I85PREP
⌘ K
SOEL Auditor Exam study materials
SOEL Auditor Exam study resources

SOEL Auditor Exam practice questions

One question at a time. Build your SOEL Auditor Exam understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Audit Fundamentals and Governance

Which document formally authorizes an internal audit function to conduct engagements and defines its scope and reporting lines?

  1. The engagement work program
  2. The risk register
  3. The audit charter Correct answer.
  4. The audit manual

Explanation

An audit charter is the governing document approved by the board or audit committee that establishes the function's mandate, authority, scope, and reporting relationships. It is the foundation for the function's independence and standing.

Question 2Audit Fundamentals and Governance

Organizational independence for an internal audit function is best achieved when the function reports administratively to the chief executive but functionally to which body?

  1. The operations management team
  2. The audit committee of the board Correct answer.
  3. The external audit firm
  4. The chief financial officer

Explanation

Functional reporting to the audit committee preserves independence by giving the board-level body oversight of the audit plan, budget, and results. Administrative reporting to management supports day-to-day operations without compromising that independence.

Question 3Audit Fundamentals and Governance

An auditor is assigned to review the procurement process after having approved several purchase contracts in that same department eighteen months earlier. Which concept most directly addresses the need to manage this situation?

  1. Confidentiality
  2. Materiality
  3. Due professional care
  4. Objectivity Correct answer.

Explanation

Objectivity requires auditors to avoid conflicts of interest and not audit activities for which they recently had responsibility. Prior operational involvement impairs objectivity and must be assessed and managed, for example by reassignment.

Question 4Audit Fundamentals and Governance

Which activity would most clearly impair an internal auditor's independence?

  1. Providing advice on risk management practices
  2. Attending management meetings as an observer
  3. Designing and installing the control system being audited Correct answer.
  4. Reviewing a draft policy before it is issued

Explanation

Taking operational responsibility for designing or installing controls transfers management accountability to the auditor and impairs independence. Advisory or observer roles that leave decision-making with management generally do not.

Question 5Audit Fundamentals and Governance

The chief audit executive's performance should be evaluated and the audit plan approved by which party to best support independence?

  1. The external regulator
  2. The internal audit staff
  3. The audit committee Correct answer.
  4. The chief operating officer

Explanation

The audit committee, as a board-level body, oversees the chief audit executive's performance and approves the audit plan, reinforcing the function's independence from management. This arrangement keeps key decisions out of the hands of those being audited.

Question 6Audit Fundamentals and Governance

Which statement best describes the relationship between internal audit and the organization's external auditor?

  1. They must share all working papers without restriction.
  2. They coordinate work while remaining independent of each other. Correct answer.
  3. External audit supervises internal audit engagements.
  4. Internal audit directs the external auditor's fieldwork.

Explanation

Internal and external auditors coordinate to avoid duplication and share relevant information, but each remains independent and responsible for its own conclusions. Neither directs or supervises the other.

Question 7Audit Fundamentals and Governance

The primary purpose of an audit committee is to:

  1. conduct the detailed testing of internal controls
  2. manage the organization's daily financial operations
  3. oversee financial reporting, risk, and audit activities on behalf of the board Correct answer.
  4. prepare the annual financial statements

Explanation

An audit committee provides board-level oversight of financial reporting, internal control, risk management, and both internal and external audit. It does not perform management or detailed audit work itself.

Question 8Audit Fundamentals and Governance

Which element is a core component of an organization's governance framework?

  1. The payroll register
  2. The inventory count sheet
  3. The board's oversight and accountability structure Correct answer.
  4. The depreciation schedule

Explanation

Governance frameworks comprise the structures, processes, and relationships through which the organization is directed, controlled, and held accountable, centered on board oversight. The other items are operational records, not governance elements.

Question 9Audit Fundamentals and Governance

The three lines model of governance assigns which role to the internal audit function?

  1. Setting the organization's risk appetite
  2. Implementing the internal control system
  3. Providing independent assurance to the governing body Correct answer.
  4. Owning and managing risk in the first line

Explanation

In the three lines model, internal audit sits outside the first and second lines and provides independent, objective assurance to the governing body on risk and control. Management owns and manages risk, and senior leadership sets appetite.

