First 50 of 190 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.
Continue in the practice tool above to load more questions, 50 at a time.
Question 1Audit purposes, risk, ethics and engagement planning
An auditor selects a sample of inventory items recorded in the client's perpetual inventory sub-ledger and traces them to the physical warehouse to inspect the actual goods. Which management assertion is the auditor primarily testing?
- Completeness (完整性)
- Existence (存在) Correct answer.
- Rights and Obligations (权利和义务)
- Classification (分类)
Explanation
Tracing from the accounting records (perpetual inventory sub-ledger) to the physical source (warehouse floor) is a directional audit test designed to verify that items recorded on the books actually exist in reality, thereby testing the 'Existence' assertion. Conversely, tracing from the physical warehouse floor to the accounting ledger tests the 'Completeness' assertion (detecting unrecorded inventory).
Question 2Audit purposes, risk, ethics and engagement planning
A client recorded a substantial sales transaction and recognized revenue on December 30, Year 1. However, shipping documents and customer acceptance records show that goods were only shipped and title transferred on January 4, Year 2. Which assertion regarding classes of transactions in Year 1 is PRIMARILY violated?
- Cut-off (截止) Correct answer.
- Completeness (完整性)
- Accuracy (准确性)
- Classification (分类)
Explanation
The 'Cut-off' assertion relates to whether transactions and events have been recorded in the correct accounting period. Recording revenue in Year 1 for goods delivered and accepted in Year 2 prematurely recognizes revenue in the current period, directly violating the Cut-off assertion (and resulting in an overstatement of Year 1 revenue and accounts receivable).
Question 3Audit purposes, risk, ethics and engagement planning
Which of the following is an INHERENT LIMITATION of automated controls compared to manual controls in an entity's internal control system?
- Automated controls are subject to daily physical human fatigue and random transposition mistakes.
- If an automated control is incorrectly programmed or subject to unauthorized program changes, it will consistently and systematically process transactions incorrectly. Correct answer.
- Automated controls cannot process large volumes of standardized transactions.
- Automated controls always require manual supervisor signatures on paper.
Explanation
A key characteristic and inherent risk of automated controls is that computer programs process information consistently. While this eliminates human fatigue and random errors, if an automated control is incorrectly programmed or tampered with, it will systematically and consistently process every single transaction incorrectly until detected and corrected.
Question 4Audit purposes, risk, ethics and engagement planning
Under the Enterprise Internal Control Audit Guidelines (企业内部控制审计指引), how is a 'Material Weakness' (重大缺陷) in internal control over financial reporting defined?
- A deficiency that has a negligible impact on financial reporting and can be ignored.
- A deficiency, or combination of deficiencies, in internal control such that there is a reasonable possibility that a material misstatement of the financial statements will not be prevented, or detected and corrected, on a timely basis. Correct answer.
- Any internal control error that results in a misstatement exceeding RMB 1,000.
- A deficiency that only affects the efficiency of operational warehousing logistics.
Explanation
Under the Enterprise Internal Control Audit Guidelines and CSA guidelines, internal control deficiencies are classified into: (1) Material Weakness (重大缺陷), (2) Significant Deficiency (重要缺陷), and (3) Control Deficiency (一般缺陷). A Material Weakness is a deficiency, or combination of deficiencies, such that there is a reasonable possibility that a material misstatement of the financial statements will not be prevented, or detected and corrected, on a timely basis.
Question 5Audit purposes, risk, ethics and engagement planning
What is the PRIMARY OBJECTIVE of performing a 'Walkthrough Test' (穿行测试) during the auditor's risk assessment phase?
- To calculate the final sample size for accounts receivable confirmations.
- To trace a single transaction from its origination through the information system to its final inclusion in the financial reports to confirm the auditor's understanding of system design and verify whether controls have been implemented (是否得到执行). Correct answer.
- To evaluate the operating effectiveness of controls over an entire 12-month period.
- To detect all mathematical calculation errors in the general ledger.
Explanation
A walkthrough test involves following a transaction from origination through the entity's accounting processes until it is reflected in the financial reports. The primary objective is to: (1) confirm the auditor's understanding of transaction flow and design of controls; (2) evaluate whether controls are properly designed to prevent or detect misstatements; and (3) determine whether the controls have been implemented (put into operation). Operating effectiveness over a period requires tests of controls (sampling multiple transactions).
Question 6Audit purposes, risk, ethics and engagement planning
According to HKSA 200, what is the primary objective of an independent auditor conducting an audit of financial statements?
- To express an opinion on whether the financial statements are prepared, in all material respects, in accordance with an applicable financial reporting framework Correct answer.
