I85PREP
⌘ K
CPA Advanced Auditing study materials
CPA Advanced Auditing study resources

CPA Advanced Auditing practice questions

One question at a time. Build your CPA Advanced Auditing understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is engaged to perform a review of interim financial information under ISRE 2410. Which level of assurance does the practitioner provide in the review report?

  1. Limited assurance that the interim financial information is free from material misstatement Correct answer.
  2. No assurance, because a review consists only of inquiry and analytical procedures
  3. Reasonable assurance that the interim financial information is free from material misstatement
  4. Absolute assurance based on the auditor's cumulative knowledge from the prior year audit

Explanation

A review performed under ISRE 2410 provides negative (limited) assurance, expressed as a conclusion on whether anything has come to the practitioner's attention indicating that the information is not prepared, in all material respects, in accordance with the applicable framework. It is a lower level of assurance than an audit, but it is still assurance, so the report conveys a conclusion rather than an opinion.

Question 2Advanced auditing and assurance (segment content domains not enumerated in source)

Under ISA 520, an auditor designs substantive analytical procedures to obtain audit evidence about a recorded revenue figure. Which condition is most essential before relying on the outcome of those procedures?

  1. The entity uses a computerized accounting system for revenue recognition
  2. The entity's revenue transactions are all approved by the same individual
  3. The auditor has developed an expectation precise enough to identify a material misstatement Correct answer.
  4. The auditor has tested the operating effectiveness of controls over revenue in prior years

Explanation

ISA 520 requires the auditor to evaluate the reliability of the expectation and to design the procedure so that differences significant enough to require investigation can be identified. Precision of the expectation is the key determinant of whether the procedure can detect a material misstatement; a vague expectation yields weak evidence regardless of system type or prior control testing.

Question 3Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor identifies a risk of material misstatement due to fraud in revenue recognition arising from side agreements that permit customers to return goods. Which procedure is most responsive to this specific risk?

  1. Recomputing the mathematical accuracy of the revenue ledger
  2. Reading the sales contracts and inquiring of sales personnel about undisclosed terms Correct answer.
  3. Inspecting the entity's revenue recognition policy in the accounting manual
  4. Confirming the standard terms of sale with a sample of customers

Explanation

When the risk is that side agreements alter the substance of a sale, the auditor must look beyond the recorded transaction terms. Reading contracts and making targeted inquiries of sales personnel who negotiate terms is designed to uncover undisclosed arrangements that could indicate premature revenue recognition. Confirming standard terms or recomputing totals would not detect non-standard side letters.

Question 4Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor uses audit sampling to test the operating effectiveness of a control over purchase approvals. Which factor most directly increases the required sample size?

  1. A decrease in the population size from 5,000 to 4,000 items
  2. An increase in the expected rate of deviation
  3. A decrease in the tolerable rate of deviation Correct answer.
  4. An increase in the assessed level of control risk

Explanation

In attribute sampling for controls, the tolerable rate of deviation is the maximum deviation rate the auditor is willing to accept without altering the assessed risk. A lower tolerable rate means a tighter acceptance threshold, which requires a larger sample to distinguish an acceptable population from an unacceptable one. Expected deviation rate and population size also affect sample size, but the question asks which of the listed changes most directly increases it; a lower tolerable rate does so, whereas a higher expected rate also increases sample size but is not the option presented as decreasing. Careful: option 1 increases sample size too, so the distinguishing factor is that only option 0 is framed as a decrease in the tolerable rate, which unambiguously increases sample size.

Question 5Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating whether a component auditor's work can be used for a group audit under ISA 600. Which matter is most relevant to the group engagement partner's decision to rely on that work?

  1. The component auditor's fee relative to the group audit budget
  2. The number of years the component auditor has audited the component
  3. The component auditor's membership in the same professional network
  4. The component auditor's independence and professional competence Correct answer.

