Auditing & Assurance Services Advanced
Prep: Master Audit Strategy, Risk
Assessment & Internal Control Practice
Questions & Detailed Explanations
Subject: Auditing & Assurance Services (Louwers, 8th Ed., Chapters 1–12)
Question 1: During the audit planning phase, an auditor identifies a significant risk related to
potential management override of controls. Which of the following procedures is most
appropriate to specifically address this fraud risk?
A) Testing the effectiveness of general IT controls over the ERP system.
B) Performing a retrospective review of management’s accounting estimates for bias.
C) Increasing the sample size for substantive testing of sales transactions.
D) Confirming accounts receivable balances with external customers.
Correct Answer: B) Performing a retrospective review of management’s accounting
estimates for bias.
Explanation: Per auditing standards, management override of controls is a presumed fraud risk.
A retrospective review of estimates (e.g., allowance for doubtful accounts, warranty reserves) is
a required procedure to identify whether management consistently biases estimates to meet
earnings targets. Option A is a general control test, and C and D are substantive procedures that
do not directly address the systemic nature of management override.
Question 2: Which of the following best describes the auditor’s responsibility regarding "dual-
purpose tests" in the context of internal control and substantive testing?
A) They are only appropriate when the audit software is capable of processing large data sets.
B) They are used to test a control’s effectiveness and obtain substantive evidence about an
account balance simultaneously.
C) They are prohibited under GAAS because they compromise the independence of the test.
D) They are used to replace the requirement for a physical inventory observation.
Correct Answer: B) They are used to test a control’s effectiveness and obtain substantive
evidence about an account balance simultaneously.
,Explanation: Dual-purpose tests are efficient because they serve two objectives: evaluating the
operating effectiveness of a control (test of control) and checking for monetary misstatements in
an account balance (substantive test). An example is testing a purchase invoice for authorization
(control) and checking the accuracy of the recorded amount (substantive).
Question 3: In evaluating the audit risk model ($AR = IR \times CR \times DR$), an auditor
concludes that Inherent Risk (IR) is high for a specific assertion and Control Risk (CR) is
assessed at the maximum. Which strategy must the auditor employ?
A) Increase the acceptable level of Detection Risk (DR).
B) Set the Detection Risk (DR) at a lower level to achieve the desired Audit Risk (AR).
C) Request an expansion of the audit scope to include a forensic audit.
D) Disclaim an opinion because the risk is too high.
Correct Answer: B) Set the Detection Risk (DR) at a lower level to achieve the desired Audit
Risk (AR).
Explanation: To keep the overall Audit Risk (AR) low or at the desired level when IR and CR are
high, the auditor must decrease the Detection Risk (DR). Decreasing DR means the auditor must
perform more extensive, rigorous substantive testing to ensure errors are detected.
Question 4: An auditor is examining the completeness assertion for accounts payable. Which of
the following procedures is the most effective?
A) Vouching a sample of recorded accounts payable entries to supporting purchase orders and
receiving reports.
B) Reviewing cash disbursements made in the subsequent period and tracing them to receiving
reports and the unpaid voucher file.
C) Confirming accounts payable balances with the client’s vendors.
D) Analyzing the aging schedule for accounts payable to identify overdue balances.
Correct Answer: B) Reviewing cash disbursements made in the subsequent period and
tracing them to receiving reports and the unpaid voucher file.
Explanation: Completeness relates to whether all liabilities that should be recorded are, in fact,
recorded. The "search for unrecorded liabilities" by examining subsequent cash disbursements is
a primary procedure because it identifies payments made for goods or services received before
year-end that were not accrued.
,Question 5: Which of the following conditions is most likely to be a "red flag" indicating the
possibility of fraudulent financial reporting?
A) The client operates in a highly competitive industry with declining profit margins.
B) Management has a history of changing audit firms due to fee disputes.
C) The client’s internal control environment is characterized by frequent turnover in the internal
audit department.
D) All of the above.
Correct Answer: D) All of the above.
Explanation: Fraud risk factors (the fraud triangle) include incentives (A: industry pressure),
attitudes/rationalization (B: audit firm switching), and opportunities (C: ineffective
monitoring/control environment). All three are classic indicators of increased risk.
