Which of the following controls could an internal auditor reasonably conclude is effective by observing the physical controls of a large server room?

According to MA guidance, which of the following gives the internal audit activity the authority to request supporting documentation for the invoices of a third-party service provider?

Which of the following actions is the internal audit activity best positioned within the organization to perform?

An internal audit team received the following feedback from operational management via a post-engagement survey "Management agrees with all audit findings However, the audit team did not consider our input on the best way to resolve the issues"
This feedback is an indication that the internal audit activity may need to improve which of the following interpersonal skills?

An internal auditor is assigned to conduct an audit of security for a local area network (LAN) in the finance department of the organization. Investment decisions, including the use of hedging strategies and financial derivatives, use data and financial models which run on the LAN. The LAN is also used to download data from the mainframe to assist in decisions. Which of the following should be considered outside the scope of this security audit engagement?