Free CIA exam tool · IA QuickTools
CIA practice questions that teach, not just test.
One hundred and fifty-six original questions written to the 2025 CIA syllabus across all three parts, each with a full rationale and a link to the guide on this site that covers it. Study mode explains every answer as you go; exam mode runs the real clock at 72 seconds a question and shows you where you stand by domain. Free, no signup, and your progress stays in your browser.
- ✎ 156 original questions
- 2025 syllabus · Parts 1, 2 and 3
- ⏱ Real exam pacing
- Rationale on every answer
- 🔒 Progress stays on your device
CIA Practice Question Bank · free · nothing to set up
Loading the question bank… If this message does not go away, your browser is blocking scripts on this page.
How it works
Built the way the exam is built.
Study mode is for learning: choose a part and, if you like, a single domain, answer, and read why the right answer is right and the others are not before moving on. Exam mode is for readiness: the clock runs, you can flag and skip, and the results page shows your score by domain, an indicative scaled score, the time you used against the exam pace, and every missed question with its rationale. Retry the ones you missed, or start a fresh set that leans toward the questions you have not seen.
What is in the bank
Every domain of the 2025 syllabus, in its weight.
The IIA replaced the CIA syllabus in 2025, with English exams on the new syllabus from 28 May 2025. The three parts, their domains and weights are below, with the number of questions the bank holds for each. Exam mode allocates a set in these proportions, so a 50-question Part 1 set gives you roughly 17 questions on foundations, 10 on ethics, 15 on governance, risk and control and 8 on fraud, the same balance you will meet on the day.
| Part and domain | Exam weight | Questions here | What it tests |
|---|---|---|---|
| Part 1: Internal Audit Fundamentals — 125 questions, 150 minutes | 60 | ||
| Foundations of Internal Auditing | 35% | 21 | Purpose, mandate and charter, the structure of the Global Internal Audit Standards, independence, assurance versus advisory, the Three Lines Model, Topical Requirements |
| Ethics and Professionalism | 20% | 12 | Integrity and courage, objectivity and its impairments, competency and development, due professional care and skepticism, confidentiality |
| Governance, Risk Management, and Control | 30% | 18 | COSO internal control and ERM, appetite and tolerance, inherent and residual risk, control types, segregation of duties, IT general and application controls, culture |
| Fraud Risks | 15% | 9 | The fraud triangle and the ACFE fraud tree, red flags, the auditor’s responsibility, response protocol, controls over specific schemes |
| Part 2: Internal Audit Engagement — 100 questions, 120 minutes | 48 | ||
| Engagement Planning | 50% | 24 | Engagement risk assessment, objectives and scope, criteria, resources, work programs, walkthroughs, sampling decisions, reliance on others, Topical Requirements in scope |
| Information Gathering, Analysis, and Evaluation | 40% | 19 | Evidence quality and hierarchy, analytics, sampling evaluation, information produced by the entity, the elements of a finding, cause and effect, documentation |
| Engagement Supervision and Communication | 10% | 5 | Supervision and review, communicating during the engagement, handling disagreement at the closing meeting |
| Part 3: Internal Audit Function — 100 questions, 120 minutes | 48 | ||
| Internal Audit Operations | 25% | 12 | Strategy, methodologies, financial, human and technological resources, stakeholder relationships, effective communication, performance measurement, board reporting |
| Internal Audit Plan | 15% | 8 | Risk-based planning, the audit universe, updating the plan, plan limitations, coordination and reliance, capacity |
| Quality of the Internal Audit Function | 15% | 8 | The quality assurance and improvement program, internal and external assessments, the conformance statement, acting on results |
| Engagement Results and Monitoring | 45% | 20 | Final communications, conclusions and ratings, recommendations and action plans, errors and omissions, follow-up and confirming implementation, risk acceptance and escalation |
Every question is original. The IIA’s own questions are copyrighted and none appear here; what these share with the real exam is the format, the four-option structure, the mix of recall questions and scenario questions, and the habit of testing what the Standards actually say rather than what people assume they say. Each rationale cites the standard or framework it rests on and links to the guide on this site that teaches the topic in full, so a missed question turns into a reading assignment rather than a shrug. The indicative scaled score treats roughly 75 percent correct as the 600 pass mark; the IIA does not publish its conversion, so treat the number as a direction, not a prediction.
Questions candidates actually ask
Straight answers.