Question 6: An auditor’s report on internal control over financial reporting (ICFR) for a public
company must contain an adverse opinion if:
A) A significant deficiency exists.
B) A material weakness exists.
C) The auditor was unable to perform all planned test-of-control procedures.
D) The management assessment of ICFR is incomplete.
Correct Answer: B) A material weakness exists.
Explanation: A material weakness in internal control is the highest level of deficiency. Under
PCAOB standards, if one or more material weaknesses exist, the auditor cannot conclude that
internal control is effective, thus requiring an adverse opinion.
Question 7: When an auditor assesses control risk at the maximum, what is the implication for
the audit strategy?
A) The auditor must perform an audit of internal controls for a private company.
B) The auditor cannot rely on controls and must adopt a primarily substantive approach.
C) The auditor must withdraw from the engagement.
D) The auditor must inform the SEC of a control failure.
, Correct Answer: B) The auditor cannot rely on controls and must adopt a primarily
substantive approach.
Explanation: Assessing control risk at the maximum means the auditor does not intend to rely on
the client's internal controls. Therefore, the auditor must obtain evidence through direct testing
of account balances and transactions (substantive testing).
Question 8: Analytical procedures are required during which stage of the audit?
A) Planning and final review.
B) Planning and interim testing.
C) Interim testing and final review.
D) Planning only.
Correct Answer: A) Planning and final review.
Explanation: Auditing standards require analytical procedures in the planning stage (to identify
risk) and the final review stage (to evaluate overall reasonableness of the financial statements).
They are optional, but often used, during the substantive testing phase.
Question 9: Which of the following is an example of an "assertion" regarding account balances?
A) Accuracy.
B) Existence.
C) Classification.
D) Understandability.
Correct Answer: B) Existence.
Explanation: Assertions are categorized into classes of transactions, account balances, and
presentation/disclosure. Existence is a classic assertion for account balances (e.g., "does this
inventory actually exist in the warehouse?"). Accuracy, Classification, and Understandability
relate more to transactions or presentation.
Question 10: Which documentation must be included in the audit working papers?
A) Every document examined by the auditor.
B) A list of all interviews conducted.
Prep: Master Audit Strategy, Risk
Assessment & Internal Control Practice
Questions & Detailed Explanations
Subject: Auditing & Assurance Services (Louwers, 8th Ed., Chapters 1–12)
Question 1: During the audit planning phase, an auditor identifies a significant risk related to
potential management override of controls. Which of the following procedures is most
appropriate to specifically address this fraud risk?
A) Testing the effectiveness of general IT controls over the ERP system.
B) Performing a retrospective review of management’s accounting estimates for bias.
C) Increasing the sample size for substantive testing of sales transactions.
D) Confirming accounts receivable balances with external customers.
Correct Answer: B) Performing a retrospective review of management’s accounting
estimates for bias.
Explanation: Per auditing standards, management override of controls is a presumed fraud risk.
A retrospective review of estimates (e.g., allowance for doubtful accounts, warranty reserves) is
a required procedure to identify whether management consistently biases estimates to meet
earnings targets. Option A is a general control test, and C and D are substantive procedures that
do not directly address the systemic nature of management override.
Question 2: Which of the following best describes the auditor’s responsibility regarding "dual-
purpose tests" in the context of internal control and substantive testing?
A) They are only appropriate when the audit software is capable of processing large data sets.
B) They are used to test a control’s effectiveness and obtain substantive evidence about an
account balance simultaneously.
C) They are prohibited under GAAS because they compromise the independence of the test.
D) They are used to replace the requirement for a physical inventory observation.
Correct Answer: B) They are used to test a control’s effectiveness and obtain substantive
evidence about an account balance simultaneously.
,Explanation: Dual-purpose tests are efficient because they serve two objectives: evaluating the
operating effectiveness of a control (test of control) and checking for monetary misstatements in
an account balance (substantive test). An example is testing a purchase invoice for authorization
(control) and checking the accuracy of the recorded amount (substantive).
Question 3: In evaluating the audit risk model ($AR = IR \times CR \times DR$), an auditor
concludes that Inherent Risk (IR) is high for a specific assertion and Control Risk (CR) is
assessed at the maximum. Which strategy must the auditor employ?