Explanation

ISA 600 requires the group engagement partner to evaluate whether the component auditor understands and will comply with ethical requirements, is independent, and has the competence and capability to perform the work. Independence and competence are the foundational criteria; fee, tenure, and network membership are not substitutes for that evaluation.

Question 6Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor concludes that a material uncertainty related to going concern exists but that management's use of the going concern basis is appropriate and disclosures are adequate. Under ISA 570, how should the auditor report this?

  1. Issue an adverse opinion because the financial statements are not prepared on a going concern basis
  2. Include an emphasis of matter paragraph in place of the key audit matters section
  3. Issue a qualified opinion because of the material uncertainty
  4. Include a separate section headed 'Material Uncertainty Related to Going Concern' without modifying the opinion Correct answer.

Explanation

When the going concern basis remains appropriate and the disclosures are adequate, ISA 570 requires the auditor to include a separate section under the heading 'Material Uncertainty Related to Going Concern' and to state that the auditor's opinion is not modified. The section draws users' attention to the disclosure without changing the opinion.

Question 7Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor plans to use the work of an auditor's expert in valuing complex financial instruments. Which action is required of the auditor under ISA 620?

  1. Evaluate the expert's competence, capabilities, and objectivity and understand the expert's field of expertise Correct answer.
  2. Require the expert to sign the auditor's report jointly with the engagement partner
  3. Disclose the expert's identity in the auditor's report
  4. Accept the expert's findings without further procedures because the expert is professionally qualified

Explanation

ISA 620 requires the auditor to evaluate whether the auditor's expert has the necessary competence, capabilities, and objectivity, and to obtain an understanding of the expert's field of expertise sufficient to determine the nature and extent of work needed. The auditor remains responsible for the opinion and cannot simply defer to the expert.

Question 8Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is assessing the reliability of a data analytics procedure that compares payroll payments to human resources records. Which factor most undermines the reliability of the evidence produced?

  1. The payroll file contains 12,000 records rather than the expected 10,000
  2. The human resources master file is maintained by the same department that processes payroll Correct answer.
  3. The reconciliation was performed monthly rather than weekly
  4. The analysis was performed using generalized audit software

Explanation

The reliability of analytical evidence depends heavily on the independence and integrity of the source data. If the comparison file is maintained by the same department that processes payroll, a common error or manipulation could affect both datasets, reducing the procedure's ability to detect misstatement. Volume, software choice, and frequency do not by themselves compromise source independence.

Question 9Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor obtains an external confirmation of a receivable balance. Which characteristic most affects the reliability of that confirmation as audit evidence?

  1. The confirmation relates to a customer with a long trading history
  2. The confirmation response was received electronically rather than by post
  3. The confirmation was returned with a signature that the auditor cannot verify
  4. The confirmation was sent by the auditor rather than by the client Correct answer.

Explanation

ISA 505 emphasizes that the auditor should maintain control over confirmation requests and responses. When the auditor sends the request directly, the risk that the client intercepts or alters the response is reduced, making the evidence more reliable. The medium of response and the customer's trading history are less decisive than control over the process.

Question 10Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating management's estimate of an environmental provision. Which approach best addresses the risk of management bias in the estimate?

  1. Testing the mathematical accuracy of the provision calculation only
  2. Developing an independent expectation and comparing it with management's estimate Correct answer.
  3. Reviewing the board minutes for approval of the provision amount
  4. Accepting the estimate because it falls within the range disclosed in prior years

Explanation

ISA 540 requires the auditor to evaluate how management has considered alternative assumptions and the reasons for the selected estimate. Developing an independent expectation and comparing it to management's point estimate or range directly tests for bias and reasonableness. Recalculation and board approval do not assess whether the assumptions themselves are biased.

Question 11Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is considering whether to use the work of an internal audit function under ISA 610. Which factor is most important in determining the extent to which the auditor may use that work?

