Certification in Risk Management Assurance (CRMA) Exam IIA-CRMA Dumps | DumpsBase 2021
Certification in Risk Management Assurance (CRMA) Exam is so great, which help you step in IT area. DumpsBase today, released Certification in Risk Management Assurance (CRMA) Exam IIA-CRMA Dumps online for your preparation, then you can take Certification in Risk Management Assurance (CRMA) Exam IIA-CRMA successfully and achieve the certification. When reading the IIA-CRMA exam details at DumpsBase, you can find there are 283 practice exam questions and answers in IIA-CRMA pdf file. We can be sure that, once you read all IIA-CRMA exam dumps questions with the pdf file and free dumps, you can gave actual CRMA IIA certification exam successfully.
What can you prove if you earn the IIA-CRMA Certification in Risk Management Assurance (CRMA) certification?
Certification in Risk Management Assurance (CRMA) IIA-CRMA certification focus on the key elements to unlocking internal audit’s full potential, and validates one’s ability to provide advice and assurance on risk management to audit committees and executive management. Generally, once you earn the Certification in Risk Management Assurance (CRMA), it helps address the impact of risk and demonstrates you have the ability to:
● Provide assurance on core business processes in risk management and governance.
● Educate management and the audit committee on risk and risk management concepts.
● Offer quality assurance and control self-assessment.
● Focus on strategic organizational risks.
● Add value for your organization as a trusted advisor.
● Increase earning potential by up to 51 percent.
What are the IIA-CRMA exam syllabus?
It is recommended to read IIA-CRMA exam syllabus before taking actual Certification in Risk Management Assurance (CRMA) exam:
Domain I: Internal Audit Roles and Responsibilities 20%
● Roles and Competencies
● Coordination
Domain II: Risk Management Governance 25%
● Governance, Risk Management, and Control Frameworks
● Risk Management Integration
Domain III: Risk Management Assurance 55%
● Risk Management Approach
● Assurance Processes
● Communication
DumpsBase Certification in Risk Management Assurance (CRMA) Exam IIA-CRMA Dumps are based on the latest IIA-CRMA exam syllabus. With the great Certification in Risk Management Assurance (CRMA) Exam IIA-CRMA Dumps, you will easily get the favor of executives and successfully enter the gates of famous companies. Here, you can read IIA-CRMA free dumps online before getting DumpsBase valid IIA-CRMA dumps questions.
Allegations have been made that an organization's share price has been manipulated.
Which of the following would provide an internal auditor with the most objective evidence in this case?
A. Major shareholders of the organization.
B. Large customers of the organization.
C. Former members of management.
D. Former financial consultants.
Answer: D
Which of the following is not a standard technique that the chief audit executive (CAE) would use to provide evidence of supervisory review of working papers?
A. The CAE initials and dates every working paper after it has been reviewed.
B. The CAE completes an engagement working paper checklist.
C. The CAE prepares a memorandum discussing the results of the working paper review.
D. The CAE utilizes an external third party to make an objective recommendation after each working paper review.
Answer: D
Which of the following best ensures an internal audit activity has the ability to render impartial and unbiased assessments?
A. Organizational status and objectivity.
B. Supervision of the chief audit executive (CAE) by senior management.
C. Organizational knowledge and skills.
D. CAE certification.
Answer: A
According to the Standards, for how long should internal auditors who have previously performed or had management responsibility for an operation wait to become involved in future internal audit activity with that same operation?
A. Three months.
B. Six months.
C. One year.
D. Two years.
Answer: C
According to IIA guidance, which of the following is the best example of a system application control?
A. A physical security control over a data center.
B. A system development life cycle control.
C. A program change management control.
D. An input control over data integrity.
Answer: D
Which of the following would not be a red flag for fraud?
A. Several recent, large expenditures to a new vendor have not been documented.
B. A manager has bragged about multiple extravagant vacations taken within the last year, which are excessive relative to the manager's salary.
C. A weak control environment has been accepted by management to encourage creativity.
D. New employees occasionally fail to meet established project deadlines due to staffing shortages.
Answer: D
After being terminated due to downsizing, an internal auditor finds a different job with an organization in the same industry.
