New Year Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

Note! Following IIA-CRMA Exam is Retired now. Please select the alternative replacement for your Exam Certification.

IIA-CRMA Exam Dumps - Certification in Risk Management Assurance (CRMA) Exam

Go to page:
Question # 33

According to IIA guidance, which of the following roles would be appropriate for an internal auditor regarding fraud risk?

1. Identification.

2. Mitigation.

3. Remediation.

4. Reduction.

A.

1 only. |

B.

1 and 4 only.

C.

1, 3, and 4 only.

D.

1,2, 3, and 4.

Full Access
Question # 34

Non-statistical sampling does not require which of the following?

A.

The sample to be representative of the population.

B.

The sample to be selected haphazardly.

C.

A smaller sample size than if selected using statistical sampling.

D.

Projecting the results to the population.

Full Access
Question # 35

An organization is beginning to implement an enterprise risk management program. One of the first steps is to develop a common risk language. Which of the following statements about a common risk language is true?

A.

Management will be able to reduce inherent risk because they will have a better understanding of risk.

B.

Internal auditors will be able to reduce their sample sizes because controls will be more consistent.

C.

Stakeholders will have more assurance that the risks are assessed consistently.

D.

Decision makers will understand that the likelihood of missing or ineffective controls will be reduced.

Full Access
Question # 36

Which of the following combinations of conditions is most likely a red flag for fraud?

A.

The practice of surprise audits and the implementation of an employee support program.

B.

Hiring an employee with a prior fraud conviction and yearly management review.

C.

Occasional accounting department overrides and discontinuation of the anonymous fraud hotline due to infrequent use.

D.

A veteran employee in upper management experiencing financial difficulties and recently implemented enhanced controls.

Full Access
Question # 37

According to IIA guidance, which of the following is the best example of a system application control?

A.

A physical security control over a data center.

B.

A system development life cycle control.

C.

A program change management control.

D.

An input control over data integrity.

Full Access
Question # 38

After being terminated due to downsizing, an internal auditor finds a different job with an organization in the same industry. Which of the following actions would violate the IIA Code of Ethics?

A.

To determine audit priorities in the new job, the auditor uses the audit risk approach that the auditor's previous employer used, without receiving permission to do so.

B.

At the new organization, the auditor is asked to develop forms to implement probability-proportional-to-size sampling. Although unsure of how to perform this type of sampling, the auditor proceeds without asking for assistance.

C.

In preparing for an audit at the previous organization, the auditor had conducted a great deal of research on the Internet at home to identify best practices for the management of a treasury function. The auditor has retained much of the research and uses it to conduct an audit of the new employer's treasury function.

D.

In the first week at the new organization, the auditor discovers a high fraud risk surrounding the organization's database and suggests that the information technology department implement a new password system to prevent fraudulent actions before they occur.

Full Access
Question # 39

Which of the following would not be a red flag for fraud?

A.

Several recent, large expenditures to a new vendor have not been documented.

B.

A manager has bragged about multiple extravagant vacations taken within the last year, which are excessive relative to the manager's salary.

C.

A weak control environment has been accepted by management to encourage creativity.

D.

New employees occasionally fail to meet established project deadlines due to staffing shortages.

Full Access
Question # 40

Which of the following controls is not appropriate for sales in a manufacturing organization?

A.

Customers' orders are recorded promptly.

B.

Goods shipped are matched with valid customer orders.

C.

Goods returned are inspected for damage by the receiving department for proper disposition.

D.

Sales department approval is required for credit sales transactions.

Full Access
Go to page: