I85PREP
⌘ K
CBA study materials
CBA study resources

CBA (CNCF) practice questions

One question at a time. Build your CBA understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Audit Standards, Ethics, and Governance

Which body is responsible for issuing International Standards on Auditing (ISAs)?

  1. The International Ethics Standards Board for Accountants
  2. The International Auditing and Assurance Standards Board Correct answer.
  3. The Public Interest Oversight Board
  4. The International Federation of Accountants Council

Explanation

The IAASB is the independent standard-setting board that develops and issues ISAs and related assurance pronouncements under the IFAC umbrella. It follows a due process with public exposure and oversight by the Public Interest Oversight Board, but the standard-setting authority itself rests with the IAASB.

Question 2Audit Standards, Ethics, and Governance

Under the IESBA Code, which threat arises when an auditor has a close family member employed as a financial controller of the audit client?

  1. Self-interest threat
  2. Intimidation threat
  3. Advocacy threat
  4. Familiarity threat Correct answer.

Explanation

A familiarity threat occurs when a close relationship with a client makes an auditor too sympathetic to the client's interests or too accepting of its work. A close family member in a senior financial role at the client creates exactly this kind of sympathetic bias.

Question 3Audit Standards, Ethics, and Governance

What is the primary purpose of an engagement quality review (EQR) on an audit engagement?

  1. To satisfy the client's request for a second opinion on accounting matters
  2. To provide an objective evaluation of significant judgments made by the engagement team before the report is issued Correct answer.
  3. To serve as a substitute for the firm's system of quality management
  4. To reduce the amount of detailed testing the engagement team must perform

Explanation

An engagement quality review is an objective evaluation of the significant judgments and conclusions of the engagement team performed before the report is issued. It enhances confidence that the engagement complied with standards and applicable requirements, but it does not reduce the team's own work or replace the firm's quality management system.

Question 4Audit Standards, Ethics, and Governance

Which of the following best describes the concept of 'professional scepticism' in an audit?

  1. An attitude of questioning and alertness to conditions indicating possible misstatement or fraud Correct answer.
  2. A presumption that management's representations are unreliable unless corroborated by external evidence
  3. A requirement to obtain absolute assurance that the financial statements are free of error
  4. A duty to accept management's explanations unless contradictory evidence is presented

Explanation

Professional scepticism is an attitude that includes a questioning mind, being alert to conditions indicating possible misstatement due to error or fraud, and a critical assessment of evidence. It is not a presumption of dishonesty and does not change the audit's reasonable, rather than absolute, assurance level.

Question 5Audit Standards, Ethics, and Governance

Which element is necessary for an auditor to be considered independent in appearance as well as in fact?

  1. The auditor must have served the client for at least three consecutive years to build familiarity
  2. The auditor must obtain the client's written approval of the audit plan before fieldwork begins
  3. The auditor must hold a minority shareholding in the client to demonstrate alignment of interests
  4. The auditor must avoid circumstances that a reasonable informed third party would perceive as compromising objectivity Correct answer.

Explanation

Independence in appearance requires avoiding relationships or circumstances that a reasonable and informed third party would conclude compromise objectivity. Independence in fact refers to the auditor's actual state of mind, while appearance concerns external perception.

Question 6Audit Standards, Ethics, and Governance

What does 'sufficient appropriate audit evidence' mean in the context of an audit?

  1. Evidence that has been reviewed by the client's internal audit function
  2. Evidence that is collected only after the financial statements are finalized
  3. Evidence that is both quantitative in volume and relevant and reliable in quality Correct answer.
  4. Evidence that is obtained exclusively from external third parties

Explanation

Sufficiency is the measure of the quantity of audit evidence, while appropriateness is the measure of its quality, meaning its relevance and reliability. The auditor must obtain enough evidence of the right quality to support the audit opinion.

Question 7Audit Standards, Ethics, and Governance

Which of the following is an example of a governance responsibility typically assigned to those charged with governance of an entity?

