong controls over privileged access are particularly important because ordinary application controls may be bypassed by users with broad administrative permissions.<\/span><\/p>\n

        Question 124.<\/b><\/p>\n

        Which control BEST reduces the risk associated with emergency access to sensitive systems?<\/b><\/p>\n

          \n
        1. <\/b> Permanent administrator rights for all support staff<\/span><\/li>\n
        2. <\/b> No logging of emergency sessions<\/span><\/li>\n
        3. <\/b> Automatic approval of all emergency access requests<\/span><\/li>\n
        4. <\/b> Time-limited access that is approved, logged, and reviewed after use**<\/span><\/li>\n<\/ol>\n

          Correct Answer: 4. Time-limited access that is approved, logged, and reviewed after use<\/b><\/p>\n

          Explanation:<\/b><\/p>\n

          Emergency access may be necessary during outages or critical incidents, but it should remain controlled. Limiting access duration, requiring appropriate approval, recording activity, and performing retrospective review reduces the risk of misuse. Internal audit may examine whether emergency access is granted only when justified and whether monitoring is sufficient to identify inappropriate actions.<\/span><\/p>\n

          Question 125.<\/b><\/p>\n

          What is the primary purpose of reviewing master-data changes during an internal audit?<\/b><\/p>\n

            \n
          1. <\/b> Determine whether sensitive changes are authorized, accurate, and appropriately controlled<\/span><\/li>\n
          2. <\/b> Replace transaction testing<\/span><\/li>\n
          3. <\/b> Increase the number of master records<\/span><\/li>\n
          4. <\/b> Eliminate the need for user access controls<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1. Determine whether sensitive changes are authorized, accurate, and appropriately controlled<\/b><\/p>\n

            Explanation:<\/b><\/p>\n

            Master data such as vendor bank details, customer records, employee information, and pricing can affect large numbers of transactions. Unauthorized or inaccurate changes may create significant fraud or operational risk. Internal audit may review approval, access, audit trails, independent verification, and monitoring of sensitive master-data changes.<\/span><\/p>\n

            Question 126.<\/b><\/p>\n

            Which factor is MOST important when testing changes to vendor bank information?<\/b><\/p>\n

              \n
            1. <\/b> Whether the vendor has been used for many years<\/span><\/li>\n
            2. <\/b> Whether the change was independently verified using trusted contact information<\/span><\/li>\n
            3. <\/b> Whether the change request was received by email<\/span><\/li>\n
            4. <\/b> Whether the vendor is domestic<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2. Whether the change was independently verified using trusted contact information<\/b><\/p>\n

              Explanation:<\/b><\/p>\n

              Fraudsters may impersonate vendors and request changes to payment details. Independent verification using known and trusted contact information can help confirm that the request is legitimate. Relying only on contact details included in the request can weaken the control. Additional approval and audit trails can further reduce the risk of payment diversion.<\/span><\/p>\n

              Question 127.<\/b><\/p>\n

              What is the primary purpose of reviewing duplicate-payment controls?<\/b><\/p>\n

                \n
              1. <\/b> Identify whether the organization can detect and prevent repeated payment of the same obligation<\/span><\/li>\n
              2. <\/b> Ensure vendors submit invoices more than once<\/span><\/li>\n
              3. <\/b> Replace invoice approval controls<\/span><\/li>\n
              4. <\/b> Eliminate the need for reconciliations<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1. Identify whether the organization can detect and prevent repeated payment of the same obligation<\/b><\/p>\n

                Explanation:<\/b><\/p>\n

                Duplicate payments can result from repeated invoices, data-entry errors, system weaknesses, or intentional misconduct. Internal audit may review automated duplicate checks, invoice numbering, exception reports, vendor data, and recovery procedures. Potential duplicates should be investigated because some similar transactions may be legitimate rather than actual overpayments.<\/span><\/p>\n

                Question 128.<\/b><\/p>\n

                Which analytical test would BEST help identify potential duplicate payments?<\/b><\/p>\n