Question 10Audit Fundamentals and Governance

An auditor is planning an engagement and must decide whether to rely on the work of a specialist in valuation. The most appropriate action is to:

  1. decline to use any specialist and perform the valuation personally
  2. delegate the entire engagement conclusion to the specialist
  3. accept the specialist's conclusions without question
  4. evaluate the specialist's competence, objectivity, and methodology before relying on the work Correct answer.

Explanation

When relying on a specialist, the auditor must assess the specialist's competence, objectivity, and the appropriateness of the methods and assumptions used. This preserves the auditor's accountability for the conclusions.

Question 11Audit Fundamentals and Governance

Due professional care requires an internal auditor to:

  1. obtain absolute assurance on every engagement
  2. guarantee that no fraud exists in the audited area
  3. exercise the care and skill expected of a reasonably prudent auditor Correct answer.
  4. detect every error in the records reviewed

Explanation

Due professional care means applying the diligence, skill, and judgment expected of a reasonably prudent and competent auditor. It does not impose a guarantee or require absolute assurance.

Question 12Audit Fundamentals and Governance

The concept of reasonable assurance in auditing recognizes that:

  1. sampling and judgment mean some risk of undetected misstatement remains Correct answer.
  2. auditors should examine every transaction
  3. audit conclusions are always provisional
  4. management is solely responsible for all assurance

Explanation

Reasonable assurance acknowledges that limitations such as sampling, judgment, and the nature of evidence mean auditors cannot eliminate all risk. It is a high but not absolute level of assurance.

Question 13Audit Fundamentals and Governance

An internal auditor discovers that a senior executive may have circumvented a key control. According to professional standards, the auditor should:

  1. ignore the matter to avoid conflict with senior management
  2. wait until the next scheduled audit cycle to act
  3. report the matter through established channels, escalating to the audit committee as appropriate Correct answer.
  4. discuss it only with the executive's direct subordinates

Explanation

Significant matters, especially involving senior management, must be communicated through proper channels and escalated to the audit committee when necessary. Suppressing or delaying such reporting undermines the function's integrity.

Question 14Audit Fundamentals and Governance

Which of the following best describes the purpose of an internal audit manual?

  1. To describe the function's methodology, standards, and procedures Correct answer.
  2. To document the organization's financial policies
  3. To record the results of each engagement
  4. To list the organization's regulatory filings

Explanation

An audit manual sets out the function's methodology, adherence to professional standards, and internal procedures so work is performed consistently. It is a guidance document, not a record of results or financial policies.

Question 15Audit Fundamentals and Governance

An auditor is asked to lead a quality assurance review of the internal audit function's own prior engagements. To preserve independence, the reviewer should ideally be:

  1. a member of the audited department's staff
  2. an independent party not involved in the engagements reviewed Correct answer.
  3. the engagement partner who performed the original work
  4. the chief financial officer

Explanation

Quality assurance reviews should be performed by individuals independent of the work being reviewed, often through external or cross-functional reviewers. Self-review by the original auditor or review by interested parties undermines objectivity.

Question 16Audit Fundamentals and Governance

The chief audit executive should periodically report to the audit committee on:

  1. the personal investment holdings of board members
  2. the marketing department's campaign results
  3. the function's conformance with standards and progress against the audit plan Correct answer.
  4. individual employee performance ratings

Explanation

Periodic reporting to the audit committee covers the function's conformance with professional standards, progress against the plan, resource adequacy, and significant findings. This supports oversight of the function's effectiveness.

Question 17Audit Fundamentals and Governance

Which of the following is the most appropriate way for an internal auditor to maintain confidentiality?

  1. Sharing working papers freely with any interested employee
  2. Posting findings on a public internal website
  3. Discussing engagements in open common areas
  4. Limiting access to engagement information to those with a legitimate need Correct answer.

Explanation

Confidentiality requires restricting access to information to those with a legitimate need to know, consistent with the auditor's ethical obligations. Broad or casual disclosure risks harm to the organization.