  1. Performing substantive testing of the entity's inventory balances
  2. Issuing the independent auditor's report on the financial statements
  3. Preparing the detailed audit working papers for the external auditor
  4. Overseeing the financial reporting process and the external audit relationship Correct answer.

Explanation

Those charged with governance are responsible for overseeing the entity's strategic direction and accountability, including oversight of financial reporting and the relationship with the external auditor. They do not perform audit procedures or prepare the auditor's working papers.

Question 8Audit Standards, Ethics, and Governance

Which of the following best describes the auditor's responsibility when there is an indication of non-compliance with laws and regulations that could materially affect the financial statements?

  1. The auditor should ignore the matter unless management voluntarily discloses it in writing
  2. The auditor should report the matter directly to the police without informing management
  3. The auditor should obtain an understanding of the matter and evaluate its effect on the financial statements and audit report Correct answer.
  4. The auditor should withdraw from the engagement immediately in all circumstances

Explanation

When non-compliance is identified or suspected, the auditor must understand the nature of the act, evaluate its implications for the financial statements and the audit report, and communicate appropriately. Withdrawal or external reporting is considered only in specified circumstances after considering legal and ethical obligations.

Question 9Audit Standards, Ethics, and Governance

A firm's audit partner owns shares in a mutual fund that holds a small, immaterial investment in an audit client. Under the IESBA Code, what is the most appropriate initial consideration?

  1. The partner must resign from the firm immediately to preserve independence
  2. Any indirect financial interest automatically impairs independence regardless of materiality or control
  3. The indirect financial interest generally does not create an independence issue if it is immaterial and the partner has no control over the investment decisions Correct answer.
  4. The firm must disclose the interest to the client but may continue the audit without further action

Explanation

Indirect financial interests, such as holdings through a diversified mutual fund, are generally evaluated for materiality and the degree of control the auditor has over investment decisions. If the interest is immaterial and the auditor does not direct the fund's investments, independence is typically not impaired.

Question 10Audit Standards, Ethics, and Governance

An audit senior is offered a significant discount on a personal mortgage by the audit client, a bank. Which ethical principle is most directly threatened?

  1. Professional competence and due care
  2. Professional behaviour
  3. Objectivity Correct answer.
  4. Confidentiality

Explanation

Accepting a significant favour from a client creates a self-interest threat that can compromise objectivity, because the auditor may be reluctant to challenge the client's positions. Objectivity requires the auditor not to compromise professional judgment because of bias, conflict of interest, or undue influence.

Question 11Audit Standards, Ethics, and Governance

Which of the following best describes the auditor's documentation requirement under ISA 230 for significant matters?

  1. The auditor must record only the final conclusions reached, without the reasoning behind them
  2. The auditor must retain documentation for a minimum of twenty years in all jurisdictions
  3. The auditor must provide copies of all working papers to the client upon request
  4. The auditor must document the significant matters, the conclusions reached, and the significant professional judgments made in reaching them Correct answer.

Explanation

ISA 230 requires the auditor to document significant matters arising during the audit, the conclusions reached, and the significant professional judgments made in reaching those conclusions. This enables an experienced auditor with no previous connection to the engagement to understand the work performed.

Question 12Audit Standards, Ethics, and Governance

During an audit, the engagement partner learns that the firm's tax department is providing aggressive tax structuring advice to the same client. What is the most appropriate response?

  1. Immediately resign from the audit engagement without further assessment
  2. Ignore the matter because tax services are outside the scope of the audit
  3. Require the client to terminate the tax engagement before any audit work continues
  4. Evaluate whether the tax service creates a self-review or advocacy threat and apply safeguards or decline the service Correct answer.

Explanation

Providing non-assurance services to an audit client can create self-review or advocacy threats, particularly when the advice affects amounts recorded in the financial statements. The firm must evaluate the significance of the threat and apply safeguards, or decline or terminate the service if the threat cannot be reduced to an acceptable level.

Question 13Audit Standards, Ethics, and Governance

Which of the following is the best example of a governance control that supports the reliability of financial reporting?