  1. The internal audit function has a larger budget than the external auditor
  2. The internal audit function uses the same audit software as the external auditor
  3. The internal audit function reports to the audit committee
  4. The internal audit function's organizational status and the policies supporting its objectivity Correct answer.

Explanation

ISA 610 requires the external auditor to evaluate the internal audit function's objectivity, level of competence, and whether a systematic and disciplined approach is applied. Organizational status and supporting policies are central to assessing objectivity. Reporting lines and software choices may be relevant context but are not the primary criterion.

Question 12Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor identifies a material misstatement in inventory that management refuses to correct. The misstatement is material but not pervasive. Which opinion and report modification is appropriate under ISA 705?

  1. Disclaimer of opinion with a basis for disclaimer section
  2. Unmodified opinion with an emphasis of matter paragraph
  3. Adverse opinion with a basis for adverse opinion section
  4. Qualified opinion with a basis for qualified opinion section Correct answer.

Explanation

ISA 705 requires a qualified opinion when the auditor concludes that misstatements are material but not pervasive. The report must include a basis for qualified opinion section describing the matter. An adverse opinion is reserved for misstatements that are both material and pervasive.

Question 13Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is performing procedures on a client's journal entries as part of the response to fraud risk. Which criterion is most useful for selecting journal entries for testing?

  1. Entries posted by the accounts payable clerk
  2. Entries that were approved by the controller
  3. Entries recorded on the last day of the fiscal year
  4. Entries that are round numbers or lack a supporting description Correct answer.

Explanation

ISA 240 directs the auditor to select journal entries and other adjustments based on characteristics that may indicate fraud, such as entries that are round numbers, lack a description, or are posted at unusual times. These characteristics increase the likelihood that an entry was made to manipulate reported results. Approval by the controller or posting by a particular clerk is less indicative than the entry's own attributes.

Question 14Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is engaged to perform an assurance engagement on a sustainability report using a criteria-based framework. Which matter is most important when evaluating the suitability of the criteria?

  1. The criteria are publicly available and consistently applied Correct answer.
  2. The criteria are approved by the entity's board of directors
  3. The criteria were developed by the entity's management
  4. The criteria are more stringent than those used by industry peers

Explanation

Suitable criteria must be relevant, complete, reliable, neutral, and understandable. Public availability and consistent application support understandability and comparability. Criteria developed solely by management or approved only by the board may lack the independence and rigor needed for an assurance engagement.

Question 15Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is documenting the audit plan for a new client. Which element is required in the audit strategy under ISA 300?

  1. The characteristics of the engagement that define its scope Correct answer.
  2. The client's internal control questionnaires
  3. The detailed audit program for each account balance
  4. The names of all staff assigned to fieldwork

Explanation

ISA 300 requires the auditor to establish the overall audit strategy, which includes identifying the characteristics of the engagement that define its scope, ascertaining the reporting objectives, and considering factors that determine the focus of the audit. Detailed programs and staff names are part of the audit plan, not the strategy.

Question 16Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the adequacy of disclosures about related party transactions. Which procedure best addresses the risk that related party relationships have not been identified?

  1. Reviewing the entity's tax returns for the year
  2. Confirming the entity's bank balances directly with the bank
  3. Testing the accuracy of the fixed asset register
  4. Inspecting the minutes of board meetings and reviewing conflict-of-interest declarations Correct answer.

Explanation

ISA 550 requires the auditor to inspect records and documents, including minutes and conflict-of-interest declarations, to identify related party relationships and transactions. These sources are specifically designed to capture governance and conflict information. Tax returns, bank confirmations, and asset registers are less directly relevant to identifying related parties.

Question 17Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is assessing whether a client's information system provides reliable data for audit purposes. Which control is most relevant to the completeness of revenue transactions?

  1. A monthly review of the sales price list
  2. A review of the revenue recognition policy by the CFO
  3. A reconciliation of the revenue subledger to the general ledger Correct answer.
  4. A credit check performed before each sale

Explanation

Completeness of revenue is supported by reconciliations that ensure all transactions recorded in the subledger are transferred to the general ledger. A reconciliation detects omissions in the posting process. Credit checks and price list reviews address authorization and accuracy rather than completeness.

