CIA Part 1 practice questions

1. 01

   Organizational independence

   Question 1. The chief audit executive reports audit findings only to the manager responsible for the activities being audited. Which change best supports organizational independence?

   Answer to question 1

   AA. Let that manager select all audit findingsBB. Establish direct access and appropriate functional reporting to the boardCC. Eliminate communication with senior managementDD. Outsource report formatting

   Check answerExplanation after you answer
2. 02

   Individual objectivity

   Question 2. An internal auditor is assigned to review a process she recently managed. What should she do before accepting the assignment?

   Answer to question 2

   AA. Assume familiarity removes any objectivity concernBB. Avoid mentioning the previous roleCC. Disclose the potential impairment so an appropriate assignment can be madeDD. Ask former colleagues to approve her conclusions

   Check answerExplanation after you answer
3. 03

   Risk ownership

   Question 3. Internal audit identifies a significant cyber risk and recommends stronger access controls. Who ordinarily owns the decision to implement the controls and manage the risk?

   Answer to question 3

   AA. Management responsible for the activityBB. The external auditorCC. The audit staff member who wrote the findingDD. The audit software provider

   Check answerExplanation after you answer
4. 04

   Preventive controls

   Question 4. Which purchasing control is primarily preventive?

   Answer to question 4

   AA. Reviewing duplicate-payment reports after month-endBB. Investigating an unexplained cash differenceCC. Reconciling the bank balance after payments clearDD. Requiring independent approval before a new supplier can be paid

   Check answerExplanation after you answer
5. 05

   Residual risk

   Question 5. A process has significant fraud exposure before controls. After controls are applied, some exposure remains. What is the remaining exposure called?

   Answer to question 5

   AA. Inherent riskBB. Residual riskCC. Sampling riskDD. Audit scope

   Check answerExplanation after you answer
6. 06

   Fraud indicators

   Question 6. An employee can create suppliers, approve invoices, and release payments without independent review. What is the strongest concern?

   Answer to question 6

   AA. The process has too many independent controlsBB. Payment speed is necessarily too slowCC. One person can initiate and conceal an unauthorized paymentDD. Every supplier must already be fictitious

   Check answerExplanation after you answer
7. 07

   Confidentiality

   Question 7. An auditor receives sensitive employee information for an engagement. A colleague outside the engagement asks for it out of curiosity. What is the best response?

   Answer to question 7

   AA. Share it because both work for the organizationBB. Post it in a general team channelCC. Send it after removing the report title onlyDD. Limit access to authorized people with a legitimate need

   Check answerExplanation after you answer
8. 08

   Professional skepticism

   Question 8. A process owner says all exceptions were resolved but supplies no support. What should the auditor do?

   Answer to question 8

   AA. Obtain and evaluate evidence of the claimed resolutionBB. Treat the statement as sufficient because the owner is seniorCC. Assume deliberate fraud immediatelyDD. Delete the exceptions from the workpapers

   Check answerExplanation after you answer
9. 09

   Governance

   Question 9. Which activity is most clearly a board oversight responsibility rather than day-to-day management?

   Answer to question 9

   AA. Approving each routine supplier invoiceBB. Preparing every bank reconciliationCC. Overseeing the organization's governance and risk managementDD. Entering customer orders

   Check answerExplanation after you answer
10. 10

    Control limitations

    Question 10. A control normally requires two approvals, but two employees collude to approve fictitious transactions. What limitation does this illustrate?

    Answer to question 10

    AA. Controls eliminate all risk when documentedBB. Collusion can circumvent segregation of dutiesCC. Detection risk equals zeroDD. Only automated controls can ever be bypassed

    Check answerExplanation after you answer

Original CIA teaching samples, separate from the printable PDFs. Independently authored practice, not official exam items. This short set is for learning and does not predict an exam score.