  1. A production supervisor who monitors machine downtime
  2. An independent audit committee that reviews significant accounting judgments and oversees the external auditor Correct answer.
  3. A sales manager who approves customer credit limits
  4. An accounts payable clerk who reconciles the bank statement

Explanation

An independent audit committee is a governance-level control that oversees financial reporting, internal control, and the external audit relationship. Governance controls operate at the top of the entity and set the tone for reliable reporting.

Question 14Audit Standards, Ethics, and Governance

An auditor identifies that the client's management has overridden a key internal control to accelerate revenue recognition at year-end. Which response is most appropriate?

  1. Reduce the extent of substantive testing because management has explained the override
  2. Rely on management's written representation that the override was a one-time event
  3. Re-evaluate the risk of material misstatement due to fraud and design additional audit procedures to address management override Correct answer.
  4. Conclude that the financial statements are fairly presented without further work

Explanation

Management override of controls is a significant fraud risk that requires the auditor to reassess the risk of material misstatement and respond with additional or modified procedures. Written representations alone are not sufficient audit evidence to address this risk.

Question 15Audit Standards, Ethics, and Governance

What is the primary role of the auditor when communicating with those charged with governance under ISA 260?

  1. To delegate responsibility for the audit to the governance body
  2. To obtain governance approval for the audit opinion before it is issued
  3. To communicate matters of governance interest arising from the audit, including significant findings and difficulties encountered Correct answer.
  4. To provide a guarantee that no fraud has occurred

Explanation

ISA 260 requires the auditor to communicate clearly with those charged with governance the auditor's responsibilities, planned scope and timing, and significant findings from the audit. The communication supports effective two-way dialogue but does not transfer responsibility for the audit or the financial statements.

Question 16Audit Standards, Ethics, and Governance

An auditor is evaluating whether a client's accounting estimate is reasonable. Which approach best reflects professional scepticism?

  1. Accepting management's estimate because it was prepared by a qualified accountant
  2. Adopting management's estimate without change to avoid conflict
  3. Relying solely on the prior year's estimate as the benchmark
  4. Challenging the assumptions and considering alternative outcomes and contrary evidence Correct answer.

Explanation

Professional scepticism requires the auditor to critically assess management's assumptions, consider alternative outcomes, and evaluate whether the evidence supports the estimate. Accepting an estimate merely because a qualified person prepared it does not constitute sufficient challenge.

Question 17Audit Standards, Ethics, and Governance

Which of the following circumstances most likely creates a self-review threat to independence?

  1. The audit firm leases office space from an unrelated third party
  2. The audit firm attends the client's annual general meeting as an observer
  3. The audit firm provides a copy of an auditing standard to the client's finance team
  4. The audit firm prepares the source data used to generate a material journal entry that it will later audit Correct answer.

Explanation

A self-review threat arises when the auditor evaluates the results of previous work performed by the firm or its personnel, such as preparing data that later becomes the subject of audit testing. The auditor would effectively be reviewing its own output.

Question 18Audit Standards, Ethics, and Governance

Under a firm's system of quality management, which of the following is a monitoring activity?

  1. Obtaining the client's signature on the engagement letter
  2. Assigning engagement staff to the audit team based on competence and availability
  3. Calculating the audit fee based on estimated hours
  4. Inspecting completed engagements to evaluate compliance with the firm's policies and applicable standards Correct answer.

Explanation

Monitoring involves the firm's ongoing evaluation of its system of quality management, including inspection of completed engagements to assess whether policies and standards were followed. Staffing, engagement acceptance, and fee determination are other components of the system, not monitoring.

Question 19Audit Standards, Ethics, and Governance

An auditor discovers that a client has failed to comply with a law whose breach could result in material fines. Management refuses to record a provision. What should the auditor do first?

  1. Withdraw from the engagement and return the audit fee
  2. Issue an unmodified opinion because the breach is a legal matter for management
  3. Immediately report the matter to the regulator without further discussion
  4. Discuss the matter with those charged with governance and consider the effect on the financial statements and audit opinion Correct answer.

