Free IMA CMA Part 1 (Financial Planning, Performance, and Analytics) Internal Controls Practice Questions
Internal Controls on CMA Part 1 covers the COSO Internal Control and Enterprise Risk Management frameworks, control activities and limitations, internal audit standards, systems controls and security measures, and the regulatory landscape including Sarbanes-Oxley §302 and §404, GDPR, and SOC reports. Risk identification and mitigation is the recurring theme.
141 questions53 easy58 medium30 hard2026 syllabus
Sample Questions
Question 1
Easy
A compensating control is BEST described as a control that:
🎉
Correct Answer: C
Solution
C is correct. A compensating control is a secondary control that mitigates risk when a primary control cannot operate as designed or is absent. For example, when a small accounting department cannot fully segregate cash receipts from recordkeeping, a daily supervisory review of the deposit slip against the cash receipts journal can serve as a compensating control that reduces the residual risk to an acceptable level.
Question 2
Medium
Which of the following is an example of an IT general control rather than an application control?
🎉
Correct Answer: A
Solution
A is correct. IT general controls (ITGCs) operate across the IT environment and include logical access security, change management, and computer operations. Restricting programmer or user access to production systems is a logical access control, a classic ITGC that supports the integrity of every application running in that environment. The other items are embedded in the input or processing logic of a specific application, making them application controls.
Question 3
Hard
A manufacturer is implementing a new ERP system. The internal audit team is designing controls across the application layer (input, processing, output) and the general IT controls (GITC) layer. Which of the following mappings of control to category and objective is correct?
🎉
Correct Answer: A
Solution
A is correct. A check digit is an algorithmic validation embedded in an input field (such as a customer or account number) that detects transposition and transcription errors at the point of data entry. It is an input application control whose objective is data accuracy at the application level.
FreeFellow was built by Jeffrey Ting, a credentialed actuary and CFA charterholder who passed thirteen of the hardest exams in finance on the first attempt, and paid four-figure prep fees for every one. The learning itself was always free. The price was a moat.
So he started writing his own questions, then lessons, then mock exams, until it grew into a full prep platform covering 35 finance credentials with more than 40,000 original practice questions. The name says exactly what it is: the question bank is free, and Fellow is what you become once you pass.
01
Cost shouldn't decide who gets in.
The exam is a fair gate. A four-figure prep course is not. FreeFellow takes the second gate down, so the exam is the only one left.
02
Free should mean free.
No trial clock, no email gate, no credit card. The question bank, worked solutions, lessons, and readiness score stay free, and they are enough to pass.
03
Built by someone who sat where you sit.
He paid for the big-name courses, found nothing he respected, and built the prep he wished had existed. Not a marketing team that has never sat an exam.
