I85PREP
⌘ K
HKICPA QP Module 8 Principles of Auditing - independent subject foundations study materials
HKICPA QP Module 8 Principles of Auditing - independent subject foundations study resources

HKICPA QP Module 8 Principles of Auditing - independent subject foundations practice questions

One question at a time. Build your HKICPA QP Module 8 Principles of Auditing - independent subject foundations understanding.

First 50 of 190 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Audit purposes, risk, ethics and engagement planning

According to HKSA 200, what is the primary objective of an independent auditor conducting an audit of financial statements?

  1. To express an opinion on whether the financial statements are prepared, in all material respects, in accordance with an applicable financial reporting framework Correct answer.
  2. To detect and prevent all instances of fraud, error, and non-compliance with laws and regulations within the client entity
  3. To guarantee the future viability of the entity and the efficiency with which management has conducted its affairs
  4. To prepare the financial statements and verify that they are mathematically accurate and free from all errors

Explanation

HKSA 200 states that the objective of an audit is to enable the auditor to express an opinion on whether the financial statements are prepared, in all material respects, in accordance with an applicable financial reporting framework. The auditor is not responsible for preparing the financial statements, nor does an audit guarantee the future viability of the entity or serve to prevent/detect all fraud.

Question 2Audit purposes, risk, ethics and engagement planning

What level of assurance does an auditor provide in a financial statement audit, and how is it defined?

  1. Absolute assurance, which is a complete guarantee that the financial statements are free from any error
  2. Reasonable assurance, which is a high, but not absolute, level of assurance Correct answer.
  3. Moderate assurance, which is a lower level of assurance based primarily on inquiry and analytical procedures
  4. Limited assurance, which is a negative form of assurance stating that nothing has come to the auditor's attention

Explanation

Reasonable assurance is a high, but not absolute, level of assurance. It is obtained when the auditor has obtained sufficient appropriate audit evidence to reduce audit risk to an acceptably low level. Absolute assurance is not possible due to inherent limitations of an audit.

Question 3Audit purposes, risk, ethics and engagement planning

Which of the following is considered an inherent limitation of an audit that prevents the auditor from obtaining absolute assurance?

  1. The fact that audit evidence is generally persuasive rather than conclusive Correct answer.
  2. The auditor's failure to perform testing on a sample basis due to budgetary constraints
  3. The existence of the HKICPA Code of Ethics which restricts certain audit procedures
  4. The lack of qualification of the audit junior team members assigned to the engagement

Explanation

An inherent limitation of auditing is that most audit evidence is persuasive rather than conclusive. Other limitations include the nature of financial reporting (judgment involved), the nature of audit procedures (limitations in gathering evidence, e.g. fraud concealment), and the need for the audit to be conducted within a reasonable period of time and cost.

Question 4Audit purposes, risk, ethics and engagement planning

An audit firm agrees to act as an advocate for an audit client in resolving a tax dispute with the Inland Revenue Department. What threat to independence is primarily created?

  1. Self-review threat
  2. Advocacy threat Correct answer.
  3. Intimidation threat
  4. Familiarity threat

Explanation

An advocacy threat is created when a professional accountant promotes a client's position or opinion to the point that their objectivity is compromised, such as representing a client in a legal dispute or public forum.

Question 5Audit purposes, risk, ethics and engagement planning

Which of the following best describes the concept of 'professional skepticism' as required by HKSA 200?

  1. An attitude that includes a questioning mind, being alert to conditions which may indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence Correct answer.
  2. A mindset of complete disbelief that assumes management is always dishonest unless proven otherwise
  3. A policy of requesting third-party confirmations for every single transaction recorded by the client
  4. An approach where the auditor accepts all client documents as authentic without verification to save costs

Explanation

HKSA 200 defines professional skepticism as an attitude that includes a questioning mind, being alert to conditions which may indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence. It does not require assuming management is dishonest (nor does it assume they are honest).

Question 6Audit purposes, risk, ethics and engagement planning

Which of the following actions by a professional accountant in public practice would most likely breach the ethical principle of 'professional behavior'?

  1. Providing tax planning advice that minimizes a client's tax liability within the law
  2. Making exaggerated claims for services offered or conducting disparaging comparisons to the work of other accountants Correct answer.
  3. Rejecting a client engagement due to lack of staff resources during the busy season
  4. Requesting written representations from management at the end of the audit

Explanation

The principle of professional behavior requires compliance with laws and regulations. The Code specifically prohibits making exaggerated claims for services or disparaging comparisons to other firms' work, as this discredits the profession.

