IIA IIA-CRMA-ADV Actual Free Exam Questions & Community Discussion

Exam Code/Number: IIA-CRMA-ADV
Exam Name/Title: Certification in Risk Management Assurance
Certification Provider: IIA
Corresponding Certification: CRMA Certification

Exam Questions: 285
Updated On: Jun 03, 2026

Question #43

According to the Standards, for how long should internal auditors who have previously performed or had management responsibility for an operation wait to become involved in future internal audit activity with that same operation?

A. Two years.

B. One year.

C. Three months.

D. Six months.

Discussion 0

Correct Answer: B Vote an answer

Question #44

A headquarters-based internal auditor has been sent to a major overseas subsidiary to conduct various engagements. Initially, the internal auditor spends time to become familiar with local customs and organization's practices while embarking on the first engagement. Which of the following competencies does the internal auditor exercise?

A. Governance, risk, and control.

B. Persuasion and collaboration.

C. Business acumen.

D. Communication.

Discussion 0

Correct Answer: D Vote an answer

Question #45

Who is responsible for setting the risk appetite?

A. Chief risk officer.

B. Operations management.

C. External auditors.

D. Board of directors.

Discussion 0

Correct Answer: D Vote an answer

Question #46

Which of the following items should the chief audit executive disclose to senior management regarding the results of the internal audit activity's quality assessments?

A. The qualifications and independence of the assessment Team.

B. The internal audit activity's plan for resource allocation.

C. The number of audits from the annual internal audit plan that were completed last year.

D. The amount of the organization's potential loss prevented by the risk-based auditing of the internal audit activity.

Discussion 0

Correct Answer: D Vote an answer

Question #47

According to the HA Code of Ethics, which of the following statements best describes the principle of competency?

A. Internal auditors shall perform their work in accordance with the Standards.

B. Internal auditors shall perform their work with honesty, diligence, and responsibility.

C. Internal auditors shall perform their work in accordance with the law and make disclosures expected by the law.

D. Internal auditors shall be prudent in the use of information acquired while performing their work.

Discussion 0

Correct Answer: A Vote an answer

Question #48

Which type of objectives can best be described as broad goals that promote the effective and efficient use of resources?

A. Compliance objectives.

B. Reporting objectives.

C. Strategic objectives.

D. Operational objectives.

Discussion 0

Correct Answer: D Vote an answer

Question #49

Which of the following control activities is the most effective to ensure users' levels of access are appropriate for their current roles?

A. Standardized user access profiles are developed and the appropriate access profiles are automatically assigned to new or transferred employees.

B. Department managers are required to perform periodic user access reviews of relevant systems and applications.

C. System administrator rights are assigned to one user in each department who can update user access of terminated or transferred employees immediately.

D. The human resources department generates a monthly list of terminated and transferred employees and requests IT to update the user access as required.

Discussion 0

Correct Answer: B Vote an answer

Question #50

A new director was hired to lead the internal audit activity at a small start-up company. Which of the following assignments would impair the director's independence?

A. Preparing the financial statements for the company's defined contribution plan.

B. Performing a pre-implementation review of the company's payroll application.

C. Providing the COBIT framework as a possible IT management tool.

D. Reviewing the company's policy for foreign currency translation adjustments for compliance with accounting standards.

Discussion 0

Correct Answer: A Vote an answer

Question #51

Allegations have been made that an organization's share price has been manipulated.
Which of the following would provide an internal auditor with the most objective evidence in this case?

A. Former financial consultants.

B. Major shareholders of the organization.

C. Former members of management.

D. Large customers of the organization.

Discussion 0

Correct Answer: A Vote an answer

Question #52

Which of the following types of social responsibilities is voluntary and guided purely by the organization's desire to make social contributions?

A. Discretionary responsibility.

B. Ethical responsibility.

C. Innovative responsibility.

D. The bottom of the pyramid responsibility.

Discussion 0

Correct Answer: B Vote an answer

Question #53

What is the primary purpose of a fishbone diagram?

A. To depict the areas of responsibility for departments in an organization.

B. To represent the frequencies of adverse conditions in a given process.

C. To identify the possible causes of adverse conditions.

D. To plan and control complex projects, such as internal audits.

Discussion 0

Correct Answer: C Vote an answer

Question #54

According to IIA guidance, which of the following is the best example of a system application control?

A. A physical security control over a data center.

B. An input control over data integrity.

C. A program change management control.

D. A system development life cycle control.

Discussion 0

Correct Answer: B Vote an answer

Question #55

In which of the following scenarios would a customer service hotline receive a high volume of complaints regarding payments not being applied to customers' accounts?

A. An employee is tampering with customer checks.

B. Employees are submitting fraudulent expense reports.

C. The customer service department is not forwarding complaints to the accounts receivable department.

D. Invoices are not being mailed to customers.

Discussion 0

Correct Answer: A Vote an answer

Question #56

An internal auditor is reviewing employee travel data to identify opportunities to cut costs while ensuring adequate participation at conferences to support the organization's mission. Which of the following pieces of evidence would be sufficient for completing this task?

A. A log from the last year that includes dates of travel, conference titles, and conference objectives, all of which correspond with employee names and costs per trip.

B. A log of employee travel requests, which include the title of each conference, the conference objectives, anticipated dates of travel, and estimated costs.

C. A log that includes titles of conferences that all employees were invited to attend in the last year, along with the dates of those conferences and average costs per traveler.

D. A log of conferences titles, dates of travel for each employee, and a detailed summary of conference objectives and how they relate to the organization's mission needs.

Discussion 0

Correct Answer: A Vote an answer

Download Free IIA IIA-CRMA-ADV Demo

Simply submit your e-mail address below to get started with our free demo of your IIA IIA-CRMA-ADV exam.