- To detect and prevent all instances of fraud, error, and non-compliance with laws and regulations within the client entity
- To guarantee the future viability of the entity and the efficiency with which management has conducted its affairs
- To prepare the financial statements and verify that they are mathematically accurate and free from all errors
Explanation
HKSA 200 states that the objective of an audit is to enable the auditor to express an opinion on whether the financial statements are prepared, in all material respects, in accordance with an applicable financial reporting framework. The auditor is not responsible for preparing the financial statements, nor does an audit guarantee the future viability of the entity or serve to prevent/detect all fraud.
Question 7Audit purposes, risk, ethics and engagement planning
What level of assurance does an auditor provide in a financial statement audit, and how is it defined?
- Absolute assurance, which is a complete guarantee that the financial statements are free from any error
- Reasonable assurance, which is a high, but not absolute, level of assurance Correct answer.
- Moderate assurance, which is a lower level of assurance based primarily on inquiry and analytical procedures
- Limited assurance, which is a negative form of assurance stating that nothing has come to the auditor's attention
Explanation
Reasonable assurance is a high, but not absolute, level of assurance. It is obtained when the auditor has obtained sufficient appropriate audit evidence to reduce audit risk to an acceptably low level. Absolute assurance is not possible due to inherent limitations of an audit.
Question 8Audit purposes, risk, ethics and engagement planning
Which of the following is considered an inherent limitation of an audit that prevents the auditor from obtaining absolute assurance?
- The fact that audit evidence is generally persuasive rather than conclusive Correct answer.
- The auditor's failure to perform testing on a sample basis due to budgetary constraints
- The existence of the HKICPA Code of Ethics which restricts certain audit procedures
- The lack of qualification of the audit junior team members assigned to the engagement
Explanation
An inherent limitation of auditing is that most audit evidence is persuasive rather than conclusive. Other limitations include the nature of financial reporting (judgment involved), the nature of audit procedures (limitations in gathering evidence, e.g. fraud concealment), and the need for the audit to be conducted within a reasonable period of time and cost.
Question 9Audit purposes, risk, ethics and engagement planning
An audit firm agrees to act as an advocate for an audit client in resolving a tax dispute with the Inland Revenue Department. What threat to independence is primarily created?
- Self-review threat
- Advocacy threat Correct answer.
- Intimidation threat
- Familiarity threat
Explanation
An advocacy threat is created when a professional accountant promotes a client's position or opinion to the point that their objectivity is compromised, such as representing a client in a legal dispute or public forum.
Question 10Audit purposes, risk, ethics and engagement planning
Which of the following best describes the concept of 'professional skepticism' as required by HKSA 200?
- An attitude that includes a questioning mind, being alert to conditions which may indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence Correct answer.
- A mindset of complete disbelief that assumes management is always dishonest unless proven otherwise
- A policy of requesting third-party confirmations for every single transaction recorded by the client
- An approach where the auditor accepts all client documents as authentic without verification to save costs
Explanation
HKSA 200 defines professional skepticism as an attitude that includes a questioning mind, being alert to conditions which may indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence. It does not require assuming management is dishonest (nor does it assume they are honest).
Question 11Audit purposes, risk, ethics and engagement planning
Which of the following actions by a professional accountant in public practice would most likely breach the ethical principle of 'professional behavior'?
- Providing tax planning advice that minimizes a client's tax liability within the law
- Making exaggerated claims for services offered or conducting disparaging comparisons to the work of other accountants Correct answer.
- Rejecting a client engagement due to lack of staff resources during the busy season
- Requesting written representations from management at the end of the audit
Explanation
The principle of professional behavior requires compliance with laws and regulations. The Code specifically prohibits making exaggerated claims for services or disparaging comparisons to other firms' work, as this discredits the profession.
Question 12Audit purposes, risk, ethics and engagement planning
Which of the following statements best describes the auditor's responsibility regarding fraud under HKSA 240?
- The auditor must obtain reasonable assurance that the financial statements as a whole are free from material misstatement, whether caused by fraud or error Correct answer.
- The auditor is responsible for the prevention and detection of all fraud within the entity
- The auditor has no responsibility whatsoever for identifying fraud, as this is solely management's duty
- The auditor must design procedures to detect all immaterial and material frauds, prioritizing employee theft
Explanation
Under HKSA 240, the auditor's objective is to identify and assess the risks of material misstatement of the financial statements due to fraud, and to obtain sufficient appropriate audit evidence. The responsibility is focused on *material* misstatement. The auditor cannot guarantee that all fraud is detected due to inherent limitations.