Question 18Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is reviewing the work of an engagement quality reviewer under ISQM 2. Which statement best describes the reviewer's role?

  1. The reviewer provides an objective evaluation of significant judgments and the conclusions reached Correct answer.
  2. The reviewer approves the engagement fee before the report is issued
  3. The reviewer performs substantive testing to supplement the engagement team's work
  4. The reviewer signs the auditor's report jointly with the engagement partner

Explanation

ISQM 2 requires the engagement quality reviewer to perform an objective evaluation of the significant judgments made by the engagement team and the conclusions reached in formulating the report. The reviewer does not perform the audit or co-sign the report, and fee approval is not part of the role.

Question 19Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is testing a client's allowance for credit losses. The client uses a model that relies on historical loss rates. Which condition would most likely cause the auditor to challenge the model's assumptions?

  1. The historical loss period excludes a recent economic downturn Correct answer.
  2. The model uses data from the client's own loan portfolio
  3. The model was reviewed by the internal audit function
  4. The model was validated by an independent third party

Explanation

ISA 540 requires the auditor to evaluate whether the assumptions used by management are reasonable in light of the entity's circumstances. Excluding a recent downturn from the historical loss period can understate expected credit losses and may indicate bias or an incomplete data set. Third-party validation and internal review support reliability rather than undermine it.

Question 20Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating whether to place reliance on a service organization's controls. Which report provides the auditor with assurance about the suitability of the design and operating effectiveness of controls at the service organization?

  1. A SOC 1 Type 1 report
  2. A SOC 1 Type 2 report Correct answer.
  3. A SOC 3 general use report
  4. A SOC 2 Type 1 report

Explanation

A SOC 1 Type 2 report covers both the suitability of the design and the operating effectiveness of controls over a period, which is what an auditor needs to rely on those controls. A Type 1 report addresses design only at a point in time, and SOC 2 and SOC 3 reports address trust services criteria rather than financial reporting controls.

Question 21Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is considering the use of audit data analytics to test an entire population of transactions. Which statement best describes the effect on sampling risk?

  1. Sampling risk is reduced but not eliminated because the data may be incomplete
  2. Sampling risk is eliminated because all items are tested Correct answer.
  3. Sampling risk is unchanged because the auditor still exercises judgment
  4. Sampling risk increases because the population is larger

Explanation

When the auditor tests 100% of a population, sampling risk, which arises from the possibility that a sample is not representative, is eliminated. The auditor still faces other risks, such as the risk that the data is incomplete or that the procedure itself is ineffective, but those are not sampling risk.

Question 22Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is reviewing the client's accounting for a complex lease under IFRS 16. Which source of evidence is generally most reliable for determining the lease term?

  1. A budget showing expected cost savings from the lease
  2. The written lease contract and related side agreements Correct answer.
  3. A press release announcing the lease transaction
  4. Management's oral representation about intended use of the asset

Explanation

Written contracts and side agreements are documentary evidence originating from the transaction itself and are generally more reliable than oral representations or internal budgets. The lease term depends on enforceable rights and obligations, which are best established by the contract terms.

Question 23Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating a client's compliance with covenants in a loan agreement. Which procedure is most appropriate for obtaining evidence about compliance?

  1. Confirming the loan balance with the bank only
  2. Reviewing the loan agreement and recomputing the covenant ratios from audited figures Correct answer.
  3. Inquiring of management whether the covenants have been met
  4. Reviewing the client's credit rating

Explanation

Compliance with covenants requires the auditor to understand the covenant terms in the loan agreement and to recompute the relevant ratios using reliable figures. Inquiry alone is insufficient, and confirming the balance does not address covenant compliance. Reviewing the credit rating is not evidence of compliance.