Question 7Audit purposes, risk, ethics and engagement planning

Which of the following statements best describes the auditor's responsibility regarding fraud under HKSA 240?

  1. The auditor must obtain reasonable assurance that the financial statements as a whole are free from material misstatement, whether caused by fraud or error Correct answer.
  2. The auditor is responsible for the prevention and detection of all fraud within the entity
  3. The auditor has no responsibility whatsoever for identifying fraud, as this is solely management's duty
  4. The auditor must design procedures to detect all immaterial and material frauds, prioritizing employee theft

Explanation

Under HKSA 240, the auditor's objective is to identify and assess the risks of material misstatement of the financial statements due to fraud, and to obtain sufficient appropriate audit evidence. The responsibility is focused on *material* misstatement. The auditor cannot guarantee that all fraud is detected due to inherent limitations.

Question 8Audit purposes, risk, ethics and engagement planning

The audit risk model is defined as Audit Risk (AR) = Inherent Risk (IR) x Control Risk (CR) x Detection Risk (DR). If the auditor assesses Control Risk as high, how must Detection Risk be managed to keep overall Audit Risk at an acceptably low level?

  1. Detection Risk must be decreased by performing more effective substantive procedures Correct answer.
  2. Detection Risk must be increased by performing fewer audit procedures to save time
  3. Detection Risk should remain unchanged since it is independent of Control Risk
  4. Detection Risk must be eliminated completely by obtaining absolute assurance

Explanation

According to the audit risk model, if Inherent Risk or Control Risk (the Risk of Material Misstatement) is high, the auditor must reduce Detection Risk to maintain a low overall Audit Risk. To reduce Detection Risk, the auditor must perform more effective substantive tests (e.g. larger sample sizes, more reliable evidence sources, or changing the timing to year-end).

Question 9Audit purposes, risk, ethics and engagement planning

According to HKSA 320, when is the auditor required to establish materiality for the financial statements as a whole?

  1. Only after the audit fieldwork is completed and the audit opinion is drafted
  2. When establishing the overall audit strategy at the planning stage of the audit Correct answer.
  3. Whenever the client requests a copy of the audit plan and budget
  4. Only when a material error is actually discovered during substantive testing

Explanation

HKSA 320 states that the auditor must establish materiality for the financial statements as a whole when establishing the overall audit strategy. This planning materiality helps determine the nature, timing, and extent of risk assessment procedures and further audit testing.

Question 10Audit purposes, risk, ethics and engagement planning

What is the primary purpose of performing risk assessment procedures under HKSA 315?

  1. To obtain a basis for the identification and assessment of risks of material misstatement at the financial statement and assertion levels Correct answer.
  2. To obtain audit evidence to support the auditor's opinion on the operating effectiveness of controls
  3. To perform detailed calculations of all transactions during the financial year
  4. To provide advice to management on how to improve the profit margin of the business

Explanation

Under HKSA 315, risk assessment procedures are performed to provide a basis for identifying and assessing risks of material misstatement due to fraud or error, which then guides the design of further audit procedures.

Question 11Audit purposes, risk, ethics and engagement planning

Which of the following procedures is required to be performed as a risk assessment procedure in understanding the entity and its environment under HKSA 315?

  1. Analytical procedures Correct answer.
  2. External circularization of receivables
  3. Physical inventory count observation at year-end
  4. Substantive analytical procedures for revenue verification

Explanation

HKSA 315 mandates that risk assessment procedures must include inquiries of management, analytical procedures, and observation and inspection. Analytical procedures at the planning stage help identify unusual transactions or events.

Question 12Audit purposes, risk, ethics and engagement planning

Under the COSO framework (and HKSA 315), which component of internal control sets the overall tone of an organization, influencing the control consciousness of its people?

  1. The Control Environment Correct answer.
  2. Control Activities
  3. Information System and Communication
  4. Monitoring of Controls

Explanation

The Control Environment includes the governance and management functions and the attitudes, awareness, and actions of those charged with governance and management concerning the entity's internal control. It sets the tone of the organization.

Question 13Audit purposes, risk, ethics and engagement planning

Which of the following best defines 'Control Risk' in auditing?