Question 13Audit purposes, risk, ethics and engagement planning
The audit risk model is defined as Audit Risk (AR) = Inherent Risk (IR) x Control Risk (CR) x Detection Risk (DR). If the auditor assesses Control Risk as high, how must Detection Risk be managed to keep overall Audit Risk at an acceptably low level?
- Detection Risk must be decreased by performing more effective substantive procedures Correct answer.
- Detection Risk must be increased by performing fewer audit procedures to save time
- Detection Risk should remain unchanged since it is independent of Control Risk
- Detection Risk must be eliminated completely by obtaining absolute assurance
Explanation
According to the audit risk model, if Inherent Risk or Control Risk (the Risk of Material Misstatement) is high, the auditor must reduce Detection Risk to maintain a low overall Audit Risk. To reduce Detection Risk, the auditor must perform more effective substantive tests (e.g. larger sample sizes, more reliable evidence sources, or changing the timing to year-end).
Question 14Audit purposes, risk, ethics and engagement planning
According to HKSA 320, when is the auditor required to establish materiality for the financial statements as a whole?
- Only after the audit fieldwork is completed and the audit opinion is drafted
- When establishing the overall audit strategy at the planning stage of the audit Correct answer.
- Whenever the client requests a copy of the audit plan and budget
- Only when a material error is actually discovered during substantive testing
Explanation
HKSA 320 states that the auditor must establish materiality for the financial statements as a whole when establishing the overall audit strategy. This planning materiality helps determine the nature, timing, and extent of risk assessment procedures and further audit testing.
Question 15Audit purposes, risk, ethics and engagement planning
What is the primary purpose of performing risk assessment procedures under HKSA 315?
- To obtain a basis for the identification and assessment of risks of material misstatement at the financial statement and assertion levels Correct answer.
- To obtain audit evidence to support the auditor's opinion on the operating effectiveness of controls
- To perform detailed calculations of all transactions during the financial year
- To provide advice to management on how to improve the profit margin of the business
Explanation
Under HKSA 315, risk assessment procedures are performed to provide a basis for identifying and assessing risks of material misstatement due to fraud or error, which then guides the design of further audit procedures.
Question 16Audit purposes, risk, ethics and engagement planning
Which of the following procedures is required to be performed as a risk assessment procedure in understanding the entity and its environment under HKSA 315?
- Analytical procedures Correct answer.
- External circularization of receivables
- Physical inventory count observation at year-end
- Substantive analytical procedures for revenue verification
Explanation
HKSA 315 mandates that risk assessment procedures must include inquiries of management, analytical procedures, and observation and inspection. Analytical procedures at the planning stage help identify unusual transactions or events.
Question 17Audit purposes, risk, ethics and engagement planning
Under the COSO framework (and HKSA 315), which component of internal control sets the overall tone of an organization, influencing the control consciousness of its people?
- The Control Environment Correct answer.
- Control Activities
- Information System and Communication
- Monitoring of Controls
Explanation
The Control Environment includes the governance and management functions and the attitudes, awareness, and actions of those charged with governance and management concerning the entity's internal control. It sets the tone of the organization.
Question 18Audit purposes, risk, ethics and engagement planning
Which of the following best defines 'Control Risk' in auditing?
- The susceptibility of an assertion to a misstatement that could be material, before consideration of any related controls
- The risk that a misstatement that could occur in an assertion will not be prevented, or detected and corrected, on a timely basis by the entity's internal control Correct answer.
- The risk that the procedures performed by the auditor will not detect a misstatement that exists and that could be material
- The risk that the auditor expresses an inappropriate audit opinion when the financial statements are materially misstated
Explanation
Control Risk is the risk that a misstatement that could occur in an assertion and that could be material, either individually or when aggregated with other misstatements, will not be prevented, or detected and corrected, on a timely basis by the entity's internal control. It is a function of the effectiveness of the design and operation of internal controls.
Question 19Audit purposes, risk, ethics and engagement planning
What is the primary objective of an auditor performing a 'walkthrough test' during internal control evaluation?
- To confirm the auditor's understanding of the flow and design of transactions through the accounting system Correct answer.
- To test the operating effectiveness of internal controls over a large sample of transactions
- To physically count the assets in the warehouse to verify their existence
- To replace the internal audit team's annual testing program
Explanation
A walkthrough test involves tracing one or two transactions through the entire accounting system from initiation to recording in the financial statements. The objective is to confirm the auditor's understanding of the system's design and flow, rather than to test operating effectiveness of controls.
Question 20Audit purposes, risk, ethics and engagement planning
Which of the following is required to be documented in the audit engagement letter under HKSA 210?