A) Increase the acceptable level of Detection Risk (DR).
B) Set the Detection Risk (DR) at a lower level to achieve the desired Audit Risk (AR).
C) Request an expansion of the audit scope to include a forensic audit.
D) Disclaim an opinion because the risk is too high.
Correct Answer: B) Set the Detection Risk (DR) at a lower level to achieve the desired Audit
Risk (AR).
Explanation: To keep the overall Audit Risk (AR) low or at the desired level when IR and CR are
high, the auditor must decrease the Detection Risk (DR). Decreasing DR means the auditor must
perform more extensive, rigorous substantive testing to ensure errors are detected.
Question 4: An auditor is examining the completeness assertion for accounts payable. Which of
the following procedures is the most effective?
A) Vouching a sample of recorded accounts payable entries to supporting purchase orders and
receiving reports.
B) Reviewing cash disbursements made in the subsequent period and tracing them to receiving
reports and the unpaid voucher file.
C) Confirming accounts payable balances with the client’s vendors.
D) Analyzing the aging schedule for accounts payable to identify overdue balances.
Correct Answer: B) Reviewing cash disbursements made in the subsequent period and
tracing them to receiving reports and the unpaid voucher file.
Explanation: Completeness relates to whether all liabilities that should be recorded are, in fact,
recorded. The "search for unrecorded liabilities" by examining subsequent cash disbursements is
a primary procedure because it identifies payments made for goods or services received before
year-end that were not accrued.
,Question 5: Which of the following conditions is most likely to be a "red flag" indicating the
possibility of fraudulent financial reporting?
A) The client operates in a highly competitive industry with declining profit margins.
B) Management has a history of changing audit firms due to fee disputes.
C) The client’s internal control environment is characterized by frequent turnover in the internal
audit department.
D) All of the above.
Correct Answer: D) All of the above.
Explanation: Fraud risk factors (the fraud triangle) include incentives (A: industry pressure),
attitudes/rationalization (B: audit firm switching), and opportunities (C: ineffective
monitoring/control environment). All three are classic indicators of increased risk.
Question 6: An auditor’s report on internal control over financial reporting (ICFR) for a public
company must contain an adverse opinion if:
A) A significant deficiency exists.
B) A material weakness exists.
C) The auditor was unable to perform all planned test-of-control procedures.
D) The management assessment of ICFR is incomplete.
Correct Answer: B) A material weakness exists.
Explanation: A material weakness in internal control is the highest level of deficiency. Under
PCAOB standards, if one or more material weaknesses exist, the auditor cannot conclude that
internal control is effective, thus requiring an adverse opinion.
Question 7: When an auditor assesses control risk at the maximum, what is the implication for
the audit strategy?
A) The auditor must perform an audit of internal controls for a private company.
B) The auditor cannot rely on controls and must adopt a primarily substantive approach.
C) The auditor must withdraw from the engagement.
D) The auditor must inform the SEC of a control failure.
, Correct Answer: B) The auditor cannot rely on controls and must adopt a primarily
substantive approach.
Explanation: Assessing control risk at the maximum means the auditor does not intend to rely on
the client's internal controls. Therefore, the auditor must obtain evidence through direct testing
of account balances and transactions (substantive testing).
Question 8: Analytical procedures are required during which stage of the audit?
A) Planning and final review.
B) Planning and interim testing.
C) Interim testing and final review.
D) Planning only.
Correct Answer: A) Planning and final review.
Explanation: Auditing standards require analytical procedures in the planning stage (to identify
risk) and the final review stage (to evaluate overall reasonableness of the financial statements).
They are optional, but often used, during the substantive testing phase.
Question 9: Which of the following is an example of an "assertion" regarding account balances?
A) Accuracy.
B) Existence.
C) Classification.
D) Understandability.
Correct Answer: B) Existence.
Explanation: Assertions are categorized into classes of transactions, account balances, and
presentation/disclosure. Existence is a classic assertion for account balances (e.g., "does this
inventory actually exist in the warehouse?"). Accuracy, Classification, and Understandability
relate more to transactions or presentation.
Question 10: Which documentation must be included in the audit working papers?
A) Every document examined by the auditor.
B) A list of all interviews conducted.