  1. The susceptibility of an assertion to a misstatement that could be material, before consideration of any related controls
  2. The risk that a misstatement that could occur in an assertion will not be prevented, or detected and corrected, on a timely basis by the entity's internal control Correct answer.
  3. The risk that the procedures performed by the auditor will not detect a misstatement that exists and that could be material
  4. The risk that the auditor expresses an inappropriate audit opinion when the financial statements are materially misstated

Explanation

Control Risk is the risk that a misstatement that could occur in an assertion and that could be material, either individually or when aggregated with other misstatements, will not be prevented, or detected and corrected, on a timely basis by the entity's internal control. It is a function of the effectiveness of the design and operation of internal controls.

Question 14Audit purposes, risk, ethics and engagement planning

What is the primary objective of an auditor performing a 'walkthrough test' during internal control evaluation?

  1. To confirm the auditor's understanding of the flow and design of transactions through the accounting system Correct answer.
  2. To test the operating effectiveness of internal controls over a large sample of transactions
  3. To physically count the assets in the warehouse to verify their existence
  4. To replace the internal audit team's annual testing program

Explanation

A walkthrough test involves tracing one or two transactions through the entire accounting system from initiation to recording in the financial statements. The objective is to confirm the auditor's understanding of the system's design and flow, rather than to test operating effectiveness of controls.

Question 15Audit purposes, risk, ethics and engagement planning

Which of the following is required to be documented in the audit engagement letter under HKSA 210?

  1. The detailed list of audit team junior staff and their individual hourly billing rates
  2. The objective and scope of the audit, and the responsibilities of the auditor and management Correct answer.
  3. The specific materiality threshold set for each financial statement line item
  4. The exact date when the auditor will issue an unqualified audit opinion

Explanation

Under HKSA 210, the agreed terms of the audit engagement must be documented in an audit engagement letter. This includes: the objective and scope of the audit; the responsibilities of the auditor; the responsibilities of management; identification of the applicable financial reporting framework; and reference to the expected form and content of any reports to be issued.

Question 16Audit purposes, risk, ethics and engagement planning

Under HKSA 300, how do the overall audit strategy and the detailed audit plan relate to each other?

  1. The audit plan is established first, and it dictates the scope of the overall audit strategy
  2. The overall audit strategy is established first, and it guides the development of the detailed audit plan Correct answer.
  3. They are independent documents that are drafted by different audit firms
  4. The audit strategy replaces the audit plan, making the detailed audit plan unnecessary

Explanation

HKSA 300 states that the auditor must establish an overall audit strategy, which sets the scope, timing, and direction of the audit. Once the overall audit strategy is established, the auditor develops the detailed audit plan (which contains the nature, timing, and extent of specific audit procedures).

Question 17Audit purposes, risk, ethics and engagement planning

How does HKSA 320 define 'performance materiality'?

  1. The amount set by the auditor at less than materiality for the financial statements as a whole to reduce to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality Correct answer.
  2. The maximum amount of misstatement that the client's management is willing to adjust in the accounting records
  3. The threshold below which misstatements are considered clearly trivial and do not need to be accumulated
  4. The performance bonus target set for the audit team if they complete the audit ahead of schedule

Explanation

HKSA 320 defines performance materiality as the amount set by the auditor at less than planning materiality for the financial statements as a whole to reduce to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality for the financial statements as a whole.

Question 18Audit purposes, risk, ethics and engagement planning

Which of the following factors would most likely increase the auditor's assessment of inherent risk at the financial statement level?

  1. The client has a simple business model with no international transactions
  2. The client's industry is experiencing significant technological changes and high business failure rates Correct answer.
  3. The client's accounting department has low employee turnover and experienced staff
  4. The client uses standard, off-the-shelf software with strong IT general controls

Explanation

Significant technological changes and high business failure rates increase the industry's economic pressures and the risk of obsolescence or going concern issues. This increases inherent risk at the entity level.

Question 19Audit purposes, risk, ethics and engagement planning

Which of the following is the most appropriate source of information for an auditor attempting to understand a new client's industry regulations?

  1. The client's internal marketing plan for the next fiscal year
  2. Industry-specific legislation, regulatory guidelines, and publications issued by government and professional bodies Correct answer.
  3. Social media accounts of the client's administrative staff members
  4. Recreations of general ledger accounting balances by the audit junior

Explanation

To understand industry regulations, the auditor should consult external and authoritative sources such as specific legislation, regulatory publications, and guidelines issued by government or professional oversight bodies (e.g. Hong Kong Monetary Authority for banking).

Question 20Audit purposes, risk, ethics and engagement planning

An auditor reduces the level of detection risk they are willing to accept. How does this decision impact the audit work to be performed?