- The detailed list of audit team junior staff and their individual hourly billing rates
- The objective and scope of the audit, and the responsibilities of the auditor and management Correct answer.
- The specific materiality threshold set for each financial statement line item
- The exact date when the auditor will issue an unqualified audit opinion
Explanation
Under HKSA 210, the agreed terms of the audit engagement must be documented in an audit engagement letter. This includes: the objective and scope of the audit; the responsibilities of the auditor; the responsibilities of management; identification of the applicable financial reporting framework; and reference to the expected form and content of any reports to be issued.
Question 21Audit purposes, risk, ethics and engagement planning
Under HKSA 300, how do the overall audit strategy and the detailed audit plan relate to each other?
- The audit plan is established first, and it dictates the scope of the overall audit strategy
- The overall audit strategy is established first, and it guides the development of the detailed audit plan Correct answer.
- They are independent documents that are drafted by different audit firms
- The audit strategy replaces the audit plan, making the detailed audit plan unnecessary
Explanation
HKSA 300 states that the auditor must establish an overall audit strategy, which sets the scope, timing, and direction of the audit. Once the overall audit strategy is established, the auditor develops the detailed audit plan (which contains the nature, timing, and extent of specific audit procedures).
Question 22Audit purposes, risk, ethics and engagement planning
How does HKSA 320 define 'performance materiality'?
- The amount set by the auditor at less than materiality for the financial statements as a whole to reduce to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality Correct answer.
- The maximum amount of misstatement that the client's management is willing to adjust in the accounting records
- The threshold below which misstatements are considered clearly trivial and do not need to be accumulated
- The performance bonus target set for the audit team if they complete the audit ahead of schedule
Explanation
HKSA 320 defines performance materiality as the amount set by the auditor at less than planning materiality for the financial statements as a whole to reduce to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality for the financial statements as a whole.
Question 23Audit purposes, risk, ethics and engagement planning
Which of the following factors would most likely increase the auditor's assessment of inherent risk at the financial statement level?
- The client has a simple business model with no international transactions
- The client's industry is experiencing significant technological changes and high business failure rates Correct answer.
- The client's accounting department has low employee turnover and experienced staff
- The client uses standard, off-the-shelf software with strong IT general controls
Explanation
Significant technological changes and high business failure rates increase the industry's economic pressures and the risk of obsolescence or going concern issues. This increases inherent risk at the entity level.
Question 24Audit purposes, risk, ethics and engagement planning
Which of the following is the most appropriate source of information for an auditor attempting to understand a new client's industry regulations?
- The client's internal marketing plan for the next fiscal year
- Industry-specific legislation, regulatory guidelines, and publications issued by government and professional bodies Correct answer.
- Social media accounts of the client's administrative staff members
- Recreations of general ledger accounting balances by the audit junior
Explanation
To understand industry regulations, the auditor should consult external and authoritative sources such as specific legislation, regulatory publications, and guidelines issued by government or professional oversight bodies (e.g. Hong Kong Monetary Authority for banking).
Question 25Audit purposes, risk, ethics and engagement planning
An auditor reduces the level of detection risk they are willing to accept. How does this decision impact the audit work to be performed?
- The auditor will perform more extensive substantive procedures at or near the balance sheet date Correct answer.
- The auditor will rely more heavily on the client's internal controls and reduce substantive testing
- The auditor will increase the planning materiality threshold to reduce the number of samples
- The auditor will perform the majority of audit testing at the interim stage to finish earlier
Explanation
To reduce detection risk (the risk that the auditor's procedures fail to detect a material misstatement), the auditor must increase the effectiveness of their testing. This is achieved by performing more extensive substantive procedures, using larger sample sizes, or shifting testing to the year-end (rather than interim).
Question 26Audit purposes, risk, ethics and engagement planning
When planning the audit, the auditor decides to set a lower level of performance materiality compared to the previous year. Assuming overall planning materiality remains the same, what is the effect on the audit?
- The scope of the audit work will expand, requiring the auditor to test more transactions and balances Correct answer.
- The scope of the audit work will decrease, allowing the auditor to reduce sample sizes
- There will be no change to the audit work because overall materiality has not changed
- The auditor will be unable to express an opinion due to a scope limitation
Explanation
Setting a lower performance materiality means that smaller misstatements will be considered significant for testing, and the allowance for undetected misstatements is reduced. Consequently, the audit team must perform more extensive testing (larger samples, more items included) to cover the risks.
Question 27Audit purposes, risk, ethics and engagement planning
According to HKSA 315, which of the following is most likely to be identified by the auditor as a 'significant risk' that requires special audit consideration?