Question 18Audit Fundamentals and Governance

An auditor is offered a significant gift by a vendor whose contract is under review. The most appropriate response is to:

  1. accept it because gifts do not affect professional judgment
  2. decline it and disclose the offer per the organization's ethics policy Correct answer.
  3. accept it only if the vendor is a long-term supplier
  4. accept it and reciprocate with a gift of equal value

Explanation

Accepting gifts from parties subject to audit creates an appearance of impaired objectivity and may violate the ethics policy. Declining and disclosing the offer protects the auditor's integrity and the function's credibility.

Question 19Audit Fundamentals and Governance

The audit committee's oversight of the external audit relationship typically includes:

  1. recommending the appointment and reviewing the external auditor's independence Correct answer.
  2. setting the external auditor's hourly billing rate directly
  3. writing the external auditor's opinion letter
  4. performing the external auditor's fieldwork

Explanation

The audit committee oversees the external auditor relationship, including recommending appointment, reviewing independence, and discussing findings. It does not perform the auditor's work or write the opinion.

Question 20Audit Fundamentals and Governance

Which situation most likely creates a self-interest threat to an internal auditor's objectivity?

  1. The auditor rotates between engagements
  2. The auditor has a close family member employed in the department being audited Correct answer.
  3. The auditor uses a standardized work program
  4. The auditor attends a training course on sampling

Explanation

A close family relationship in the audited area creates a self-interest or familiarity threat that can bias judgment. Such relationships should be disclosed and managed, often by reassignment.

Question 21Audit Fundamentals and Governance

The primary responsibility for establishing and maintaining internal control rests with:

  1. management and the board Correct answer.
  2. the audit committee alone
  3. the internal audit function
  4. the external auditor

Explanation

Management, under board oversight, is responsible for designing, implementing, and maintaining internal control. Internal and external auditors evaluate controls but do not own them.

Question 22Audit Fundamentals and Governance

An auditor is evaluating whether the audit committee has sufficient financial expertise. This assessment most directly relates to which governance consideration?

  1. The inventory valuation method
  2. The committee's composition and competence Correct answer.
  3. The external auditor's fee structure
  4. The organization's liquidity position

Explanation

Assessing whether the audit committee has adequate financial expertise concerns its composition and competence, which are central to effective governance oversight. The other items are financial or operational matters unrelated to committee composition.

Question 23Audit Fundamentals and Governance

When the internal audit function lacks the resources to complete the approved audit plan, the chief audit executive should:

  1. cancel all remaining engagements without notice
  2. silently reduce the scope and not inform anyone
  3. communicate the resource limitation and its impact to the audit committee Correct answer.
  4. borrow staff from the audited departments without disclosure

Explanation

Resource limitations that affect the ability to deliver the approved plan are a governance matter that must be communicated to the audit committee. This allows the committee to address resourcing or adjust expectations transparently.

Question 24Audit Fundamentals and Governance

An internal auditor is asked by the chief executive to omit a significant control weakness from the engagement report to avoid embarrassing a business unit. The auditor should:

  1. report the weakness accurately and escalate the pressure to the audit committee Correct answer.
  2. omit the finding but mention it verbally to a colleague
  3. delay the report indefinitely to avoid the conflict
  4. comply because the CEO is senior to the auditor

Explanation

Auditors must report significant findings accurately and resist pressure to suppress them, escalating interference to the audit committee. Independence and integrity require that conclusions not be compromised by management pressure.

Question 25Audit Fundamentals and Governance

Which of the following best describes the distinction between assurance and consulting services provided by an internal audit function?

  1. Assurance and consulting are identical in nature and objectives
  2. Assurance provides independent evaluation of evidence, while consulting provides advisory services to management Correct answer.
  3. Assurance is performed only by external auditors, while consulting is performed only by internal auditors
  4. Consulting requires the auditor to assume management responsibility

Explanation

Assurance engagements involve objective evaluation of evidence against criteria to provide an independent conclusion, while consulting engagements provide advice and insight to management. Both must preserve the auditor's objectivity, and consulting must not involve assuming management responsibility.

Question 26Audit Fundamentals and Governance

Which document formally defines the internal audit function's purpose, authority, and responsibility within an organization?

  1. The code of ethics
  2. The engagement work program
  3. The annual audit plan
  4. The internal audit charter Correct answer.