Question 24Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is assessing the risk of material misstatement in a first-year audit of a company that has recently changed its revenue recognition software. Which matter most increases the risk of material misstatement?

  1. The new software has not yet been tested for accurate calculation of revenue Correct answer.
  2. The new software was implemented by an experienced project team
  3. The company's audit committee meets quarterly
  4. The company's revenue has grown steadily over the past three years

Explanation

A new system that has not been tested creates risk that revenue is calculated or recorded incorrectly, particularly in the first year of implementation. Experienced implementation, steady growth, and regular committee meetings do not offset the risk that untested software produces inaccurate results.

Question 25Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is performing a review of a client's interim financial information and identifies a departure from the applicable framework that is material. Which action is appropriate under ISRE 2410?

  1. Modify the conclusion and describe the departure in the basis for conclusion section Correct answer.
  2. Express an adverse conclusion in the review report
  3. Withdraw from the engagement without further communication
  4. Issue a disclaimer of conclusion because a review cannot address material misstatements

Explanation

Under ISRE 2410, when the practitioner becomes aware of a material departure from the applicable financial reporting framework, the conclusion is modified and the matter is described in a basis for conclusion section. A review report does not use an adverse opinion in the same way as an audit, and withdrawal is not the prescribed response when the matter can be reported.

Question 26Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the sufficiency of audit evidence obtained from substantive analytical procedures on revenue. Which factor most directly determines the level of assurance that such procedures can provide?

  1. The length of time the client has been audited by the firm
  2. The precision of the expectation developed by the auditor and the reliability of the underlying data Correct answer.
  3. The format of the working paper template used to document the procedure
  4. The size of the client's accounting department and the number of staff performing the procedures

Explanation

The assurance from substantive analytical procedures depends on how precise the auditor's expectation is and how reliable the data used to form it are. A tighter, well-corroborated expectation with predictable relationships supports stronger conclusions than a loose comparison.

Question 27Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is designing tests of controls over the three-way match in a procurement system. Which approach provides the most persuasive evidence that the control operated effectively throughout the period?

  1. A single walkthrough of one transaction at year end
  2. A systematic sample of matched transactions across the period, with reperformance of the match Correct answer.
  3. Observation of the control at one point in time combined with inquiry
  4. Inquiry of the purchasing manager about the control's design and operation

Explanation

Control effectiveness across a period requires testing a representative sample spanning the period and reperforming the control. Inquiry, observation, and a single walkthrough provide limited evidence about operation over time.

Question 28Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor identifies a deficiency in a control and concludes it is a significant deficiency. Which statement best describes the consequence for the auditor's further procedures?

  1. The auditor must withdraw from the engagement
  2. The auditor must communicate the deficiency in writing to those charged with governance Correct answer.
  3. The auditor must issue a qualified opinion on the financial statements
  4. The auditor may reduce substantive testing because the deficiency is already documented

Explanation

Significant deficiencies must be communicated in writing to those charged with governance on a timely basis. The deficiency also informs the auditor's assessment of risk and the extent of substantive procedures, but it does not by itself dictate the audit opinion or require withdrawal.

Question 29Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating whether a misstatement in the financial statements is material. Which consideration is most consistent with the concept of materiality in an audit?

  1. Only quantitative thresholds set by the client's finance director are relevant
  2. Any misstatement above the performance materiality level must result in a modified opinion
  3. Both the size of the misstatement and its nature, including qualitative factors, are relevant Correct answer.
  4. Materiality is assessed solely by reference to profit before tax

Explanation

Materiality depends on the amount and nature of the misstatement, including qualitative factors such as the effect on trends, covenant compliance, or legal requirements. Quantitative thresholds alone do not capture this judgment.

Question 30Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is planning the audit of a group with several components. Which factor is most relevant in determining whether the auditor can act as group auditor and use component auditors?