- Routine, automated processing of monthly payroll transactions with no changes in staff
- Transactions with related parties that are outside the normal course of business Correct answer.
- Regular cash receipts from local retail store sales checked daily by store managers
- Standard depreciation calculations on office furniture using the straight-line method
Explanation
Under HKSA 315, significant risks often arise from non-routine transactions or matters requiring judgment. Transactions with related parties that are outside the normal course of business are specifically identified as significant risks due to the high risk of material misstatement (and potential fraud/management override).
Question 28Audit purposes, risk, ethics and engagement planning
Which of the following events or conditions identified during the planning phase would most likely raise significant doubt about an entity's ability to continue as a going concern under HKSA 570?
- The entity recently modernized its manufacturing facility to increase capacity
- The entity has experienced net liability or net current liability positions and has major debt covenants it cannot meet Correct answer.
- The entity's chief competitor has announced the launch of a new product line next year
- A key supplier has increased raw material prices by 3% in line with inflation
Explanation
Under HKSA 570, financial indicators such as a net liability position, net current liability position, and inability to comply with terms of loan agreements (debt covenants) are strong indicators that raise significant doubt about the entity's ability to continue as a going concern.
Question 29Audit purposes, risk, ethics and engagement planning
Which of the following is considered an inherent limitation of any internal control system, regardless of how well it is designed and operated?
- The failure of the internal audit team to report directly to the CEO
- The potential for human error, collusion among employees, or management override of controls Correct answer.
- The lack of automated encryption for all public-facing company websites
- The restriction on using external consultants to review control systems
Explanation
No internal control system is perfect because of inherent limitations. These include: human error or mistakes in judgment; the risk of collusion where two or more individuals circumvent controls; and the risk that management overrides the controls.
Question 30Audit purposes, risk, ethics and engagement planning
Which of the following describes an 'IT application control' rather than an 'IT general control' (ITGC)?
- The company's policy requiring password complexity and forced resets every 90 days for all users
- A programmatic check in the sales system that automatically rejects orders where the transaction value exceeds the customer's credit limit Correct answer.
- The physical locking of the main server room door with biometric access logs
- An automated disaster recovery plan that backs up the entire system database to the cloud daily
Explanation
IT application controls are automated or manual procedures that operate at a business process level and apply to the processing of individual transactions (e.g. edit checks, credit limit checks). IT general controls (ITGCs) apply to all system components, processes, and data (e.g. password policies, physical security, backup recovery).
Question 31Audit purposes, risk, ethics and engagement planning
Under HKSA 300, why is audit planning considered an iterative and continuous process rather than a discrete, one-off phase of the audit?
- Because the auditor must constantly adjust the audit fee based on findings in the field
- Because unexpected events, changes in conditions, or audit evidence obtained may require the auditor to modify the overall audit strategy and detailed audit plan Correct answer.
- Because the client's management has the right to rewrite the audit program at any time
- Because the HKICPA requires a new audit plan to be submitted every month during the engagement
Explanation
Planning is not a discrete phase of an audit, but rather a continual and iterative process. During the course of the audit, as the auditor performs procedures and obtains evidence, they may find information that is significantly different from what was initially assessed, requiring revisions to risks, strategy, and plans.
Question 32Audit purposes, risk, ethics and engagement planning
How does 'business risk' relate to 'audit risk' during the planning phase?
- Business risk and audit risk are identical concepts and are calculated using the same formula
- Most business risks do not have financial consequences and are therefore ignored by the auditor
- A business risk may increase the risk of material misstatement (audit risk) if it has a financial statement impact Correct answer.
- Audit risk is assessed first, and then management uses it to determine the company's business risks
Explanation
Business risk is a broader concept representing risks resulting from significant conditions, events, circumstances, or actions that could adversely affect an entity's ability to achieve its objectives. Although not all business risks affect the financial statements, many do, and they can directly increase the Risk of Material Misstatement (audit risk). For example, a failing product line (business risk) increases inventory obsolescence risk (audit risk).
Question 33Audit purposes, risk, ethics and engagement planning
When obtaining an understanding of the entity's selection and application of accounting policies, what should the auditor primarily evaluate under HKSA 315?
- Whether the policies are acceptable under the applicable financial reporting framework and consistent with industry practices Correct answer.
- Whether the policies maximize the client's current year net income to satisfy shareholders
- Whether the policies are the simplest to audit to reduce firm resource allocation
- Whether the policies were personally written and signed off by the audit committee
Explanation
The auditor must evaluate whether the entity's accounting policies are appropriate for its business and consistent with the applicable financial reporting framework (e.g., HKFRSs) and the accounting policies used in its relevant industry.