Explanation

The internal audit charter is the formal written document approved by senior management and the board that establishes the function's purpose, authority, and responsibility. It also defines the scope of internal audit activities and the reporting lines.

Question 27Audit Fundamentals and Governance

Independence for an internal audit function is best achieved when the chief audit executive reports functionally to which body?

  1. The chief financial officer
  2. The operating department under review
  3. The external auditor
  4. The audit committee of the board Correct answer.

Explanation

Functional reporting to the audit committee preserves the auditor's ability to set scope, report results, and escalate matters without management interference. Administrative reporting may run to management, but functional oversight should sit with the board-level committee.

Question 28Audit Fundamentals and Governance

An internal auditor is assigned to audit the accounts payable process after having managed that same process two years earlier. What is the most appropriate action to address the resulting threat to objectivity?

  1. Disclose the prior role and let the engagement client decide
  2. Proceed but exclude any findings that concern former colleagues
  3. Proceed, because the prior role ended more than a year ago
  4. Decline the assignment or arrange for another auditor to perform it Correct answer.

Explanation

A recent operational role in the area being audited creates a self-review threat, because the auditor would be evaluating work they previously controlled. The safeguard is to avoid the assignment or reassign it so that objectivity is preserved.

Question 29Audit Fundamentals and Governance

An organization's board asks internal audit to help redesign a payroll system it will later be required to audit. Which response best reflects professional standards on assurance and consulting roles?

  1. Accept the work and drop payroll from future audit plans
  2. Accept the work but assign the same team to audit the redesign
  3. Accept the work, since internal audit has the most relevant expertise
  4. Decline the work or ensure a later assurance engagement is performed by auditors not involved in the redesign Correct answer.

Explanation

Performing consulting work on a system and then providing assurance over that same system creates a self-review threat. The function may take on the consulting role only if safeguards, such as assigning independent auditors for later assurance, preserve objectivity.

Question 30Audit Fundamentals and Governance

An organization has a strong internal audit function but no independent audit committee, and the chief executive personally approves the audit plan and receives all reports. Which conclusion is most defensible about the governance structure?

  1. Governance is adequate because the chief executive bears ultimate accountability
  2. Governance is adequate because internal audit is well resourced and competent
  3. Governance is weakened because oversight is concentrated in the executive being audited Correct answer.
  4. Governance is irrelevant to the effectiveness of internal audit

Explanation

Effective governance separates those who manage risk from those who oversee it, with independent board-level oversight of internal audit. When the chief executive both approves the plan and receives all reports, the function lacks an independent channel to escalate concerns.

Question 31Audit Planning and Risk Assessment

Which document establishes the auditor's overall strategy for an engagement and is required before detailed audit work begins?

  1. The engagement letter
  2. The management representation letter
  3. The audit report
  4. The audit plan Correct answer.

Explanation

An audit plan sets out the nature, timing, and extent of audit procedures and must be developed before substantive work proceeds. The engagement letter defines the terms of the relationship, not the strategy for the work itself.

Question 32Audit Planning and Risk Assessment

Audit risk is best described as which of the following?

  1. The risk that the auditor expresses an inappropriate opinion when the financial statements are materially misstated Correct answer.
  2. The risk that internal controls will be designed differently than management intended
  3. The risk that a client will terminate the engagement before completion
  4. The risk that the auditor will fail to detect every misstatement in the financial statements

Explanation

Audit risk is the risk that the auditor gives an inappropriate opinion when the financial statements are materially misstated. It is a function of inherent risk, control risk, and detection risk.

Question 33Audit Planning and Risk Assessment

Which component of the audit risk model is the auditor able to directly influence through the design of audit procedures?

  1. Business risk
  2. Detection risk Correct answer.
  3. Control risk
  4. Inherent risk

Explanation

Detection risk is the component the auditor controls, because it depends on the nature, timing, and extent of procedures performed. Inherent and control risk are assessed based on the entity and its environment.

Question 34Audit Planning and Risk Assessment

The auditor's understanding of the entity and its environment is primarily used to do which of the following?

  1. Guarantee that fraud will be detected
  2. Determine the client's tax liability
  3. Identify and assess risks of material misstatement Correct answer.
  4. Eliminate the need for substantive testing

Explanation

Understanding the entity and its environment provides the basis for identifying and assessing risks of material misstatement. It informs the design of further audit procedures but does not eliminate substantive work.