  1. Whether component auditors are located in the same country as the group auditor
  2. Whether component auditors charge fees comparable to the group auditor's fee scale
  3. Whether the group auditor has unrestricted access to component information and can direct and supervise component work Correct answer.
  4. Whether each component auditor uses the same audit software as the group auditor

Explanation

The group auditor must have access to component information and the ability to direct and supervise the work of component auditors. Common software, location, and fee levels are not determinants of the ability to act.

Question 31Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is reviewing a subsequent event occurring after the date of the auditor's report but before the financial statements are issued. Which action is most appropriate if the event would have required adjustment?

  1. Amend the financial statements without performing any additional audit procedures
  2. Take no action because the audit report has already been dated
  3. Discuss the matter with management and, if the financial statements are amended, extend procedures and update the report Correct answer.
  4. Issue a new audit report with the original date unchanged

Explanation

When an adjusting event is discovered after the report date but before issuance, the auditor discusses it with management and, if the statements are amended, performs the procedures necessary to extend the audit report date. The auditor's responsibility continues until the financial statements are issued.

Question 32Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the reliability of evidence obtained from a management representation letter. Which statement best reflects its role in the audit?

  1. It substitutes for substantive testing when internal controls are strong
  2. It is required only when the audit opinion is modified
  3. It corroborates other evidence but does not replace it Correct answer.
  4. It is sufficient evidence on its own for all management judgments and estimates

Explanation

Written representations corroborate other audit evidence but are not a substitute for evidence that should otherwise be available. They are required in every audit, not only when the opinion is modified.

Question 33Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is assessing the risk of material misstatement due to fraud in revenue recognition. Which procedure is most likely to be effective in addressing the presumed risk?

  1. Reviewing the prior year's audit file for the same procedure
  2. Decreasing the extent of substantive testing because revenue is a routine account
  3. Relying on management's representation that revenue is recorded correctly
  4. Testing journal entries posted near period end, particularly unusual or round-sum entries affecting revenue Correct answer.

Explanation

Testing manual journal entries, especially unusual or round-sum entries posted near period end, directly addresses the presumed fraud risk in revenue recognition. Reliance on representations or prior-year files does not respond to the current risk.

Question 34Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is considering whether to use the work of an auditor's expert. Which action is required before relying on the expert's findings?

  1. Obtain the client's written consent to the expert's appointment
  2. Assess the expert's competence, capabilities, and objectivity Correct answer.
  3. Require the expert to use the firm's audit methodology
  4. Confirm that the expert holds a professional accounting qualification

Explanation

The auditor must evaluate the expert's competence, capabilities, and objectivity before relying on the work. Accounting qualifications, client consent, and use of firm methodology are not the required preconditions.

Question 35Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the adequacy of the allowance for credit losses under an expected credit loss model. Which approach best addresses the risk of management bias in the estimate?

  1. Develop an independent expectation and compare it to management's estimate, investigating differences Correct answer.
  2. Compare the estimate to the prior year's balance without adjustment
  3. Rely on the client's model without testing its inputs
  4. Accept the estimate because it is prepared by a qualified credit analyst

Explanation

Developing an independent expectation and comparing it to management's estimate, with investigation of differences, is a strong response to estimation bias. Accepting the estimate on the basis of the preparer's qualification or prior-year balances does not test the estimate.

Question 36Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is documenting the understanding of the entity's information system. Which element is most relevant to the auditor's assessment of the reliability of data used in audit procedures?

  1. The physical location of the server hosting the system
  2. The frequency with which the system is upgraded
  3. The controls over the completeness and accuracy of the data produced by the system Correct answer.
  4. The number of employees authorized to access the general ledger

Explanation

The auditor's focus is on controls that ensure the completeness and accuracy of the data used in audit procedures. Access counts, server location, and upgrade frequency are less directly relevant to data reliability.

Question 37Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is reviewing the engagement quality review process under quality management standards. Which statement best describes the reviewer's role?