Explanation

The auditor should evaluate the effect of the non-compliance on the financial statements and communicate with those charged with governance as appropriate. The effect on the audit opinion and any further reporting obligations are then determined based on the circumstances and applicable law.

Question 20Audit Standards, Ethics, and Governance

Which of the following best explains why the auditor's report includes a description of key audit matters (KAMs) for listed entities?

  1. To replace the need for a basis for opinion paragraph
  2. To reduce the auditor's responsibility for the opinion expressed
  3. To provide transparency about the matters that were of most significance in the audit Correct answer.
  4. To disclose every misstatement identified during the audit

Explanation

Key audit matters are those matters that, in the auditor's professional judgment, were of most significance in the audit of the current period's financial statements. Communicating them increases the transparency of the audit and the user's understanding of the entity.

Question 21Audit Standards, Ethics, and Governance

A partner has been the engagement partner on the same listed client's audit for six consecutive years. Which safeguard is most consistent with the IESBA Code's approach to familiarity threats?

  1. Extending the engagement partner's tenure indefinitely with client consent
  2. Rotating the engagement partner off the engagement after a defined period Correct answer.
  3. Reducing the level of substantive testing because of accumulated knowledge
  4. Increasing the audit fee to reflect the additional experience

Explanation

Long association with a listed audit client can create a familiarity threat, and partner rotation after a defined period is a recognized safeguard. The firm must also consider the cooling-off period before the partner can return to the engagement.

Question 22Audit Standards, Ethics, and Governance

An audit firm is asked to provide a valuation of a material intangible asset that will be recorded in the client's financial statements, and the firm will also audit those statements. Which conclusion is most appropriate under the IESBA Code?

  1. The service is permitted only if the fee is disclosed in the auditor's report
  2. The service is permitted provided the client signs a representation letter
  3. The service creates a self-review threat that may be so significant that the firm should decline the engagement Correct answer.
  4. The service is always permitted because valuation is a routine accounting matter

Explanation

Performing a valuation that management uses to record a material amount, and then auditing that amount, creates a self-review threat because the firm would be evaluating its own work. Where the threat cannot be eliminated or reduced to an acceptable level through safeguards, the firm should decline or withdraw from the service or the audit.

Question 23Audit Standards, Ethics, and Governance

During the audit, the client's chief executive officer threatens to remove the audit firm unless the auditor withdraws a proposed adjustment. How should the engagement partner respond?

  1. Reduce the audit fee to compensate the client for the disagreement
  2. Report the CEO to the stock exchange immediately without further assessment
  3. Withdraw the adjustment to preserve the client relationship and document the CEO's concern
  4. Evaluate the intimidation threat, document the matter, and consider communication with those charged with governance Correct answer.

Explanation

Threats of removal create an intimidation threat that can compromise objectivity. The partner should evaluate the significance of the threat, consider safeguards such as communicating with those charged with governance, and document the matter, rather than allowing the threat to influence the audit conclusion.

Question 24Audit Standards, Ethics, and Governance

An auditor is assessing a client's compliance with a regulatory requirement that is central to operating the business. The auditor lacks the expertise to evaluate the technical requirements. What is the most appropriate course of action?

  1. Disclaim responsibility for the regulatory matter in the engagement letter
  2. Rely on management's assertion that the entity is compliant and issue an unmodified opinion
  3. Report the lack of expertise to the client's regulator as a fraud indicator
  4. Obtain the necessary expertise or evidence to evaluate compliance, or consider the effect on the audit opinion if sufficient evidence cannot be obtained Correct answer.

Explanation

The auditor must obtain sufficient appropriate evidence about compliance with laws and regulations that are central to the entity's operations. If the auditor lacks the necessary expertise, the firm should obtain it, for example through a specialist, or consider the implications for the audit opinion if adequate evidence cannot be obtained.

