Online Access Free IIA.IIA-CRMA-ADV.v2023-07-19.q136 Practice Test (Page 8)

IIA-CRMA-ADV Exam Question 31

If an engagement client disputes that a specific action or process is within the scope of the internal audit activity, what would be the most appropriate way for the internal audit activity (IAA) to respond?

A.Terminate the audit engagement in full because an operational audit will not be productive without the client's cooperation.

B.Refer the client to the IAA's charter and the approved yearly audit plan, which includes the areas designated for audit in the current time period.

C.Terminate only the specific action or process with which the client disagrees and work to determine a substitute function that will not impede further IAA or the client-audit relationship.

D.Seek the approval of senior management or the board in mediation, allowing an overseer to clarify the scope of the audit engagement for the client.

IIA-CRMA-ADV Exam Question 32

A manufacturing organization discovers that the waste water released has failed to meet permitted limits.
Which control function will be least effective in correcting the issue?

A.Performing a chemical analysis of the water, prior to discharge, for components specified in the permit.

B.Establishing a preventive maintenance program for the pretreatment system.

C.Diluting pollutants by flushing sinks and floor drains daily with large volumes of clean water.

D.Posting signs that tell employees which substances may be disposed of via sinks and floor drains within the facility.

IIA-CRMA-ADV Exam Question 33

A multinational organization has asked the internal audit activity to assist in setting up the organization's risk management system. The chief audit executive (CAE) agrees to take on the engagement as a consultant.
Which of the following tasks is appropriate for the CAE to undertake?

A.Determine the number of significant risks for management to report to the board.

B.Set risk indicators and mitigation plans for management to implement.

C.Coordinate and facilitate risk workshops for management to attend.

D.Establish the degree of risk appetite for management to accept.

IIA-CRMA-ADV Exam Question 34

According to IIA guidance, which of the following is the best example of a system application control?

A.A physical security control over a data center.

B.A program change management control.

C.An input control over data integrity.

D.A system development life cycle control.

IIA-CRMA-ADV Exam Question 35

According to IIA guidance, which of the following statements regarding the internal audit charter is true?

A.The charter should define the consulting services that the internal audit activity is permitted to perform.

B.Senior management should approve the charter before it is submitted to the board.

C.The charter should describe the purpose and authority of the internal audit activity, consistent with the Standards.

D.The CEO periodically should assess whether the terms of the charter continue to be adequate.

Latest Upload: 150CompTIA.CY0-001.v2026-08-17.q54; 148PaloAltoNetworks.NetSec-Pro.v2026-08-17.q49; 158Microsoft.AB-210.v2026-08-15.q30; 294CuramSoftware.CS0-003.v2026-08-15.q217; 178PECB.ISO-14001-Lead-Auditor.v2026-08-14.q31; 403CompTIA.SY0-701.v2026-08-14.q385; 239CompTIA.XK0-006.v2026-08-14.q82; 188Cisco.700-250.v2026-08-14.q34; 420Cisco.300-420.v2026-08-13.q190; 532IIA.IIA-CIA-Part3-CN.v2026-08-13.q328

IIA-CRMA-ADV Exam Question 31

IIA-CRMA-ADV Exam Question 32

IIA-CRMA-ADV Exam Question 33

IIA-CRMA-ADV Exam Question 34

IIA-CRMA-ADV Exam Question 35

Download PDF File