Question 35Audit Planning and Risk Assessment

Materiality is best determined based on which consideration?

  1. The size and nature of misstatements that could influence users' economic decisions Correct answer.
  2. The total number of journal entries posted during the year
  3. The preferences of the client's management
  4. The length of the prior year's audit report

Explanation

Materiality is judged by whether omissions or misstatements could reasonably influence the economic decisions of users. It involves both quantitative thresholds and qualitative factors.

Question 36Audit Planning and Risk Assessment

Which of the following is an example of a risk factor indicating possible fraudulent financial reporting?

  1. Significant pressure on management to meet earnings expectations Correct answer.
  2. A delay in the physical inventory count
  3. A high turnover of staff in the shipping department
  4. A change in the company's bank account signatories

Explanation

Pressure on management to meet earnings expectations is a classic incentive/risk factor for fraudulent financial reporting. Fraud risk factors include incentives, opportunities, and attitudes.

Question 37Audit Planning and Risk Assessment

The auditor should perform analytical procedures during which phase of the audit?

  1. Only during the risk assessment phase
  2. During risk assessment and again near the end of the audit Correct answer.
  3. Only when substantive testing is impossible
  4. Only during the final review phase

Explanation

Analytical procedures are required in the risk assessment phase and near the end of the audit as part of the overall review. They may also be used as substantive procedures.

Question 38Audit Planning and Risk Assessment

An engagement letter is primarily used to do which of the following?

  1. List the audit procedures to be performed
  2. Record the auditor's independence conclusion
  3. Document the auditor's assessment of control risk
  4. Confirm the terms of the audit engagement in writing Correct answer.

Explanation

The engagement letter documents the agreed terms of the engagement, including scope and responsibilities. It helps prevent misunderstandings between auditor and client.

Question 39Audit Planning and Risk Assessment

An auditor sets overall materiality at $100,000 and performance materiality at $75,000. What is the primary purpose of performance materiality?

  1. To set the threshold above which all misstatements must be reported to the board
  2. To reduce to an appropriately low level the probability that uncorrected and undetected misstatements exceed overall materiality Correct answer.
  3. To replace overall materiality when the client is a public entity
  4. To determine the audit fee for the engagement

Explanation

Performance materiality is set below overall materiality to provide a buffer against the aggregation of uncorrected and undetected misstatements. It guides the extent of procedures applied to account balances and classes of transactions.

Question 40Audit Planning and Risk Assessment

An auditor assesses inherent risk as high and control risk as high. What is the effect on detection risk and the extent of substantive procedures?

  1. Acceptable detection risk is higher, so fewer substantive procedures are needed
  2. Acceptable detection risk is lower, so more extensive substantive procedures are needed Correct answer.
  3. Control risk must be reduced before detection risk can be determined
  4. Detection risk is unaffected because it is independent of assessed risks

Explanation

Detection risk is inversely related to the assessed risks of material misstatement. When inherent and control risk are both high, acceptable detection risk is low, requiring more persuasive and extensive substantive procedures.

Question 41Audit Planning and Risk Assessment

Which of the following best describes a significant risk?

  1. A risk that management has disclosed in the financial statements
  2. An identified risk of material misstatement that requires special audit consideration Correct answer.
  3. A risk confined to the IT general controls environment
  4. A risk for which the auditor has no prior-year experience

Explanation

Significant risks are identified risks of material misstatement that, in the auditor's judgment, require special audit consideration, often because of complexity, subjectivity, or fraud potential.

Question 42Audit Planning and Risk Assessment

The auditor plans to rely on controls over the approval of purchase orders. Which of the following must occur before that reliance is justified?

  1. The auditor must increase detection risk to compensate
  2. The auditor must obtain management's written promise to maintain the controls
  3. The auditor must test the operating effectiveness of the controls Correct answer.
  4. The auditor must confirm the controls with the external auditors

Explanation

Reliance on controls requires evidence that the controls operated effectively throughout the period. This is obtained through tests of controls, not merely through inquiry or documentation of design.

Question 43Audit Planning and Risk Assessment

When planning the audit, the auditor's determination of the extent of procedures is most directly affected by which factor?