                  \n
                1. <\/b> Reviewing only annual totals by vendor<\/span><\/li>\n
                2. <\/b> Comparing employee headcount with payroll expense<\/span><\/li>\n
                3. <\/b> Searching for transactions with matching vendor, invoice number, amount, and date characteristics<\/span><\/li>\n
                4. <\/b> Examining only low-value invoices<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3. Searching for transactions with matching vendor, invoice number, amount, and date characteristics<\/b><\/p>\n

                  Explanation:<\/b><\/p>\n

                  Duplicate-payment analysis typically looks for transactions sharing key fields such as vendor, invoice number, amount, date, or purchase order. Exact or near matches can highlight transactions that deserve further investigation. Internal audit should confirm whether flagged items represent true duplicates before concluding that an error or control failure occurred.<\/span><\/p>\n

                  Question 129.<\/b><\/p>\n

                  What is the primary purpose of reviewing purchase-order approval controls?<\/b><\/p>\n

                    \n
                  1. <\/b> Determine whether purchases are authorized in accordance with established approval limits<\/span><\/li>\n
                  2. <\/b> Guarantee that the lowest-priced vendor is always selected<\/span><\/li>\n
                  3. <\/b> Replace vendor due diligence<\/span><\/li>\n
                  4. <\/b> Eliminate all emergency purchases<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1. Determine whether purchases are authorized in accordance with established approval limits<\/b><\/p>\n

                    Explanation:<\/b><\/p>\n

                    Purchase approval controls help ensure that expenditures are legitimate, within authority limits, and consistent with organizational needs. Internal audit may test whether approvals match delegation-of-authority requirements, whether purchases are split to avoid thresholds, and whether system controls appropriately enforce authorization rules.<\/span><\/p>\n

                    Question 130.<\/b><\/p>\n

                    What is the main risk associated with split purchases just below approval thresholds?<\/b><\/p>\n

                      \n
                    1. <\/b> Purchases will always cost less<\/span><\/li>\n
                    2. <\/b> Employees may be attempting to circumvent required higher-level authorization<\/span><\/li>\n
                    3. <\/b> Vendor master data will become incomplete<\/span><\/li>\n
                    4. <\/b> Accounts payable will stop processing invoices<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 2. Employees may be attempting to circumvent required higher-level authorization<\/b><\/p>\n

                      Explanation:<\/b><\/p>\n

                      A requester may divide one purchase into multiple smaller transactions to stay below an approval threshold. This can undermine delegated authority and procurement controls. Internal audit may use analytics to identify related transactions by vendor, requester, timing, or amount and then investigate whether the purchases were legitimately separate.<\/span><\/p>\n

                      Question 131.<\/b><\/p>\n

                      What is the primary purpose of testing three-way matching in accounts payable?<\/b><\/p>\n

                        \n
                      1. <\/b> Determine whether invoices are appropriately compared with purchase orders and evidence of receipt before payment<\/span><\/li>\n
                      2. <\/b> Replace vendor approval<\/span><\/li>\n
                      3. <\/b> Eliminate payment authorization<\/span><\/li>\n
                      4. <\/b> Ensure all purchases are prepaid<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1. Determine whether invoices are appropriately compared with purchase orders and evidence of receipt before payment<\/b><\/p>\n

                        Explanation:<\/b><\/p>\n

                        Three-way matching helps ensure that the organization pays only for goods or services that were ordered and received and that invoice details agree with approved terms. Internal audit may test how exceptions are handled and whether override authority is appropriately controlled. The control can reduce the risk of overpayment, unauthorized purchases, and fictitious invoices.<\/span><\/p>\n

                        Question 132.<\/b><\/p>\n

                        Which circumstance would MOST likely require additional audit attention in accounts payable?<\/b><\/p>\n

                          \n
                        1. <\/b> A routine invoice matched automatically without exception<\/span><\/li>\n
                        2. <\/b> A properly approved recurring utility payment<\/span><\/li>\n
                        3. <\/b> A large manual payment processed outside normal procedures with limited supporting documentation<\/span><\/li>\n
                        4. <\/b> A vendor invoice paid according to established terms<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3. A large manual payment processed outside normal procedures with limited supporting documentation<\/b><\/p>\n