Question 25Audit Standards, Ethics, and Governance

A firm's quality management system identifies that several engagements were completed without the required engagement quality review. Which response best reflects the purpose of monitoring and remediation?

  1. Disclose the deficiency only in the next year's audit report
  2. Ignore the deficiency because the engagements have already been completed and reports issued
  3. Assign the deficiency to the engagement teams without further firm-level action
  4. Take corrective action to address the deficiency and evaluate whether it indicates a systemic weakness in the system of quality management Correct answer.

Explanation

Monitoring and remediation requires the firm to evaluate deficiencies, determine their root causes, and take appropriate corrective action, including assessing whether the deficiency indicates a broader systemic weakness. The goal is continuous improvement of the system of quality management.

Question 26Audit Standards, Ethics, and Governance

Under the IESBA Code, which of the following best describes the purpose of the conceptual framework for independence?

  1. It guarantees independence whenever the firm discloses all fee arrangements to the audit committee.
  2. It sets a single maximum monetary threshold above which any financial interest in a client is prohibited.
  3. It replaces the need for professional judgment with mandatory rotation of all engagement partners annually.
  4. It requires auditors to identify, evaluate, and address threats to independence rather than merely follow a fixed list of prohibitions. Correct answer.

Explanation

The conceptual framework requires an auditor to identify threats to independence, evaluate their significance, and apply safeguards or decline the engagement when no safeguard can reduce the threat to an acceptable level. It is a principles-based approach, so it operates alongside specific prohibitions rather than replacing them with a single numeric limit or a disclosure remedy.

Question 27Audit Standards, Ethics, and Governance

An audit firm is documenting its system of quality management. Which element most directly addresses the firm's obligation to obtain information about whether engagements are being performed in accordance with professional standards?

  1. The firm's monitoring and remediation process. Correct answer.
  2. The firm's ethical requirements relating to partner remuneration.
  3. The firm's resource allocation for engagement supervision.
  4. The firm's policy for client acceptance and continuance decisions.

Explanation

Monitoring and remediation is the component of a system of quality management under which the firm obtains evidence about the effectiveness of the system, including whether engagements comply with professional standards and applicable legal requirements. Findings are then evaluated and remediated so that deficiencies are corrected.

Question 28Audit Standards, Ethics, and Governance

An auditor is evaluating the reliability of evidence obtained from an external source. Which consideration most appropriately supports the auditor's judgment about reliability?

  1. Whether the evidence was provided orally during the closing meeting.
  2. Whether the evidence is stored in the client's accounting information system.
  3. Whether the evidence confirms management's expectations about the reported result.
  4. Whether the evidence was obtained directly by the auditor from an independent third party. Correct answer.

Explanation

ISA 500 ranks evidence obtained directly by the auditor from an independent external source as generally more reliable than evidence generated internally or passed through the client. The auditor therefore weighs the source, independence, and directness of access when judging reliability.

Question 29Audit Standards, Ethics, and Governance

During fieldwork, the auditor identifies a significant risk of material misstatement related to revenue cut-off. Which response best reflects the auditor's responsibility for designing further audit procedures?

  1. Rely on the prior year's substantive testing because the client's business has not changed materially.
  2. Reduce the sample size to keep the audit within budget while retaining the same procedures.
  3. Increase the extent of substantive testing around period-end and perform procedures directed at the specific assertion. Correct answer.
  4. Rely solely on the client's monthly analytical review of gross margin to address the risk.

Explanation

When a significant risk is identified, ISA 330 requires the auditor to design and perform substantive procedures that are specifically responsive to that risk, including appropriate attention to the relevant assertion. Increasing the extent and directing procedures at period-end cut-off links the work to the assessed risk.

Question 30Audit Standards, Ethics, and Governance

An audit firm's engagement partner concludes that a material accounting estimate is reasonable but that the client's supporting documentation is weak. The partner nonetheless signs the report without further work, reasoning that the estimate falls within a tolerable range. Which professional and ethical consideration is most directly compromised?