Question 34Audit purposes, risk, ethics and engagement planning
When assessing the Risk of Material Misstatement (RMM), how should the auditor distinguish between risks at the financial statement level and risks at the assertion level?
- Risks at the financial statement level relate to specific account balances, whereas risks at the assertion level affect the firm's reputation
- Risks at the financial statement level have a pervasive effect on the financial statements as a whole, whereas risks at the assertion level relate to specific classes of transactions, account balances, and disclosures Correct answer.
- Financial statement level risks are assessed by the audit partner, while assertion level risks are only assessed by junior staff
- Assertion level risks require absolute assurance, while financial statement level risks only require reasonable assurance
Explanation
Risks of material misstatement at the financial statement level refer to risks that relate pervasively to the financial statements as a whole and potentially affect many assertions (e.g., weak control environment, management integrity issues). Risks at the assertion level are linked to specific accounts, transactions, or disclosures (e.g. inventory valuation, completeness of sales).
Question 35Audit purposes, risk, ethics and engagement planning
An auditor reviews a control where bank reconciliations are prepared monthly by an accountant and reviewed by the financial controller. What type of control is this?
- Preventive control
- Detective control Correct answer.
- IT general control
- Directive control
Explanation
Reconciliations are detective controls because they are designed to identify and correct errors or omissions after they have occurred in the accounting records. Preventive controls aim to prevent errors before they occur (e.g. segregation of duties, system authorization).
Question 36Audit purposes, risk, ethics and engagement planning
Which of the following audit procedures in a detailed audit program is designed to test the 'completeness' assertion for trade receivables?
- Selecting a sample of trade receivables from the aged trial balance and tracing them to the sales invoices and shipping documents
- Selecting a sample of shipping documents close to year-end and tracing them to the sales invoices and the receivables ledger Correct answer.
- Confirming balances directly with customers using positive confirmation requests
- Reviewing the aging of trade receivables to assess the adequacy of the allowance for doubtful accounts
Explanation
To test completeness (that all sales/receivables that should have been recorded are recorded), the auditor starts with the source documents (shipping documents showing goods were sent) and traces them forward into the sales ledger/receivables records. Starting from the ledger and tracing backward tests existence/occurrence.
Question 37Audit purposes, risk, ethics and engagement planning
An auditor notes that the client's management is under significant pressure to meet profit targets to secure bank refinancing. How should this impact the audit planning and risk assessment?
- It raises the risk of material misstatement at the financial statement level, specifically regarding fraud and management override of controls Correct answer.
- It requires the auditor to immediately resign from the audit as it is a criminal offence to audit such entities
- It allows the auditor to issue a qualified opinion at the planning stage without further testing
- It has no impact since bank refinancing is an external matter unrelated to financial reporting
Explanation
Management pressure to meet profit targets represents an incentive/pressure (one of the three components of the fraud triangle). This increases the Risk of Material Misstatement due to fraud, which is pervasive and affects the financial statements at the financial statement level.
Question 38Audit purposes, risk, ethics and engagement planning
Why is it critical for an auditor to understand whether a client operates in a highly regulated industry (e.g., commercial banking) during the planning stage?
- To determine if the audit fees can be shared with the industry regulatory bodies
- Because non-compliance with industry-specific laws and regulations could result in material misstatements or threaten the entity's going concern status Correct answer.
- To allow the regulator to draft the audit report and take liability for the opinion
- Because the auditor is legally required to act as the compliance officer for the client
Explanation
Under HKSA 250, the auditor must obtain an understanding of the legal and regulatory framework applicable to the entity and how the entity complies. In highly regulated industries, non-compliance can lead to severe fines, operational bans, or loss of license, which can have a material impact on the financial statements or threaten going concern.
Question 39Audit purposes, risk, ethics and engagement planning
Which of the following audit procedures must be performed in every audit to address the risk of management override of controls under HKSA 240?
- Performing a 100% check of all accounts payable vendors against government registries
- Testing the appropriateness of journal entries recorded in the general ledger and other adjustments made in the preparation of the financial statements Correct answer.
- Requiring the board of directors to sign a document admitting that no override has occurred
- Replacing the CFO with an independent external accountant for the final month of the year
Explanation
HKSA 240 states that management override of controls is a pervasive risk of fraud and is a significant risk. In all audits, the auditor must perform specific procedures: (1) test the appropriateness of journal entries; (2) review accounting estimates for biases; and (3) evaluate the business rationale for significant transactions outside the normal course of business.
Question 40Audit purposes, risk, ethics and engagement planning
What is the primary risk associated with performing tests of controls and substantive procedures at an interim date (e.g., month 9 of a 12-month fiscal year) rather than at year-end?