Which of the following actions would violate the IIA Code of Ethics?
A. To determine audit priorities in the new job, the auditor uses the audit risk approach that the auditor's previous employer used, without receiving permission to do so.
B. At the new organization, the auditor is asked to develop forms to implement probability-proportional-to-size sampling. Although unsure of how to perform this type of sampling, the auditor proceeds without asking for assistance.
C. In preparing for an audit at the previous organization, the auditor had conducted a great deal of research on the Internet at home to identify best practices for the management of a treasury function. The auditor has retained much of the research and uses it to conduct an audit of the new employer's treasury function.
D. In the first week at the new organization, the auditor discovers a high fraud risk surrounding the organization's database and suggests that the information technology department implement a new password system to prevent fraudulent actions before they occur.
Answer: B
Which of the following best describes the assessment of risks?
A. Assess the actions necessary to reduce the likelihood and/or impact of risk to tolerable levels.
B. Assess the likelihood and/or impact of risk on the achievement of organizational objectives.
C. Assess the amount of risk an organization can accept while pursuing its objectives.
D. Assess alternative strategies to reduce or eliminate major risks.
Answer: B
An organization has implemented a new automated payroll system that contains a table of pay rates that are matched to employee job classifications.
Which control should an internal auditor suggest in order to ensure that the table is updated correctly, and is used only for valid pay changes?
A. Restrict data-table access from management and line supervisors who have the authority to determine pay rates.
B. Require a supervisor in the department, who has the ability to change the table, to compare the changes to a signed management authorization.
C. Ensure that adequate edit and reasonableness checks are built into the automated system.
D. Require a manager, who is independent of the system and who cannot change the table, to authorize and sign-off on any employee pay changes.
Answer: D
According to the Standards, which of the following is not a consideration when exercising due professional care for an assurance engagement?
A. The relative complexity, materiality, or significance of matters to which assurance procedures are applied.
B. The extent of assurance services necessary to ensure that all risks are identified.
C. The cost of providing the assurance services in relation to potential benefits.
D. The probability of significant errors, irregularities or instances of noncompliance.
Answer: B
According to IIA guidance, which of the following statements is true?
A. Risks in IT processes are best mitigated by individual controls.
B. The overall focus of the framework is on significant controls in all critical IT applications.
C. IT risks and related controls are operational and best identified using a bottom-up approach.
D. Control process risks are found at multiple layers of the IT environment.
Answer: D
Which of the following is not an appropriate activity for internal auditors to perform?
A. Recommend management seek a consulting firm to advise on outsourcing.
B. Highlight matters that require management's attention.
C. Implement solutions for specific organizational problems.
D. Accumulate data, obtain varying views, and report information to senior management.
Answer: C
While reviewing first quarter sales transactions, an internal auditor discovered that 10 invoices for a new customer had not been posted into the accounts receivable subsidiary ledger. Those 10 invoices were listed in an error report automatically generated by the sales processing system. The system had rejected the invoices because the customer's account number was not found in the customer master file.
In this scenario, which of the following controls was lacking?
A. Corrective control.
B. Preventive control.
C. Detective control.
D. Directive control.
Answer: A
A candidate has applied for an entry level internal audit position. The candidate holds a CISA (Certified Information Systems Auditor) designation, and has six months of audit experience, but limited knowledge of accounting principles and techniques.
According to the IIA guidance, which of the following is the most relevant reason for the chief audit executive to consider this candidate?
A. Other internal auditors possess sufficient knowledge of accounting principles and techniques.
B. The candidate's information systems knowledge and real-world experience in internal auditing.
C. Accounting skills can be learned over time with appropriate training.
D. An entry level position does not require expertise in any particular area.
Answer: B
Which of the following actions indicates a lack of due professional care by an internal auditor performing an audit of a store's cash function?
A. The audit report included a well-supported recommendation for a reduction in staff even though such a reduction might adversely impact morale.
B. The auditor tested samples of transactions to test the cash function's process flows.
C. After determining that the cash function internal controls were strong, the audit report assured senior management that fraud was not present.
D. The auditor discovered an instance of potential fraud and reported it immediately to management, but did not alert authorities outside the organization.
Answer: C