  1. The obligation to exercise professional skepticism and obtain sufficient appropriate audit evidence. Correct answer.
  2. The obligation to provide non-assurance services only with client approval.
  3. The requirement to rotate the engagement quality reviewer every seven years.
  4. The requirement to maintain confidentiality of client information after the engagement ends.

Explanation

Concluding that an estimate is acceptable without adequate evidence reflects a failure of professional skepticism and of the obligation to obtain sufficient appropriate audit evidence for a material item. The auditor must challenge management's assumptions and corroborate the estimate rather than accept it merely because it appears plausible.

Question 31Internal Audit Process and Methodology

Which document formally authorizes an internal audit engagement, defines its scope, and identifies the resources assigned?

  1. The audit engagement letter or charter memo Correct answer.
  2. The audit committee's annual plan
  3. The engagement work program
  4. The entity's risk register

Explanation

An engagement letter or engagement communication establishes the authority, objectives, scope, timing, and resource assignments for a specific audit. It is issued before fieldwork begins so management understands what will be examined. The work program is a later, more detailed testing document.

Question 32Internal Audit Process and Methodology

An auditor traces a sample of purchase orders to receiving reports and then to vendor invoices. Which assertion is this procedure primarily designed to test?

  1. Valuation of inventory
  2. Occurrence of recorded purchases Correct answer.
  3. Completeness of recorded purchases
  4. Rights and obligations of payables

Explanation

Tracing from an internally generated source document forward through the transaction flow confirms that recorded purchases are supported by evidence of an actual order and receipt. This provides evidence about occurrence and support. Completeness testing typically starts from receiving reports and works toward recorded purchases.

Question 33Internal Audit Process and Methodology

In statistical sampling, what does the confidence level represent?

  1. The ratio of sample size to population size
  2. The proportion of the population expected to contain errors
  3. The probability that the sample result falls within the specified precision Correct answer.
  4. The maximum tolerable deviation rate

Explanation

Confidence level expresses how often repeated sampling would produce results within the stated precision of the true population characteristic. Higher confidence requires larger samples. It is distinct from tolerable rate, which is a decision threshold set by the auditor.

Question 34Internal Audit Process and Methodology

An auditor documents a walkthrough of the revenue cycle. What is the primary purpose of a walkthrough?

  1. To quantify the monetary misstatement in the population
  2. To confirm the design and implementation of controls by following one transaction end to end Correct answer.
  3. To test the operating effectiveness of controls over a period
  4. To obtain direct confirmation from customers

Explanation

A walkthrough follows a transaction through the entire process to confirm the auditor's understanding of the flow and whether controls are designed and placed in operation. It is generally a single-item procedure and does not provide statistical evidence of operating effectiveness. Substantive quantification and external confirmation are separate procedures.

Question 35Internal Audit Process and Methodology

An audit team finds that a key control over journal entries was bypassed during the year. How should the auditor most appropriately respond?

  1. Rely on the control because it was designed effectively
  2. Increase substantive testing over journal entries and reassess control risk Correct answer.
  3. Reduce the sample size for journal entry testing
  4. Conclude that the financial statements are materially misstated

Explanation

When a key control fails, the auditor cannot rely on it and must reassess the risk of material misstatement, expanding substantive procedures over the affected area. A control deficiency does not by itself prove misstatement, so conclusions about the financial statements require further evidence.

Question 36Internal Audit Process and Methodology

Which of the following best describes the purpose of an internal audit work program?

  1. To summarize management's responses to prior findings
  2. To document the audit committee's approval of the plan
  3. To record the auditor's conclusions at the end of the engagement
  4. To list the specific procedures and sample sizes the auditor will perform to achieve engagement objectives Correct answer.

Explanation

A work program translates engagement objectives into detailed procedures, tests, and sample selections that guide fieldwork. It provides a roadmap and supports supervision and review. Conclusions, management responses, and plan approvals are documented elsewhere.

