According to IIA guidance, which of the following statements describes one of the similarities between assurance and consulting services?

• A.When planning assurance and consulting engagements, internal auditors must consider the strategies and objectives of the activity being reviewed.
• B.Both assurance and consulting services generally involve the internal auditor, the area under review, senior management, and the board.
• C.Internal auditors determine the engagement objectives, scope, and work program for both assurance and consulting services.
• D.Internal auditors must not provide assurance or consulting services for an activity for which they had responsibility within the previous year.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would provide the best evidence of errors in the quantities of items received from suppliers?

• A.Observation and inspection of inventory.
• B.Purchase requisitions and purchase orders.
• C.Warehouse receiving logs.
• D.Suppliers' reports of over shipments.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is not a role of the internal audit activity in facilitating risk identification and evaluation?

• A.Supporting managers to identify ways to mitigate risks.
• B.Recommending accountability for risk management.
• C.Providing assurance that risks are evaluated correctly.
• D.Evaluating risk management processes.

Comment: *

Name: *

Email: *

Verification: *

While attending a conference, an internal auditor won an all-expense paid trip sponsored by a vendor of the internal auditor's organization.
Which of the following actions are most appropriate for the auditor to take?

• A.Consult with an immediate supervisor and review the organization's ethics policy.
• B.Give the prize to a friend or family member and notitfy the organization's audit committee.
• C.Give the prize to a friend or family member and review the organization's ethics policy.
• D.Consult with an immediate supervisor and notify the organization's audit committee.

Comment: *

Name: *

Email: *

Verification: *

What type of risk management strategy is being employed when an organization installs two firewalls to provide protection from unauthorized access to the network?

• A.Diversifying the risk that network access will not be available to legitimate, authorized users.
• B.Accepting the risk that there may be attempts at unauthorized access to the network.
• C.Sharing the risk that either firewall could be compromised by hackers.
• D.Avoiding the risk of having a direct network connection to un-trusted networks.

Comment: *

Name: *

Email: *

Verification: *