  1. The auditor will perform more extensive substantive procedures at or near the balance sheet date Correct answer.
  2. The auditor will rely more heavily on the client's internal controls and reduce substantive testing
  3. The auditor will increase the planning materiality threshold to reduce the number of samples
  4. The auditor will perform the majority of audit testing at the interim stage to finish earlier

Explanation

To reduce detection risk (the risk that the auditor's procedures fail to detect a material misstatement), the auditor must increase the effectiveness of their testing. This is achieved by performing more extensive substantive procedures, using larger sample sizes, or shifting testing to the year-end (rather than interim).

Question 21Audit purposes, risk, ethics and engagement planning

When planning the audit, the auditor decides to set a lower level of performance materiality compared to the previous year. Assuming overall planning materiality remains the same, what is the effect on the audit?

  1. The scope of the audit work will expand, requiring the auditor to test more transactions and balances Correct answer.
  2. The scope of the audit work will decrease, allowing the auditor to reduce sample sizes
  3. There will be no change to the audit work because overall materiality has not changed
  4. The auditor will be unable to express an opinion due to a scope limitation

Explanation

Setting a lower performance materiality means that smaller misstatements will be considered significant for testing, and the allowance for undetected misstatements is reduced. Consequently, the audit team must perform more extensive testing (larger samples, more items included) to cover the risks.

Question 22Audit purposes, risk, ethics and engagement planning

According to HKSA 315, which of the following is most likely to be identified by the auditor as a 'significant risk' that requires special audit consideration?

  1. Routine, automated processing of monthly payroll transactions with no changes in staff
  2. Transactions with related parties that are outside the normal course of business Correct answer.
  3. Regular cash receipts from local retail store sales checked daily by store managers
  4. Standard depreciation calculations on office furniture using the straight-line method

Explanation

Under HKSA 315, significant risks often arise from non-routine transactions or matters requiring judgment. Transactions with related parties that are outside the normal course of business are specifically identified as significant risks due to the high risk of material misstatement (and potential fraud/management override).

Question 23Audit purposes, risk, ethics and engagement planning

Which of the following events or conditions identified during the planning phase would most likely raise significant doubt about an entity's ability to continue as a going concern under HKSA 570?

  1. The entity recently modernized its manufacturing facility to increase capacity
  2. The entity has experienced net liability or net current liability positions and has major debt covenants it cannot meet Correct answer.
  3. The entity's chief competitor has announced the launch of a new product line next year
  4. A key supplier has increased raw material prices by 3% in line with inflation

Explanation

Under HKSA 570, financial indicators such as a net liability position, net current liability position, and inability to comply with terms of loan agreements (debt covenants) are strong indicators that raise significant doubt about the entity's ability to continue as a going concern.

Question 24Audit purposes, risk, ethics and engagement planning

Which of the following is considered an inherent limitation of any internal control system, regardless of how well it is designed and operated?

  1. The failure of the internal audit team to report directly to the CEO
  2. The potential for human error, collusion among employees, or management override of controls Correct answer.
  3. The lack of automated encryption for all public-facing company websites
  4. The restriction on using external consultants to review control systems

Explanation

No internal control system is perfect because of inherent limitations. These include: human error or mistakes in judgment; the risk of collusion where two or more individuals circumvent controls; and the risk that management overrides the controls.

Question 25Audit purposes, risk, ethics and engagement planning

Which of the following describes an 'IT application control' rather than an 'IT general control' (ITGC)?

  1. The company's policy requiring password complexity and forced resets every 90 days for all users
  2. A programmatic check in the sales system that automatically rejects orders where the transaction value exceeds the customer's credit limit Correct answer.
  3. The physical locking of the main server room door with biometric access logs
  4. An automated disaster recovery plan that backs up the entire system database to the cloud daily

Explanation

IT application controls are automated or manual procedures that operate at a business process level and apply to the processing of individual transactions (e.g. edit checks, credit limit checks). IT general controls (ITGCs) apply to all system components, processes, and data (e.g. password policies, physical security, backup recovery).

Question 26Audit purposes, risk, ethics and engagement planning

Under HKSA 300, why is audit planning considered an iterative and continuous process rather than a discrete, one-off phase of the audit?