Question 37Internal Audit Process and Methodology

An auditor selects every 20th item from a sequentially numbered population after a random start. Which sampling method is this?

  1. Stratified random sampling
  2. Systematic sampling Correct answer.
  3. Haphazard sampling
  4. Block sampling

Explanation

Systematic sampling selects items at a fixed interval from a randomly chosen starting point. It is efficient when the population is arranged in a predictable sequence. It requires care when the population has a periodic pattern that aligns with the interval.

Question 38Internal Audit Process and Methodology

During fieldwork, an auditor discovers evidence suggesting senior management may have committed fraud. According to professional standards, what is the auditor's most appropriate immediate action?

  1. Complete the engagement and note the issue in the final report
  2. Withdraw from the engagement without further communication
  3. Report the matter to the appropriate level of management and those charged with governance Correct answer.
  4. Confront the suspected individuals directly and request a written admission

Explanation

Suspected fraud involving senior management must be communicated promptly to those charged with governance, and the auditor should consider legal and regulatory reporting obligations. The auditor should not confront suspects or attempt to investigate independently of proper channels. Withdrawal may be considered but only after appropriate escalation.

Question 39Internal Audit Process and Methodology

What does the term 'risk of material misstatement' refer to in audit planning?

  1. The risk that internal controls will fail to prevent errors
  2. The risk that the client will not provide requested documents
  3. The risk that the auditor will issue an inappropriate opinion
  4. The risk that the financial statements contain a misstatement that is material before the audit is completed Correct answer.

Explanation

Risk of material misstatement is the susceptibility of the financial statements to material error before audit procedures are performed. It combines inherent risk and control risk. Detection risk, by contrast, relates to the auditor's own procedures.

Question 40Internal Audit Process and Methodology

An auditor needs to test the completeness of accounts payable. Which procedure provides the strongest evidence?

  1. Confirming recorded payables with vendors
  2. Reviewing subsequent payments after year-end for unrecorded liabilities Correct answer.
  3. Recalculating the accounts payable aging schedule
  4. Vouching recorded payables to vendor invoices

Explanation

Reviewing payments made after year-end for invoices relating to the prior period is a search for unrecorded liabilities, which addresses completeness. Procedures that start from the recorded balance can only confirm existing items, not detect omissions.

Question 41Internal Audit Process and Methodology

Which of the following is the most appropriate way for an auditor to document a significant judgment made during the engagement?

  1. Rely on the engagement partner's memory to recall the reasoning
  2. Record only the final conclusion in the report
  3. Document only the opinions of management
  4. Document the facts, the alternatives considered, the conclusion reached, and the basis for it Correct answer.

Explanation

Documentation of significant judgments should capture the relevant facts, the reasoning, alternatives considered, and the basis for the conclusion. This enables review and provides evidence that professional skepticism was applied. Recording only conclusions or relying on memory is insufficient.

Question 42Internal Audit Process and Methodology

An internal auditor is testing the operating effectiveness of a three-way match control. Which sample selection approach best supports a conclusion about the full year?

  1. Select items randomly across the entire period, including peak activity months Correct answer.
  2. Select only transactions already flagged as exceptions
  3. Select all items from the last month of the year
  4. Select only the largest transactions

Explanation

To conclude on operating effectiveness for a period, the sample must represent the whole period and include periods of higher risk or volume. Concentrating selection in one month or on one size class introduces bias and limits the inference. Exception items are already known failures.

Question 43Internal Audit Process and Methodology

What is the primary role of a supervisory review of working papers?

  1. To transfer responsibility for the opinion to the reviewer
  2. To replace the need for engagement planning
  3. To satisfy the client's record-keeping requirements
  4. To confirm that work was performed, documented, and supports the conclusions Correct answer.

Explanation

Supervisory review verifies that procedures were completed, evidence is sufficient, and conclusions are supported and properly documented. It is a quality control step that strengthens the engagement record. It does not shift responsibility for the opinion away from the engagement team.

Question 44Internal Audit Process and Methodology

An auditor uses a monetary unit sampling approach. Which characteristic distinguishes it from classical attribute sampling?