  1. The size of the client's marketing budget
  2. The physical location of the client's headquarters
  3. The assessed risk of material misstatement and the level of performance materiality Correct answer.
  4. The number of prior-year adjusting entries

Explanation

The extent of procedures depends on the assessed risks and the performance materiality level, along with the persuasiveness of evidence needed. Higher risk or lower materiality generally increases extent.

Question 44Audit Planning and Risk Assessment

Which of the following is the most appropriate source of information for the auditor to understand the entity's industry and regulatory environment?

  1. The auditor's personal investment portfolio
  2. The prior auditor's working papers without client consent
  3. Industry publications, regulatory filings, and discussions with those charged with governance Correct answer.
  4. The client's internal memos only

Explanation

The auditor draws on multiple external and internal sources, including industry publications, regulatory filings, and discussions with governance, to build understanding of the environment.

Question 45Audit Planning and Risk Assessment

An auditor is planning the audit of a company with a high volume of automated sales transactions. Which approach best addresses the risk of misstatement in revenue?

  1. Defer all revenue testing until the final review phase
  2. Perform data analytics over the full population of transactions and test relevant IT controls Correct answer.
  3. Reduce the sample size because the volume is large
  4. Rely entirely on the client's verbal assurances about the system

Explanation

High-volume automated transactions are well suited to full-population data analytics combined with testing of the relevant IT and application controls. This provides more persuasive evidence than small samples.

Question 46Audit Planning and Risk Assessment

The auditor identifies a risk of material misstatement related to complex revenue recognition. Which of the following is the most appropriate planning response?

  1. Rely on the same procedures used in prior years without reassessment
  2. Exclude revenue from the audit plan because it is complex
  3. Lower performance materiality for all accounts to zero
  4. Assign more experienced staff and increase the extent of substantive testing over revenue Correct answer.

Explanation

Complex or high-risk areas warrant more experienced personnel and more extensive, targeted procedures. The audit plan should be tailored to the assessed risks.

Question 47Audit Planning and Risk Assessment

The auditor's documentation of the audit plan should include which of the following?

  1. The nature, timing, and extent of planned risk assessment and further audit procedures Correct answer.
  2. Only the final audit opinion
  3. Personal notes unrelated to the engagement
  4. The client's complete general ledger

Explanation

The audit plan documentation describes the nature, timing, and extent of planned procedures, including risk assessment and further audit procedures. It provides a record of the planned response to assessed risks.

Question 48Audit Planning and Risk Assessment

An auditor uses a preliminary analytical procedure showing that gross margin declined sharply from 40% to 22% while sales grew. What is the most appropriate next step?

  1. Investigate the fluctuation and consider it a risk indicator requiring further procedures Correct answer.
  2. Adjust the financial statements to restore the prior margin
  3. Conclude that fraud has occurred and issue a qualified opinion
  4. Ignore the result because analytical procedures are not evidence

Explanation

Unexpected or significant fluctuations identified in analytical procedures should be investigated and may indicate risks of material misstatement. The auditor then designs further procedures to address those risks.

Question 49Audit Planning and Risk Assessment

Which of the following best describes the relationship between the auditor's risk assessment and the nature of further audit procedures?

  1. Risk assessment has no bearing on the nature of procedures
  2. Higher assessed risk permits the use of less reliable evidence
  3. Lower assessed risk always requires procedures at period end
  4. Higher assessed risk generally calls for more reliable evidence and procedures closer to period end Correct answer.

Explanation

As assessed risk increases, the auditor seeks more reliable and persuasive evidence and may shift the timing of procedures toward period end. Nature, timing, and extent all respond to risk.

Question 50Audit Planning and Risk Assessment

An auditor is deciding whether to use the work of an internal audit function as part of the risk assessment. Which consideration is most relevant?

  1. The size of the internal audit budget only
  2. The internal auditors' objectivity and competence, and the nature of the work performed Correct answer.
  3. The number of years the internal audit director has worked in the industry only
  4. Whether internal audit reports to the marketing department

Explanation

When using the work of internal audit, the external auditor evaluates the objectivity and competence of the function and the nature and quality of the work performed. These factors determine the extent of reliance.