Internal Auditor

A An unauthorized attack on a live system B A review of invoices for duplicate amounts C A calculation of inventory turnover D Authorized simulated attacks to assess whether security weaknesses can be exploited

A A plan for setting sales prices B Defined procedures for identifying, containing, investigating, and recovering from security incidents C A list of audit report recipients D A method for reconciling bank accounts

A A completed backup test B A routine approved data transfer C Unauthorized access, disclosure, loss, or other compromise of personal information D A normal supplier payment

A A rule requiring all records to be kept forever B A list of current assets C A method of calculating depreciation D Rules for how long records are kept and when they are securely disposed of

A To allow any employee to change findings B To avoid evidence of work performed C To publish sensitive information D To protect confidentiality, integrity, availability, and compliance with retention requirements

A A personal or financial interest that could impair impartiality in an engagement B A normal discussion with management C A documented risk assessment D A difference between planned and actual audit hours

A Approve the process before testing it B Hide the prior responsibility C Disclose the impairment and follow safeguards or reassignment procedures D Ignore independence requirements

A Only if they issue an external audit opinion B Yes, and they should take ownership of every control C Yes, if the work is appropriately scoped and does not impair objectivity or assume management responsibility D No, internal auditors can never provide advice

A A management decision to accept every risk B An objective assessment intended to increase confidence in governance, risk management, or control processes C A guarantee that the organization will succeed D A promise that no future error will occur

A A process of approving transactions B An external statutory audit opinion C Advisory services agreed with stakeholders that add value without the auditor assuming management responsibility D A requirement to prepare the general ledger