Are these real CIA exam questions?
No, and no honest free resource can offer those. The IIA’s exam questions are confidential and copyrighted, and candidates agree not to share them. Every question here was written for this site to the 2025 syllabus, in the exam’s format and at its level of difficulty. If a question here looks like one you saw on the exam, it is because both test the same requirement in the Standards, not because either was copied.
How is the scaled score estimated?
The real exam reports a scaled score from 250 to 750 with 600 needed to pass, and the IIA does not publish how raw scores convert. The estimate here treats about 75 percent correct as the pass mark and maps the rest linearly on either side. It is useful for seeing whether you are in the zone, and useless for predicting a result to the point. Aim to be consistently above 80 percent in timed sets before you sit.
How many questions should I do before the exam?
More than this bank holds. The major review courses carry between roughly 3,300 and 4,800 questions across the three parts, and candidates who pass typically work through most of their course’s bank, spending the last two weeks on timed sets and on re-reading the rationales for everything they missed. This bank is a free supplement of 156 questions built for learning, not a substitute for a full commercial question bank; use it to diagnose weak domains early and to rehearse the pacing. The CIA Study Planner schedules both, and the complete CIA exam guide sets out a study plan by part.
Does it cover the 2025 syllabus, or the old one?
The 2025 syllabus only: Part 1 Internal Audit Fundamentals, Part 2 Internal Audit Engagement, Part 3 Internal Audit Function, with the domains and weights in the table above, and the Global Internal Audit Standards as the reference framework. The old business acumen, information security, information technology and financial management domains of Part 3 are gone, and the questions here reflect that. The syllabus note applies in all languages once each language’s exam has transitioned; check the IIA’s page for the language you will test in.
Is my progress saved, and is it private?
Your answers, sessions and per-question history are saved in your browser’s local storage on the device you are using. Nothing is sent to this site or anyone else, which is why there is no login and why progress does not follow you between devices. Clearing your browser data clears it, and the reset button on the setup panel does the same on purpose.
Can I use it on my phone, and offline?
It is built mobile-first and works on any current phone browser; the large answer buttons and the palette were designed for thumbs. It needs to load once online; after that the page works until you close it. Keyboard shortcuts on a computer: 1 to 4 or A to D to answer, Enter to check or move on, F to flag, and the arrow keys to move between questions in exam mode.
I think a question is wrong. What should I do?
Tell us, with the question’s ID from the rationale and the reason, through the About page. Questions are written against the Standards as published and are re-read when the IIA changes anything, but a bank of this size will contain mistakes, and we would rather fix them than defend them.
Learn more
The questions send you to the guides. Start with these.
The CIA exam, explained
Eligibility, the three parts and their 2025 weights, fees and total cost, scoring, registration, study plans by part and by hours available, and every CIA article on this site in one directory.
Read the complete guide → Before you applyCIA exam requirements
Education and experience paths, the documents you upload, the three-year program window, and the traps that delay certification after you have passed.
Check your eligibility → BudgetWhat the CIA really costs
Every IIA fee for members and non-members, what the review courses charge, the retake and extension math, and five candidate budgets from $1,800 to $3,700.
See the numbers → DifficultyHow hard is the CIA exam?
The IIA’s published pass rates by part, the eight ways candidates fail, a study-hours matrix by experience, and a twelve-week first-attempt plan for each part.
Read the honest answer → Part 3Part 3 under the 2025 syllabus
The part that changed most: Internal Audit Function, with its four domains, what moved in from the old Part 2, and how to study for the chief audit executive’s perspective it now tests.
Study Part 3 → The sourceThe Global Internal Audit Standards, mapped
All five domains, fifteen principles and 52 standards, with what each requires and where it bites in practice. Most of the questions in this bank point here or to one of its five domain guides.
Open the reference map →The toolkit
Free tools from the same desk.
CIA Study Planner
A day-by-day plan for all three parts around your real calendar, every IIA deadline dated, readiness from your results here, and a calendar file for Google, Outlook or Apple.
Build my plan → PlanningRCM Workbench
Risk register, control matrix, design and operating test plans, issues log and team hours with a live residual-risk model. The planning half of every Part 2 question.
Open the Workbench → HabitsmyDayLog
A day log and time tracker built for auditors, with the gamified rank ladder that makes a 300-hour study plan feel like progress rather than a sentence.
Open myDayLog →