                          Explanation:<\/b><\/p>\n

                          Manual transactions outside normal workflows can create elevated risk, especially when they are significant and poorly documented. Internal audit should examine business purpose, authorization, supporting evidence, related parties, and whether the transaction bypassed established controls. Unusual processing does not automatically mean misconduct, but it generally warrants greater scrutiny.<\/span><\/p>\n

                          Question 133.<\/b><\/p>\n

                          What is the primary purpose of payroll master-file controls?<\/b><\/p>\n

                            \n
                          1. <\/b> Ensure employee records and compensation changes are authorized, accurate, and appropriately maintained<\/span><\/li>\n
                          2. <\/b> Replace payroll reconciliation<\/span><\/li>\n
                          3. <\/b> Allow payroll staff to approve their own salary changes<\/span><\/li>\n
                          4. <\/b> Eliminate human resources involvement<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1. Ensure employee records and compensation changes are authorized, accurate, and appropriately maintained<\/b><\/p>\n

                            Explanation:<\/b><\/p>\n

                            Payroll master data directly affects employee payments. Weak controls can permit fictitious employees, unauthorized salary changes, or incorrect bank information. Internal audit may review access restrictions, approval of changes, reconciliation with human resources records, and independent monitoring of sensitive updates.<\/span><\/p>\n

                            Question 134.<\/b><\/p>\n

                            Which control BEST reduces the risk of payments to fictitious employees?<\/b><\/p>\n

                              \n
                            1. <\/b> Allowing payroll personnel to create and approve employees independently<\/span><\/li>\n
                            2. <\/b> Paying all employees in cash<\/span><\/li>\n
                            3. <\/b> Eliminating employee identification numbers<\/span><\/li>\n
                            4. <\/b> Reconciling payroll records with independently maintained human resources records**<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 4. Reconciling payroll records with independently maintained human resources records<\/b><\/p>\n

                              Explanation:<\/b><\/p>\n

                              Comparing payroll records with independent HR records can identify names that do not correspond to valid employees. Other useful controls include segregation of duties, approval of employee additions, analysis of duplicate bank accounts, and prompt removal of terminated employees. Internal audit may test these controls and investigate unusual payroll records.<\/span><\/p>\n

                              Question 135.<\/b><\/p>\n

                              What is the primary purpose of reviewing terminated-user access?<\/b><\/p>\n

                                \n
                              1. <\/b> Confirm that system and physical access is removed promptly after employment ends<\/span><\/li>\n
                              2. <\/b> Ensure former employees retain access for convenience<\/span><\/li>\n
                              3. <\/b> Replace offboarding procedures<\/span><\/li>\n
                              4. <\/b> Reduce the need for identity management<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1. Confirm that system and physical access is removed promptly after employment ends<\/b><\/p>\n

                                Explanation:<\/b><\/p>\n

                                Former employees may retain unnecessary access if offboarding processes are incomplete or delayed. This creates risks of unauthorized transactions, data access, or security breaches. Internal audit may compare termination dates with account disablement records and investigate delays. Effective offboarding requires coordination among human resources, information technology, security, and business management.<\/span><\/p>\n

                                Question 136.<\/b><\/p>\n

                                What is the primary purpose of reviewing journal-entry controls?<\/b><\/p>\n

                                  \n
                                1. <\/b> Eliminate all manual journal entries<\/span><\/li>\n
                                2. <\/b> Ensure entries are appropriately authorized, supported, and reviewed<\/span><\/li>\n
                                3. <\/b> Replace account reconciliations<\/span><\/li>\n
                                4. <\/b> Allow senior managers unrestricted posting rights<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2. Ensure entries are appropriately authorized, supported, and reviewed<\/b><\/p>\n

                                  Explanation:<\/b><\/p>\n

                                  Manual journal entries can create risk because they directly affect accounting records and may be used to bypass normal transaction processes. Internal audit may examine access, approval, supporting documentation, unusual accounts, timing, and privileged-user activity. Particular attention may be given to large or unusual entries posted near period-end.<\/span><\/p>\n

                                  Question 137.<\/b><\/p>\n

                                  Which journal entry would generally warrant the GREATEST additional audit attention?<\/b><\/p>\n