  1. Because the auditor must constantly adjust the audit fee based on findings in the field
  2. Because unexpected events, changes in conditions, or audit evidence obtained may require the auditor to modify the overall audit strategy and detailed audit plan Correct answer.
  3. Because the client's management has the right to rewrite the audit program at any time
  4. Because the HKICPA requires a new audit plan to be submitted every month during the engagement

Explanation

Planning is not a discrete phase of an audit, but rather a continual and iterative process. During the course of the audit, as the auditor performs procedures and obtains evidence, they may find information that is significantly different from what was initially assessed, requiring revisions to risks, strategy, and plans.

Question 27Audit purposes, risk, ethics and engagement planning

How does 'business risk' relate to 'audit risk' during the planning phase?

  1. Business risk and audit risk are identical concepts and are calculated using the same formula
  2. Most business risks do not have financial consequences and are therefore ignored by the auditor
  3. A business risk may increase the risk of material misstatement (audit risk) if it has a financial statement impact Correct answer.
  4. Audit risk is assessed first, and then management uses it to determine the company's business risks

Explanation

Business risk is a broader concept representing risks resulting from significant conditions, events, circumstances, or actions that could adversely affect an entity's ability to achieve its objectives. Although not all business risks affect the financial statements, many do, and they can directly increase the Risk of Material Misstatement (audit risk). For example, a failing product line (business risk) increases inventory obsolescence risk (audit risk).

Question 28Audit purposes, risk, ethics and engagement planning

When obtaining an understanding of the entity's selection and application of accounting policies, what should the auditor primarily evaluate under HKSA 315?

  1. Whether the policies are acceptable under the applicable financial reporting framework and consistent with industry practices Correct answer.
  2. Whether the policies maximize the client's current year net income to satisfy shareholders
  3. Whether the policies are the simplest to audit to reduce firm resource allocation
  4. Whether the policies were personally written and signed off by the audit committee

Explanation

The auditor must evaluate whether the entity's accounting policies are appropriate for its business and consistent with the applicable financial reporting framework (e.g., HKFRSs) and the accounting policies used in its relevant industry.

Question 29Audit purposes, risk, ethics and engagement planning

When assessing the Risk of Material Misstatement (RMM), how should the auditor distinguish between risks at the financial statement level and risks at the assertion level?

  1. Risks at the financial statement level relate to specific account balances, whereas risks at the assertion level affect the firm's reputation
  2. Risks at the financial statement level have a pervasive effect on the financial statements as a whole, whereas risks at the assertion level relate to specific classes of transactions, account balances, and disclosures Correct answer.
  3. Financial statement level risks are assessed by the audit partner, while assertion level risks are only assessed by junior staff
  4. Assertion level risks require absolute assurance, while financial statement level risks only require reasonable assurance

Explanation

Risks of material misstatement at the financial statement level refer to risks that relate pervasively to the financial statements as a whole and potentially affect many assertions (e.g., weak control environment, management integrity issues). Risks at the assertion level are linked to specific accounts, transactions, or disclosures (e.g. inventory valuation, completeness of sales).

Question 30Audit purposes, risk, ethics and engagement planning

An auditor reviews a control where bank reconciliations are prepared monthly by an accountant and reviewed by the financial controller. What type of control is this?

  1. Preventive control
  2. Detective control Correct answer.
  3. IT general control
  4. Directive control

Explanation

Reconciliations are detective controls because they are designed to identify and correct errors or omissions after they have occurred in the accounting records. Preventive controls aim to prevent errors before they occur (e.g. segregation of duties, system authorization).

Question 31Audit purposes, risk, ethics and engagement planning

Which of the following audit procedures in a detailed audit program is designed to test the 'completeness' assertion for trade receivables?

  1. Selecting a sample of trade receivables from the aged trial balance and tracing them to the sales invoices and shipping documents
  2. Selecting a sample of shipping documents close to year-end and tracing them to the sales invoices and the receivables ledger Correct answer.
  3. Confirming balances directly with customers using positive confirmation requests
  4. Reviewing the aging of trade receivables to assess the adequacy of the allowance for doubtful accounts

Explanation

To test completeness (that all sales/receivables that should have been recorded are recorded), the auditor starts with the source documents (shipping documents showing goods were sent) and traces them forward into the sales ledger/receivables records. Starting from the ledger and tracing backward tests existence/occurrence.

Question 32Audit purposes, risk, ethics and engagement planning

An auditor notes that the client's management is under significant pressure to meet profit targets to secure bank refinancing. How should this impact the audit planning and risk assessment?