- The audit fees will be lower, reducing the firm's profitability
- Misstatements could occur in the remaining period (months 10 to 12) that are not detected by the auditor Correct answer.
- The client's staff will be too busy to assist the auditor during the final audit phase
- The auditor will violate the HKICPA rules which strictly prohibit any interim audit testing
Explanation
The primary risk is that transactions and control activities occurring in the 'remaining period' (between the interim testing date and the year-end date) may change, contain errors, or go unchecked. The auditor must perform further procedures (roll-forward procedures) to cover this risk.
Question 41Audit purposes, risk, ethics and engagement planning
Under what circumstances should the auditor revise materiality for the financial statements as a whole during the execution phase of the audit?
- If the client's stock price rises significantly on the local exchange
- If the auditor becomes aware of information during the audit that would have caused them to determine a different amount initially Correct answer.
- Only if the client formally requests that the materiality threshold be raised to reduce audit adjustments
- Materiality is set in stone at the planning stage and can never be revised once the engagement letter is signed
Explanation
According to HKSA 320, the auditor must revise materiality if they become aware of information during the audit (e.g., actual financial results differ significantly from estimates used at planning, or a change in the entity's circumstances) that would have caused them to determine a different amount initially.
Question 42Audit purposes, risk, ethics and engagement planning
Which of the following statements best describes the risk of an auditor relying blindly on a 'standardized audit program' template without customizing it for the client?
- The audit fees will automatically double under HKICPA rules
- The auditor may fail to design and perform procedures addressing the client's unique risks of material misstatement, leading to an ineffective audit Correct answer.
- The client's management will refuse to provide the representation letter
- The standardized program will be rejected by the audit software as duplicate file content
Explanation
Standardized audit programs are useful starting points, but failing to tailor them to the client's specific business model, environment, and assessed risks means the auditor might miss unique, high-risk areas, leading to a failure to detect material misstatements.
Question 43Audit purposes, risk, ethics and engagement planning
Under HKSA 540 (Auditing Accounting Estimates and Disclosures), which of the following accounting estimates would most likely be assessed as having high estimation uncertainty and therefore represents a higher risk of material misstatement?
- Depreciation of office computers using a standard straight-line method over a 3-year useful life
- A provision for a pending patent infringement lawsuit where there is little historical data or legal consensus on the outcome Correct answer.
- The calculation of monthly utility accruals based on the previous month's invoice
- The valuation of inventory at the lower of cost and net realizable value using recent selling prices
Explanation
Under HKSA 540, estimation uncertainty is the susceptibility of an accounting estimate and related disclosures to an inherent lack of precision. Estimates with high uncertainty (e.g. pending litigation outcomes with no precedents) require significant subjective judgment and have higher risk of material misstatement.
Question 44Audit purposes, risk, ethics and engagement planning
An audit client outsources its entire customer billing and collections function to a third-party service organization. According to HKSA 402, what is the auditor's responsibility regarding this outsourced function?
- The auditor can exclude billing and collections from the audit scope since the work is performed by a third party
- The auditor must obtain an understanding of the services provided by the service organization, including internal controls, to assess the risks of material misstatement Correct answer.
- The auditor must perform physical audits of the service organization's offices every month
- The auditor must require the service organization to change its accounting software to match the client's system
Explanation
Under HKSA 402, services provided by a service organization are part of the user entity's information system relevant to financial reporting. The auditor must obtain an understanding of how the client uses these services and the controls at the service organization (often by obtaining a Type 1 or Type 2 SOC report from the service auditor).
Question 45Audit purposes, risk, ethics and engagement planning
During the planning of an initial audit engagement, what is the auditor's primary responsibility regarding opening balances under HKSA 510?
- To re-audit the prior year's financial statements in full and issue a new audit report for that year
- To obtain sufficient appropriate audit evidence about whether the opening balances contain misstatements that materially affect the current period's financial statements Correct answer.
- To assume all opening balances are correct if the predecessor auditor was a well-known international firm
- To adjust all opening balances to zero and start accounting records fresh
Explanation
Under HKSA 510, for initial audit engagements, the auditor's objective with respect to opening balances is to obtain sufficient appropriate audit evidence about whether opening balances contain misstatements that materially affect the current period's financial statements, and whether appropriate accounting policies are consistently applied.
Question 46Audit purposes, risk, ethics and engagement planning
Under HKSA 550, which of the following is a key audit planning procedure required to address the risks associated with related party relationships and transactions?
