Absolute Free IIA-CIA-Part2 Exam Practice for Comprehensive Preparation 

When setting the scope for the identification and assessment of key risks and controls in a process, which of the following would be the least appropriate approach?

While conducting an information security audit, an internal auditor learns that the existing disaster recovery plan is four years old and untested. The auditor also learns that in the four years since the recovery plan was implemented, the information systems have undergone extensive changes. Which of the following actions is most appropriate for the auditor to take? 

An internal auditor is preparing an internal control questionnaire for the procurement department as part of a preliminary survey. Which of the following would provide the best source of information for questions?

An internal auditor plans to conduct a walk-through to evaluate the control design of a process. Which of the following techniques is the auditor most likely to use?

Which of the following is a primary reason for an internal auditor to use a risk and control questionnaire when auditing financial processes?