Question 1

An IT contractor applied for an internal audit position at a bank. The contractor worked for the bank's IT security manager two years ago. If the audit manager interviewed the contractor and wants to extend a job offer, which of the following actions should the chief audit executive pursue?

Options :

A : Allow the audit manager to hire the contractor and state that the individual is free to perform IT audits, including security.

B : Not allow the audit manager to hire the contractor, as it would be a conflict of interest.

C : Allow the audit manager to hire the contractor, but state that the individual is not allowed to work on IT security audits for one year.

D : Not allow the audit manager to hire the contractor and ask the individual to apply again in one year.

Answer: A

Question 2

The critical path for any project is the path that exhibits which of the following characteristics?

Options :

A : Has the longest duration in time.

B : Costs the most money.

C : Requires the largest amount of labor

D : Is deemed most important to the project.

Answer: A

Question 3

When establishing a quality assurance and improvement program, the chief audit executive should ensure the program is designed to accomplish which of the following objectives?

1. Add value.

2. Improve operations.

3. Provide assurance that the internal audit activity conforms with the Standards.

4. Provide assurance that the internal audit activity conforms with the IIA Code of Ethics.

Options :

A : 1 only

B : 1 and 2 only

C : 1 and 3 only

D : 1, 2, 3, and 4

Answer: D

Question 4

Which of the following is not a barrier to effective communication?

Options :

A : Filtering.

B : Communication overload.

C : Similar frames of reference.

D : Lack of source credibility.

Answer: C

Question 5

Which of the following statements are true regarding the use of heat maps as risk assessment tools?

1. They focus primarily on known risks, limiting the ability to identify new risks.

2. They rely heavily on objective assessments and related risk tolerances.

3. They are too complex to provide an easily understandable view of key risks.

4. They are helpful but limited in value in a rapidly changing environment.

Options :

A : 1 and 2 only

B : 1 and 4 only

C : 2 and 3 only

D : 3 and 4 only

Answer: B