  1. It raises the risk of material misstatement at the financial statement level, specifically regarding fraud and management override of controls Correct answer.
  2. It requires the auditor to immediately resign from the audit as it is a criminal offence to audit such entities
  3. It allows the auditor to issue a qualified opinion at the planning stage without further testing
  4. It has no impact since bank refinancing is an external matter unrelated to financial reporting

Explanation

Management pressure to meet profit targets represents an incentive/pressure (one of the three components of the fraud triangle). This increases the Risk of Material Misstatement due to fraud, which is pervasive and affects the financial statements at the financial statement level.

Question 33Audit purposes, risk, ethics and engagement planning

Why is it critical for an auditor to understand whether a client operates in a highly regulated industry (e.g., commercial banking) during the planning stage?

  1. To determine if the audit fees can be shared with the industry regulatory bodies
  2. Because non-compliance with industry-specific laws and regulations could result in material misstatements or threaten the entity's going concern status Correct answer.
  3. To allow the regulator to draft the audit report and take liability for the opinion
  4. Because the auditor is legally required to act as the compliance officer for the client

Explanation

Under HKSA 250, the auditor must obtain an understanding of the legal and regulatory framework applicable to the entity and how the entity complies. In highly regulated industries, non-compliance can lead to severe fines, operational bans, or loss of license, which can have a material impact on the financial statements or threaten going concern.

Question 34Audit purposes, risk, ethics and engagement planning

Which of the following audit procedures must be performed in every audit to address the risk of management override of controls under HKSA 240?

  1. Performing a 100% check of all accounts payable vendors against government registries
  2. Testing the appropriateness of journal entries recorded in the general ledger and other adjustments made in the preparation of the financial statements Correct answer.
  3. Requiring the board of directors to sign a document admitting that no override has occurred
  4. Replacing the CFO with an independent external accountant for the final month of the year

Explanation

HKSA 240 states that management override of controls is a pervasive risk of fraud and is a significant risk. In all audits, the auditor must perform specific procedures: (1) test the appropriateness of journal entries; (2) review accounting estimates for biases; and (3) evaluate the business rationale for significant transactions outside the normal course of business.

Question 35Audit purposes, risk, ethics and engagement planning

What is the primary risk associated with performing tests of controls and substantive procedures at an interim date (e.g., month 9 of a 12-month fiscal year) rather than at year-end?

  1. The audit fees will be lower, reducing the firm's profitability
  2. Misstatements could occur in the remaining period (months 10 to 12) that are not detected by the auditor Correct answer.
  3. The client's staff will be too busy to assist the auditor during the final audit phase
  4. The auditor will violate the HKICPA rules which strictly prohibit any interim audit testing

Explanation

The primary risk is that transactions and control activities occurring in the 'remaining period' (between the interim testing date and the year-end date) may change, contain errors, or go unchecked. The auditor must perform further procedures (roll-forward procedures) to cover this risk.

Question 36Audit purposes, risk, ethics and engagement planning

Under what circumstances should the auditor revise materiality for the financial statements as a whole during the execution phase of the audit?

  1. If the client's stock price rises significantly on the local exchange
  2. If the auditor becomes aware of information during the audit that would have caused them to determine a different amount initially Correct answer.
  3. Only if the client formally requests that the materiality threshold be raised to reduce audit adjustments
  4. Materiality is set in stone at the planning stage and can never be revised once the engagement letter is signed

Explanation

According to HKSA 320, the auditor must revise materiality if they become aware of information during the audit (e.g., actual financial results differ significantly from estimates used at planning, or a change in the entity's circumstances) that would have caused them to determine a different amount initially.

Question 37Audit purposes, risk, ethics and engagement planning

Which of the following statements best describes the risk of an auditor relying blindly on a 'standardized audit program' template without customizing it for the client?

  1. The audit fees will automatically double under HKICPA rules
  2. The auditor may fail to design and perform procedures addressing the client's unique risks of material misstatement, leading to an ineffective audit Correct answer.
  3. The client's management will refuse to provide the representation letter
  4. The standardized program will be rejected by the audit software as duplicate file content

Explanation

Standardized audit programs are useful starting points, but failing to tailor them to the client's specific business model, environment, and assessed risks means the auditor might miss unique, high-risk areas, leading to a failure to detect material misstatements.

Question 38Audit purposes, risk, ethics and engagement planning

Under HKSA 540 (Auditing Accounting Estimates and Disclosures), which of the following accounting estimates would most likely be assessed as having high estimation uncertainty and therefore represents a higher risk of material misstatement?

