Free IMA CMA Part 1 (Financial Planning, Performance, and Analytics) Internal Controls Practice Questions
Internal Controls on CMA Part 1 covers the COSO Internal Control and Enterprise Risk Management frameworks, control activities and limitations, internal audit standards, systems controls and security measures, and the regulatory landscape including Sarbanes-Oxley §302 and §404, GDPR, and SOC reports. Risk identification and mitigation is the recurring theme.
141 questions53 easy58 medium30 hard2026 syllabus
Sample Questions
Question 1
Easy
A compensating control is BEST described as a control that:
🎉
Correct Answer: A
Solution
A is correct. A compensating control is a secondary control that mitigates risk when a primary control cannot operate as designed or is absent. For example, when a small accounting department cannot fully segregate cash receipts from recordkeeping, a daily supervisory review of the deposit slip against the cash receipts journal can serve as a compensating control that reduces the residual risk to an acceptable level.
Question 2
Medium
Which of the following is an example of an IT general control rather than an application control?
🎉
Correct Answer: B
Solution
B is correct. IT general controls (ITGCs) operate across the IT environment and include logical access security, change management, and computer operations. Restricting programmer or user access to production systems is a logical access control, a classic ITGC that supports the integrity of every application running in that environment. The other items are embedded in the input or processing logic of a specific application, making them application controls.
Question 3
Hard
A manufacturer is implementing a new ERP system. The internal audit team is designing controls across the application layer (input, processing, output) and the general IT controls (GITC) layer. Which of the following mappings of control to category and objective is correct?
🎉
Correct Answer: B
Solution
B is correct. A check digit is an algorithmic validation embedded in an input field (such as a customer or account number) that detects transposition and transcription errors at the point of data entry. It is an input application control whose objective is data accuracy at the application level.
FreeFellow was built by Jeffrey Ting, a credentialed actuary and CFA charterholder who has passed thirteen of the hardest exams in finance, all on his first attempt. He paid four-figure prep fees along the way.
So he started writing his own questions, then lessons, then mock exams, until it grew into a full prep platform covering 40 exams with more than 45,000 original practice questions.
01
Cost shouldn't decide who gets in.
A CFA charter, a CPA license, an actuarial credential. Each opens a real career, but prep fees add to the cost of getting there. FreeFellow keeps its original question bank and written lessons free so you can study even if a paid course is out of reach.
02
Free should mean free.
The original question bank, the worked solutions, the topic lessons, mixed practice, and your readiness score stay free, forever. Full access needs a free account, and practice usage limits apply. Fellow adds AI grading on supported exams, spaced-repetition flashcards, full-length mock exams, analytics, and a study plan that adapts to your progress.