  1. Each individual item in the population has an equal chance of selection
  2. It requires no statistical evaluation
  3. It can only be used for tests of controls
  4. Each monetary unit in the population has an equal chance of selection Correct answer.

Explanation

Monetary unit sampling gives each currency unit an equal selection probability, so larger balances are more likely to be selected. This makes it well suited to substantive tests of account balances. Attribute sampling, by contrast, gives each item an equal chance.

Question 45Internal Audit Process and Methodology

Which analytical procedure is most appropriate during the risk assessment phase of an audit?

  1. Comparing current-year gross margin to prior years and industry benchmarks to identify unusual fluctuations Correct answer.
  2. Recalculating depreciation expense for a sample of assets
  3. Observing the physical inventory count
  4. Sending confirmations to major customers

Explanation

Analytical procedures in risk assessment compare financial and nonfinancial data to identify unusual relationships that may signal higher risk. They are relatively inexpensive and help direct attention to areas needing further work. Confirmations, recalculations, and observations are substantive or test-of-detail procedures.

Question 46Internal Audit Process and Methodology

An auditor is designing tests for a population with highly variable transaction amounts. Which approach most improves efficiency while maintaining statistical validity?

  1. Sample only the smallest items
  2. Use a smaller confidence level for the whole population
  3. Reduce the tolerable misstatement to zero
  4. Stratify the population by amount and sample each stratum Correct answer.

Explanation

Stratification divides a heterogeneous population into more homogeneous groups, allowing different sampling effort for each stratum. This improves precision and efficiency because large-value strata can be examined more intensively. Changing confidence or ignoring large items would weaken the conclusion.

Question 47Internal Audit Process and Methodology

Which of the following best describes the concept of professional skepticism in audit fieldwork?

  1. Maintaining a questioning mind and being alert to evidence that contradicts assertions Correct answer.
  2. Deferring all judgments to the engagement partner
  3. Assuming management is dishonest until proven otherwise
  4. Accepting documentary evidence without further corroboration

Explanation

Professional skepticism involves a questioning mind, critical assessment of evidence, and heightened awareness of conditions suggesting misstatement or fraud. It does not require presuming dishonesty, nor does it permit uncritical acceptance of evidence.

Question 48Internal Audit Process and Methodology

An auditor identifies a control deficiency that is significant but not material. What is the appropriate reporting treatment?

  1. Include it only in the auditor's private notes
  2. Omit it because it is not material
  3. Report it only to the audit committee and not to management
  4. Communicate it in writing to management and to those charged with governance Correct answer.

Explanation

Significant deficiencies must be communicated in writing to management and to those charged with governance, even when they are not material. Material weaknesses are also reported, but the threshold for communication is lower than materiality.

Question 49Internal Audit Process and Methodology

What is the main purpose of performing a preliminary analytical review during engagement planning?

  1. To obtain conclusive evidence that account balances are correct
  2. To replace substantive testing in low-risk areas
  3. To satisfy the requirement for management representation letters
  4. To identify areas of heightened risk and focus audit effort Correct answer.

Explanation

Preliminary analytical review highlights unusual trends and relationships that may indicate higher risk, helping the auditor allocate effort. It is a planning tool and does not by itself provide conclusive assurance. It also does not eliminate the need for substantive procedures.

Question 50Internal Audit Process and Methodology

An auditor is evaluating the results of a sample and finds the upper deviation rate exceeds the tolerable rate. What is the appropriate conclusion?

  1. The control cannot be relied upon and substantive procedures should be expanded Correct answer.
  2. The control is operating effectively because the sample deviation rate is low
  3. The sample size should be reduced to confirm the result
  4. The deviations can be ignored if they are immaterial individually

Explanation

When the upper deviation rate exceeds the tolerable rate, the evidence does not support reliance on the control. The auditor should increase substantive testing or consider alternative procedures. Individual immateriality of deviations does not override the aggregate conclusion.