- Inquiring of management regarding the identity of the entity's related parties, the nature of the relationships, and whether any transactions occurred Correct answer.
- Requiring the client to terminate all business contracts with related parties before the audit report is issued
- Publishing the list of related parties in local newspapers to check if the public has objections
- Increasing the audit fee automatically by 50% for every related party identified
Explanation
HKSA 550 requires the auditor to inquire of management regarding the identity of the entity's related parties (including changes from the prior period), the nature of the relationships, and whether the entity entered into any transactions with these related parties during the period.
Question 47Audit purposes, risk, ethics and engagement planning
How should an auditor assess cybersecurity risks under HKSA 315 during the planning phase?
- Cybersecurity is purely an operational risk and is not considered during a financial statement audit
- The auditor should assess whether cybersecurity threats (e.g., risk of ransomware or data breaches) could affect the integrity of financial reporting systems or lead to material unrecorded liabilities Correct answer.
- The auditor must perform pen-testing (penetration testing) on the client's firewalls themselves
- The auditor must require the client to purchase cybersecurity insurance from an approved audit partner
Explanation
Under HKSA 315, the auditor must understand the entity's IT environment. Cybersecurity risks are assessed because breaches can lead to loss/corruption of financial data, unauthorized access to systems (causing errors or fraud), or significant unrecorded liabilities (e.g. regulatory fines, lawsuits for data loss).
Question 48Audit evidence, assertions, sampling and transaction cycles
An auditor performs attributes sampling for tests of controls over credit approvals. The Tolerable Deviation Rate (可容忍偏差率) is set at 7%, and the Sample Deviation Rate (样本偏差率) is found to be 6.5%. After adding the allowance for sampling risk, the Computed Upper Deviation Rate (总体偏差率上限) is determined to be 8.5%. What conclusion MUST the auditor draw regarding the control?
- The control is operating effectively because the sample deviation rate (6.5%) is below the tolerable deviation rate (7%).
- The control CANNOT be relied upon as operating effectively because the computed upper deviation rate (8.5%) exceeds the tolerable deviation rate (7%). Correct answer.
- The auditor must immediately adjust the tolerable deviation rate upward to 9% to accept the control.
- The auditor should discard the sample deviations as non-sampling errors and conclude the control is effective.
Explanation
In attributes sampling, the auditor compares the Computed Upper Deviation Rate (Sample Deviation Rate + Allowance for Sampling Risk) against the Tolerable Deviation Rate. Since the Upper Deviation Rate (8.5%) exceeds the Tolerable Deviation Rate (7%), there is an unacceptably high sampling risk that the true population deviation rate exceeds what the auditor can tolerate. Therefore, the auditor cannot rely on the operating effectiveness of the control and must expand substantive testing.
Question 49Audit evidence, assertions, sampling and transaction cycles
Which of the following is a PRIMARY ADVANTAGE of using Monetary Unit Sampling (MUS / PPS 抽样 / 概率比例规模抽样) over classical variables sampling in substantive testing of accounts receivable?
- MUS is exceptionally well-suited for detecting understatement errors and zero or negative account balances.
- MUS automatically stratifies the population because each monetary unit has an equal chance of selection, giving individual physical items with larger monetary values a proportionally higher probability of being selected. Correct answer.
- MUS requires no calculation of tolerable misstatement or expected misstatement.
- MUS sample sizes increase exponentially when the expected misstatement is zero.
Explanation
Monetary Unit Sampling (MUS / Probability-Proportional-to-Size / PPS) treats each individual currency unit (e.g., RMB 1) as a sampling unit. Consequently, physical ledger items with larger recorded amounts contain more monetary units and thus have a proportionally higher probability of selection, achieving automatic stratification without complex manual subgrouping.
Question 50Audit evidence, assertions, sampling and transaction cycles
Which of the following scenarios BEST illustrates a 'Dual-Purpose Test' (双重目的测试) as defined in Chinese Auditing Standards?
- Performing a positive confirmation and a negative confirmation on the same customer balance.
- Examining a sample of vendor payment vouchers concurrently to verify whether the voucher was signed by the authorized finance manager (Test of Control) and whether the payment amount matches the purchase invoice and general ledger entry (Test of Details). Correct answer.
- Observing the client's inventory count while simultaneously negotiating the next year's audit fee.
- Sending identical audit inquiries to both the internal auditor and external legal counsel.
Explanation
A dual-purpose test is a test designed to be performed concurrently to achieve two objectives: (1) a test of control (evaluating whether a control operated effectively, such as checking for authorized approval signature), and (2) a substantive test of details (detecting monetary misstatement, such as verifying the invoice amount and ledger coding) on the very same transaction item.