CGAP Practice Test

CGAP Exam at a Glance

What changed for CGAP in 2026

• Oct 28, 2026: Eligibility changed to Discontinued; no new applications (previously Discontinued; no new applications (last exams by 30 June 2021)).^[2]
• Oct 28, 2026: Registration deadline changed to 31 December each year (previously Annual renewal due 31 December).^[1]
• Oct 28, 2026: Renewal changed to 20 CPE hours per year (previously 20 CPE hours per year (practicing holders)).^[3]
• Oct 28, 2026: Validity changed to Valid for existing holders who maintain annual CPE requirements (previously Valid for existing holders who keep meeting annual CPE).^[2]

What the CGAP is and how it works

According to The Institute of Internal Auditors, “The IIA is no longer accepting CGAP/CFSA/CCSA program applications. Candidates already approved into the programs will be permitted to take the exams to obtain certification by 30 June 2021.”^[2]

The CGAP was offered by The Institute of Internal Auditors for auditors working in government and public-sector settings. The IIA is no longer accepting CGAP applications, so there is no new route into the certification. Only candidates who were already approved into the program could sit the exams, and that window has closed.

The CGAP is still a valid designation. Current holders keep their certified status and can keep using the designation as long as they meet continuous professional education requirements. That means 20 CPE hours per year. Annual certification renewal opens on 1 October and must be finished by 31 December each year.

There is no provision to recertify a discontinued certification. If a CGAP is revoked, for example because renewal was missed, it cannot be reinstated or retaken.

This page does not state the exam format, time limit, question count or passing score, because we have not verified them. If you need those details, or want to confirm your own renewal position, check the IIA's CGAP transition FAQs and its CPE requirements page.

The practice sets below are written by us with AI tools. They are not real exam questions. Use them to test your understanding of government auditing ideas, not to predict a score.

Worked examples: how to reason through CGAP questions

These are practice questions written for this site, not questions from the real exam. Each explanation shows why the right answer is right and why the others are wrong.

Example 1

Question: In a performance audit, 'audit criteria' refers to which of the following?

1. The monetary thresholds that trigger an audit
2. The benchmarks or standards used to evaluate audit findings
3. The list of documents the auditor must collect
4. The timeline for completing audit fieldwork

Answer: B. The benchmarks or standards used to evaluate audit findings

Explanation:

The correct answer is that audit criteria are the benchmarks or standards used to evaluate audit findings. In a performance audit you cannot say a program is doing well or badly without something to measure it against. Criteria supply that yardstick, such as laws, policies, or reasonable and attainable expectations for the activity.

Monetary thresholds that trigger an audit relate to selecting or scoping work, not to judging results. The list of documents to collect describes evidence gathering, which comes after criteria are set. The timeline for fieldwork is project planning and says nothing about what good performance looks like.

Rule to remember: criteria answer the question, what should be happening? Evidence shows what is happening. The finding is the gap between them.

Example 2

Question: Under the Single Audit Act, a 'major program' determination is significant because:

1. Major programs receive no federal funding oversight
2. Major programs must be audited in detail for compliance with federal requirements
3. Major programs are exempt from the schedule of expenditures of federal awards
4. Major programs require a separate audit firm from the financial audit

Answer: B. Major programs must be audited in detail for compliance with federal requirements

Explanation:

The correct answer is that major programs must be audited in detail for compliance with federal requirements. The Single Audit Act focuses compliance testing on the larger or riskier federal programs, so grant money is checked against the rules attached to it.

The claim that major programs receive no federal funding oversight is backwards, since they get the most attention. The claim that they are exempt from the schedule of expenditures of federal awards is also wrong, because that schedule is how federal spending is reported and how major programs are identified in the first place. Requiring a separate audit firm is invented; the major program work is part of the single audit, not a separate engagement.

Rule to remember: major program means detailed compliance testing.

Example 3

Question: The concept of 'materiality' in government auditing differs from private sector auditing primarily because:

1. Government auditors never use quantitative thresholds
2. Materiality may include qualitative factors such as sensitivity, visibility, or public interest
3. Government audit materiality is always set at 5% of total expenditures
4. Only financial statement users define materiality in government audits

Answer: B. Materiality may include qualitative factors such as sensitivity, visibility, or public interest

Explanation:

The correct answer is that materiality in government auditing may include qualitative factors such as sensitivity, visibility, or public interest. A small amount can matter a great deal when it involves public trust, legal compliance, or a politically visible program.

The statement that government auditors never use quantitative thresholds is wrong, because dollar amounts still matter and are a starting point. A fixed percentage of total expenditures that applies in every case is also wrong, since materiality is a matter of judgment for each engagement, not a universal formula. The claim that only financial statement users define materiality is too narrow, because legislators, citizens and oversight bodies also have legitimate interests.

Rule to remember: dollars are one input, and context and public interest can make a smaller item material.

How to use these practice tests

Because the CGAP is discontinued, decide first what you are studying for. If you hold the certification, your priority is keeping up your CPE hours and renewing in the window that opens on 1 October and closes on 31 December. If you are learning government auditing for your job or another credential, treat these sets as topic practice.

Start with the broad sets on auditing and corporate governance and types of auditing so the vocabulary is settled. Then move to the topic sets that match your daily work, such as audit planning and methodology, performance auditing, and internal controls and fraud detection.

After each set, reread every question you missed and write down the rule behind the right answer in your own words. Group your misses by topic, then return to the weakest group with government financial management or public sector compliance before taking the mixed MCQ set.

Use the IIA's own pages for anything about status, renewal or standards, since our questions are AI-assisted practice material and not a substitute for them.

Sources & last verified

1. The Institute of Internal Auditors — retake policy, registration deadline (official source). “There is no provision to recertify for discontinued (CCSA, CFSA, CGAP and QIAL) certification programs.” Verified Oct 28, 2026.
2. The Institute of Internal Auditors — validity, eligibility (official source). “The CGAP remains a valid designation, and current CGAP certification holders retain “certified” status and continue using the designation as long as they meet continuous…” Verified Oct 28, 2026.
3. The Institute of Internal Auditors — renewal, registration opens (official source). “CCSA, CGAP, CFSA, CRMA, and/or QIAL: 20 CPE Hours” Verified Oct 28, 2026.

How we verify: editorial & fact-checking policy. Report an error: contact us.