  1. Depreciation of office computers using a standard straight-line method over a 3-year useful life
  2. A provision for a pending patent infringement lawsuit where there is little historical data or legal consensus on the outcome Correct answer.
  3. The calculation of monthly utility accruals based on the previous month's invoice
  4. The valuation of inventory at the lower of cost and net realizable value using recent selling prices

Explanation

Under HKSA 540, estimation uncertainty is the susceptibility of an accounting estimate and related disclosures to an inherent lack of precision. Estimates with high uncertainty (e.g. pending litigation outcomes with no precedents) require significant subjective judgment and have higher risk of material misstatement.

Question 39Audit purposes, risk, ethics and engagement planning

An audit client outsources its entire customer billing and collections function to a third-party service organization. According to HKSA 402, what is the auditor's responsibility regarding this outsourced function?

  1. The auditor can exclude billing and collections from the audit scope since the work is performed by a third party
  2. The auditor must obtain an understanding of the services provided by the service organization, including internal controls, to assess the risks of material misstatement Correct answer.
  3. The auditor must perform physical audits of the service organization's offices every month
  4. The auditor must require the service organization to change its accounting software to match the client's system

Explanation

Under HKSA 402, services provided by a service organization are part of the user entity's information system relevant to financial reporting. The auditor must obtain an understanding of how the client uses these services and the controls at the service organization (often by obtaining a Type 1 or Type 2 SOC report from the service auditor).

Question 40Audit purposes, risk, ethics and engagement planning

During the planning of an initial audit engagement, what is the auditor's primary responsibility regarding opening balances under HKSA 510?

  1. To re-audit the prior year's financial statements in full and issue a new audit report for that year
  2. To obtain sufficient appropriate audit evidence about whether the opening balances contain misstatements that materially affect the current period's financial statements Correct answer.
  3. To assume all opening balances are correct if the predecessor auditor was a well-known international firm
  4. To adjust all opening balances to zero and start accounting records fresh

Explanation

Under HKSA 510, for initial audit engagements, the auditor's objective with respect to opening balances is to obtain sufficient appropriate audit evidence about whether opening balances contain misstatements that materially affect the current period's financial statements, and whether appropriate accounting policies are consistently applied.

Question 41Audit purposes, risk, ethics and engagement planning

Under HKSA 550, which of the following is a key audit planning procedure required to address the risks associated with related party relationships and transactions?

  1. Inquiring of management regarding the identity of the entity's related parties, the nature of the relationships, and whether any transactions occurred Correct answer.
  2. Requiring the client to terminate all business contracts with related parties before the audit report is issued
  3. Publishing the list of related parties in local newspapers to check if the public has objections
  4. Increasing the audit fee automatically by 50% for every related party identified

Explanation

HKSA 550 requires the auditor to inquire of management regarding the identity of the entity's related parties (including changes from the prior period), the nature of the relationships, and whether the entity entered into any transactions with these related parties during the period.

Question 42Audit purposes, risk, ethics and engagement planning

How should an auditor assess cybersecurity risks under HKSA 315 during the planning phase?

  1. Cybersecurity is purely an operational risk and is not considered during a financial statement audit
  2. The auditor should assess whether cybersecurity threats (e.g., risk of ransomware or data breaches) could affect the integrity of financial reporting systems or lead to material unrecorded liabilities Correct answer.
  3. The auditor must perform pen-testing (penetration testing) on the client's firewalls themselves
  4. The auditor must require the client to purchase cybersecurity insurance from an approved audit partner

Explanation

Under HKSA 315, the auditor must understand the entity's IT environment. Cybersecurity risks are assessed because breaches can lead to loss/corruption of financial data, unauthorized access to systems (causing errors or fraud), or significant unrecorded liabilities (e.g. regulatory fines, lawsuits for data loss).

Question 43Audit evidence, assertions, sampling and transaction cycles

According to HKSA 500, how are the 'sufficiency' and 'appropriateness' of audit evidence distinguished?

  1. Sufficiency is the measure of the quantity of audit evidence, while appropriateness is the measure of the quality of audit evidence Correct answer.
  2. Sufficiency refers to the ethical behavior of the audit team, while appropriateness refers to the suitability of the client's accounting software
  3. Sufficiency is the quality of evidence, while appropriateness is the quantity of evidence
  4. Sufficiency and appropriateness are synonyms and are used interchangeably in HKSAs

Explanation

HKSA 500 states that sufficiency is the measure of the quantity of audit evidence. Appropriateness is the measure of the quality of audit evidence; that is, its relevance and its reliability in providing support for the conclusions on which the auditor's opinion is based.