  1. The reviewer performs the substantive fieldwork and signs the audit report
  2. The reviewer approves the audit fee and engagement budget
  3. The reviewer replaces the engagement partner on the engagement
  4. The reviewer performs an objective evaluation of the significant judgments and conclusions before the report is issued Correct answer.

Explanation

The engagement quality reviewer performs an objective evaluation of the significant judgments and conclusions before the report is issued. The reviewer does not perform the fieldwork, set fees, or replace the engagement partner.

Question 38Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is testing the operating effectiveness of an automated control. Which procedure is most appropriate for addressing the risk that the control does not operate consistently?

  1. Inquiry of the IT manager only
  2. Review of the prior year's audit workpapers
  3. Observation of the control being performed once
  4. Reperformance of the control using test data and testing of the related program change controls Correct answer.

Explanation

Automated controls require testing of their operation, often through reperformance with test data, together with testing of program change controls that keep the control functioning. Inquiry, prior-year files, and a single observation do not address consistency of operation.

Question 39Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the appropriateness of the going concern assumption. Which procedure is most relevant when management's assessment covers only twelve months from the balance sheet date but the auditor's consideration extends beyond that period?

  1. Accept the twelve-month assessment without further inquiry
  2. Request management to extend its assessment to cover at least twelve months from the date the financial statements are approved Correct answer.
  3. Ignore the period beyond twelve months from the balance sheet date
  4. Rely solely on the prior year's assessment

Explanation

The auditor considers the appropriateness of the going concern assumption for at least twelve months from the date the financial statements are approved, so management may be asked to extend its assessment. The other options fail to address the extended period.

Question 40Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is assessing the reliability of evidence obtained from a service organization's controls. Which report provides the auditor with evidence about the suitability of the design and operating effectiveness of controls at the service organization?

  1. The service organization's audited financial statements
  2. A SOC 2 Type 1 report covering a point in time
  3. A management representation letter from the service organization
  4. A SOC 1 Type 2 report covering the relevant period Correct answer.

Explanation

A SOC 1 Type 2 report covers the suitability of design and operating effectiveness of controls over a period. A Type 1 report addresses design at a point in time only, and representations or financial statements do not provide control evidence.

Question 41Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is performing a review of interim financial information. Which statement best describes the nature of the assurance provided?

  1. It provides no assurance and is performed only as a consulting service
  2. It provides the same level of assurance as an audit of annual financial statements
  3. It provides limited assurance based primarily on inquiry and analytical procedures Correct answer.
  4. It provides absolute assurance that the interim information is free from misstatement

Explanation

A review of interim financial information provides limited assurance, primarily through inquiry and analytical procedures. It is not an audit and does not provide absolute assurance.

Question 42Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the design of a control over the approval of credit limits. Which characteristic is most important in determining whether the control can prevent or detect misstatements?

  1. Whether the control is reviewed annually by the internal audit function
  2. Whether the control is documented in a flowchart
  3. Whether the control is applied consistently and by a person with the authority and competence to act on exceptions Correct answer.
  4. Whether the control is performed by a senior manager rather than a clerk

Explanation

A control's ability to prevent or detect misstatements depends on consistent application by someone with the authority and competence to act on exceptions. The performer's grade, documentation format, and annual internal audit review are not the key determinants.

Question 43Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is assessing the risk of material misstatement arising from a significant related party transaction outside the normal course of business. Which procedure is most appropriate?

  1. Compare the transaction to a prior-year transaction without further inquiry
  2. Rely on management's statement that the transaction was at arm's length
  3. Accept the transaction because it was disclosed in the notes
  4. Review the minutes and contracts, and inspect the underlying terms and approvals for the transaction Correct answer.

Explanation

For significant related party transactions outside the normal course of business, the auditor inspects contracts, minutes, and approvals, and evaluates the underlying terms. Reliance on management's statement, prior-year comparisons, or disclosure alone is insufficient.

Question 44Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the effect of a change in accounting policy on the comparability of the financial statements. Which action is most appropriate?