                                    \n
                                  1. <\/b> A routine automated depreciation entry<\/span><\/li>\n
                                  2. <\/b> A recurring payroll accrual supported by established calculations<\/span><\/li>\n
                                  3. <\/b> A large manual period-end entry posted by a privileged user with minimal support<\/span><\/li>\n
                                  4. <\/b> A system-generated inventory entry consistent with normal activity<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 3. A large manual period-end entry posted by a privileged user with minimal support<\/b><\/p>\n

                                    Explanation:<\/b><\/p>\n

                                    Large, unusual, manual entries posted near period-end can present elevated risk of error or management override, especially when supporting documentation is weak. Internal audit should investigate the business rationale, authorization, accounts affected, user access, and supporting evidence. Risk-focused analytics can help identify similar entries across the population.<\/span><\/p>\n

                                    Question 138.<\/b><\/p>\n

                                    What is the primary purpose of reviewing account reconciliations during an engagement?<\/b><\/p>\n

                                      \n
                                    1. <\/b> Increase the number of adjustment entries<\/span><\/li>\n
                                    2. <\/b> Replace transaction authorization controls<\/span><\/li>\n
                                    3. <\/b> Eliminate the need for supporting records<\/span><\/li>\n
                                    4. <\/b> Determine whether recorded balances are compared with supporting information and differences are appropriately resolved**<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 4. Determine whether recorded balances are compared with supporting information and differences are appropriately resolved<\/b><\/p>\n

                                      Explanation:<\/b><\/p>\n

                                      Reconciliations help detect missing, duplicate, inaccurate, or unexplained transactions. Internal audit should evaluate whether reconciliations are timely, complete, independently reviewed where appropriate, and followed by resolution of significant differences. Long-outstanding reconciling items may indicate weak follow-up or underlying accounting and process problems.<\/span><\/p>\n

                                      Question 139.<\/b><\/p>\n

                                      What is the primary purpose of aging reconciling items?<\/b><\/p>\n

                                        \n
                                      1. <\/b> Identify unresolved differences that may require additional investigation or corrective action<\/span><\/li>\n
                                      2. <\/b> Eliminate account ownership<\/span><\/li>\n
                                      3. <\/b> Replace management review<\/span><\/li>\n
                                      4. <\/b> Guarantee that every difference is fraudulent<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1. Identify unresolved differences that may require additional investigation or corrective action<\/b><\/p>\n

                                        Explanation:<\/b><\/p>\n

                                        Aging helps distinguish newly identified differences from items that have remained unresolved for extended periods. Older reconciling items may indicate errors, unsupported balances, weak follow-up, or process deficiencies. Internal audit may focus on significant, recurring, or long-outstanding items and evaluate whether management has appropriate procedures for resolution.<\/span><\/p>\n

                                        Question 140.<\/b><\/p>\n

                                        Which approach BEST supports effective internal audit testing of transaction-processing controls?<\/b><\/p>\n

                                          \n
                                        1. <\/b> Review policies without examining transactions<\/span><\/li>\n
                                        2. <\/b> Test only transactions selected by management<\/span><\/li>\n
                                        3. <\/b> Evaluate authorization, segregation of duties, master data, system access, reconciliations, unusual transactions, and exception handling using reliable evidence<\/span><\/li>\n
                                        4. <\/b> Assume automated transactions require no audit testing<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 3. Evaluate authorization, segregation of duties, master data, system access, reconciliations, unusual transactions, and exception handling using reliable evidence<\/b><\/p>\n

                                          Explanation:<\/b><\/p>\n

                                          Transaction-processing assurance requires an integrated assessment of how transactions are initiated, authorized, processed, recorded, safeguarded, and reviewed. Internal audit should consider both manual and automated controls, identify unusual transactions, evaluate access and segregation, and investigate significant exceptions. Reliable evidence and risk-based testing support conclusions about whether the process operates effectively.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full IIA IIA-CIA-Part2 Exam Dumps and Practice Test Dumps   Question 121. What is the primary purpose of reviewing segregation of duties during an internal audit engagement? Reduce the risk that one individual can initiate, authorize, record, and conceal inappropriate activity Eliminate all management review Ensure every department has the same staffing structure Replace […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/20544"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=20544"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/20544\/revisions"}],"predecessor-version":[{"id":20545,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/20544\/revisions\/20545"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=20544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=20544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=20544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}