Question 44Audit evidence, assertions, sampling and transaction cycles

According to the general principles in HKSA 500, which of the following types of audit evidence is generally considered most reliable?

  1. Audit evidence obtained from independent sources outside the entity Correct answer.
  2. Oral representations made by the client's internal sales staff
  3. Photocopies or scanned copies of client internal shipping logs
  4. Audit evidence generated internally when the related controls are assessed as weak

Explanation

HKSA 500 sets out generalizations about the reliability of audit evidence: evidence is more reliable when obtained from independent sources outside the entity, when controls are effective, when obtained directly by the auditor, when in documentary form, and when it consists of original documents.

Question 45Audit evidence, assertions, sampling and transaction cycles

What does the term 'population' refer to in the context of audit sampling under HKSA 530?

  1. The total number of shareholders registered in the company's register
  2. The entire set of data from which a sample is selected and about which the auditor wishes to draw conclusions Correct answer.
  3. The number of employees working in the client's accounting department
  4. The total number of transactions that the audit team was able to test during the interim phase

Explanation

HKSA 530 defines 'population' as the entire set of data from which a sample is selected and about which the auditor wishes to draw conclusions.

Question 46Audit evidence, assertions, sampling and transaction cycles

Which of the following is a key characteristic of 'statistical sampling' as defined in HKSA 530?

  1. The selection of sample items is based entirely on the auditor's personal preference and judgment
  2. Random selection of the sample items, and the use of probability theory to evaluate sample results Correct answer.
  3. The exclusion of all transactions that exceed the materiality threshold from selection
  4. The use of a fixed sample size of exactly 100 items for all accounts tested

Explanation

Under HKSA 530, statistical sampling is an approach to sampling that has the following characteristics: (i) random selection of the sample items; and (ii) the use of probability theory to evaluate sample results, including measurement of sampling risk.

Question 47Audit evidence, assertions, sampling and transaction cycles

Which of the following is the best example of a Computer-Assisted Audit Technique (CAAT) categorized as 'Generalized Audit Software' (GAS)?

  1. A database query tool used by the auditor to filter and extract all journal entries exceeding HK$1,000,000 from the client's transaction history Correct answer.
  2. A spreadsheet used by the client to calculate monthly bank reconciliations
  3. A security camera system monitoring the client's IT server room
  4. An email software used by the auditor to send positive circularizations to debtors

Explanation

Generalized Audit Software (GAS) includes computer programs (like ACL, IDEA, or SQL queries) used by the auditor to process data of audit significance from the client's accounting systems. Filtering and extracting large transactions is a classic GAS application.

Question 48Audit evidence, assertions, sampling and transaction cycles

Which of the following management assertions relates to whether all transactions and events that should have been recorded have been recorded in the financial statements?

  1. Occurrence
  2. Completeness Correct answer.
  3. Accuracy
  4. Cut-off

Explanation

The completeness assertion relates to whether all transactions, assets, liabilities, or equity interests that should have been recorded have actually been recorded.

Question 49Audit evidence, assertions, sampling and transaction cycles

When the external auditor uses the work of an auditor's expert under HKSA 620, who retains sole and ultimate responsibility for the audit opinion expressed on the financial statements?

  1. The auditor's expert who performed the specialized valuation work
  2. The external auditor Correct answer.
  3. The client's audit committee who approved the expert's contract
  4. The professional body (HKICPA) that licensed the auditor and the expert

Explanation

HKSA 620 states that the external auditor has sole responsibility for the audit opinion expressed, and that responsibility is not reduced by the auditor's use of the work of an auditor's expert.

Question 50Audit evidence, assertions, sampling and transaction cycles

Which of the following describes the CAAT procedure known as 'test data'?

  1. The auditor entering dummy transactions into the client's computer system to verify whether the system controls correctly process or reject them Correct answer.
  2. The auditor running a backup database on their own laptop to verify account totals
  3. The auditor sending written requests to the client's bank to test cash existence
  4. A questionnaire sent to employees to test their knowledge of the company's password policy

Explanation

Test data is a CAAT technique where the auditor inputs test data (containing both valid and invalid transactions) into the client's computer system, and compares the system's output with the auditor's pre-calculated results to determine if application controls (e.g. limit checks, edit tests) are operating effectively.