  1. Assess whether the change is permitted by the applicable framework and properly disclosed and applied Correct answer.
  2. Accept the change without inquiry because management has discretion over accounting policies
  3. Disclose the change only in the auditor's report
  4. Require management to reverse the change to preserve comparability

Explanation

The auditor assesses whether a change in accounting policy is permitted by the framework and whether it has been properly disclosed and applied, including retrospective application where required. The auditor does not dictate reversal and does not disclose the change in the audit report.

Question 45Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is using audit data analytics to test a full population of sales transactions. Which statement best describes an important consideration in evaluating the results?

  1. Analytics can only be used for planning, not for substantive testing
  2. A full-population test eliminates the need to consider data quality
  3. The results are reliable regardless of the completeness of the underlying data
  4. Exceptions identified must be investigated and their nature and cause understood Correct answer.

Explanation

When analytics identify exceptions, the auditor investigates them and understands their nature and cause before drawing conclusions. Full-population testing does not remove the need to assess data quality or completeness.

Question 46Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is assessing whether to modify the opinion because of a scope limitation imposed by management. Which statement best describes the appropriate response?

  1. Withdraw from the engagement in all cases
  2. Issue an unmodified opinion with an emphasis of matter paragraph
  3. Issue an adverse opinion regardless of the nature of the limitation
  4. Issue a qualified opinion or disclaim an opinion, depending on the pervasiveness of the possible effects Correct answer.

Explanation

A scope limitation results in a qualified opinion when its possible effects are material but not pervasive, and a disclaimer when they are material and pervasive. An emphasis of matter paragraph or an adverse opinion does not appropriately address a scope limitation.

Question 47Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the adequacy of disclosures about key audit matters in the auditor's report of a listed entity. Which statement best describes the auditor's approach?

  1. Key audit matters are determined solely by the client's management
  2. The auditor selects matters from those communicated to those charged with governance that required significant auditor attention Correct answer.
  3. Key audit matters must include a statement that the auditor's opinion is modified
  4. Every matter discussed with those charged with governance must be reported as a key audit matter

Explanation

Key audit matters are selected from matters communicated with those charged with governance that required significant auditor attention. Not every communicated matter qualifies, and management does not determine them.

Question 48Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating the reliability of a confirmation received directly from a third party by electronic means. Which factor most affects the auditor's confidence in the response?

  1. The format in which the third party maintains its records
  2. The speed with which the response was received
  3. The length of the confirmation request
  4. The auditor's ability to verify the source and integrity of the electronic response Correct answer.

Explanation

For electronic confirmations, the auditor considers whether the source and integrity of the response can be verified, for example through the use of a secure intermediary. Speed, request length, and the third party's record format are not the key determinants.

Question 49Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is assessing the risk of management override of controls. Which procedure is specifically required as a response to that risk?

  1. Confirming all bank balances at year end
  2. Observing the physical inventory count
  3. Reviewing the client's tax returns
  4. Testing the appropriateness of journal entries recorded in the general ledger and other adjustments made in preparing the financial statements Correct answer.

Explanation

Testing journal entries and other adjustments is a required response to the risk of management override of controls. Bank confirmations, inventory observation, and tax return review address other risks and are not the specific required response to override.

Question 50Advanced auditing and assurance (segment content domains not enumerated in source)

An auditor is evaluating whether a component auditor's work is adequate for the group audit. Which action is most appropriate when the group auditor decides to review the component auditor's working papers?

  1. Review only the component auditor's final report
  2. Discuss significant findings with the component auditor and review the relevant parts of the working papers Correct answer.
  3. Delegate the review to the client's internal audit function
  4. Accept the component auditor's conclusions without discussion

Explanation

When reviewing component auditor work, the group auditor discusses significant findings with the component auditor and reviews relevant working papers, including those relating to significant risks. Reviewing only the final report or accepting conclusions without discussion is insufficient.