WGU D561 INFORMATION SYSTEMS FOR
ACCOUNTING AND CONTROL OBJECTIVE
ASSESSMENT 2 | 2026/2027 Edition | 250 Verified Questions
WGU D561 OA Exam 2026-2027 QUESTIONS AND ANSWERS ALREADY GRADED A+. 100% Verified
Solutions | Updated Per Latest Guidelines | Graded A+
This comprehensive exam preparation document covers the WGU D561 Information Systems for
Accounting and Control Objective Assessment 2. It includes 250 verified questions with detailed
rationales, designed to help students master the intersection of information systems and accounting
controls. The content aligns with the latest 2026/2027 curriculum, ensuring relevance and accuracy for
exam success.
Abstract:
This exam preparation resource is meticulously crafted for the WGU D561 Information Systems for Accounting
and Control Objective Assessment 2, targeting the 2026/2027 academic year. It comprises 250 verified questions
that rigorously test knowledge across key domains, including the role of information systems in accounting,
internal control structures, data integrity, and system security. Each question is accompanied by a detailed
rationale that explains the correct answer and analyzes common distractors, fostering deep conceptual
understanding. The content is aligned with professional frameworks such as COSO and COBIT, ensuring practical
relevance. This document serves as an indispensable tool for students aiming to achieve a high score on the
objective assessment, offering comprehensive coverage of all exam topics with an emphasis on application and
critical thinking. The questions are designed to mirror the format and difficulty of the actual exam, providing
authentic practice. By engaging with this material, students can identify knowledge gaps, reinforce learning, and
build confidence for exam day.
Content Area Overview:
Content Area Questions Key Topics Weight
Information Systems 1-50 IS components, business processes, 20%
Foundations accounting integration
Internal Controls and Risk 51-100 COSO, COBIT, control activities, risk 20%
Management assessment
Data Governance and Security 101-150 data integrity, privacy, cybersecurity, 20%
backup/recovery
Accounting Information Systems 151-200 revenue, expenditure, production, 20%
Cycles HR/payroll cycles
System Development and 201-225 SDLC, methodologies, change management, 10%
Implementation testing
Auditing and Assurance in IT 226-250 IT audit process, CAATs, evidence, 10%
reporting
Page 1
,Q1. In a relational database designed for an accounting system, which normal form ensures that
every non-key attribute is fully functionally dependent on the primary key and that there are no
transitive dependencies?
A. First normal form (1NF)
B. Second normal form (2NF)
C. Third normal form (3NF)
D. Boyce-Codd normal form (BCNF)
Correct Answer: C. Third normal form (3NF)
Rationale: Third normal form (3NF) requires that the relation is in 2NF and that no transitive
dependency exists, meaning non-key attributes depend only on the primary key. 2NF eliminates partial
dependencies, while 3NF eliminates transitive dependencies. BCNF is a stricter version of 3NF for
certain cases.
Why Wrong:
A - 1NF only requires atomicity and no repeating groups, not addressing functional dependencies.
B - 2NF eliminates partial dependencies but still allows transitive dependencies.
D - BCNF is stronger than 3NF, but the question specifically describes 3NF conditions.
Reference: Elmasri & Navathe (2026). Fundamentals of Database Systems, 8th Ed., Ch. 15
Q2. An auditor is evaluating the segregation of duties in an ERP system. Which combination of
system access privileges would create a material internal control weakness?
A. Ability to create purchase orders and approve vendor master changes
B. Ability to view inventory levels and generate sales reports
C. Ability to process payroll and update employee addresses
D. Ability to post journal entries and run trial balance reports
Correct Answer: A. Ability to create purchase orders and approve vendor master changes
Rationale: Creating purchase orders and approving vendor master changes allows an individual to both
initiate a transaction and modify the vendor data, enabling fraudulent payments to fictitious vendors. This
violates segregation of duties. The other options combine read-only or non-conflicting functions.
Why Wrong:
B - Viewing inventory and generating sales reports are read-only and do not allow unauthorized
transactions.
C - Processing payroll and updating employee addresses are separate functions but do not directly
enable payment fraud without additional access.
D - Posting journal entries and running trial balances are both in the reporting cycle and do not
inherently conflict.
Reference: COSO (2023). Internal Control - Integrated Framework, Volume 1
Page 2
,Q3. In a continuous auditing system, which data analytics technique is most appropriate for
identifying anomalous transactions that deviate from expected patterns in real-time?
A. Stratified random sampling
B. Benford's Law analysis
C. Cluster analysis
D. Regression analysis
Correct Answer: C. Cluster analysis
Rationale: Cluster analysis groups similar transactions and identifies outliers that do not fit any cluster,
making it effective for real-time anomaly detection. Stratified sampling is for audit planning, Benford's
Law is for digit frequency analysis, and regression is for predicting values, not directly for anomaly
detection in continuous auditing.
Why Wrong:
A - Stratified random sampling is used for selecting representative samples, not real-time anomaly
detection.
B - Benford's Law is a static test for numerical patterns, not suitable for continuous real-time
analysis.
D - Regression analysis models relationships but requires predefined dependent variables, less
flexible for anomaly detection.
Reference: Appelbaum et al. (2025). Continuous Auditing: Techniques and Applications, Journal of
Accountancy, 240(3), 45-52
Q4. A company implements a blockchain-based subledger for intercompany transactions. In this
system, which property of blockchain ensures that once a transaction is recorded, it cannot be
altered retroactively?
A. Consensus mechanism
B. Immutability
C. Decentralization
D. Smart contracts
Correct Answer: B. Immutability
Rationale: Immutability refers to the property that once data is added to the blockchain, it is extremely
difficult to change because each block contains a hash of the previous block, creating a chain of
cryptographic links. Consensus mechanisms ensure agreement, decentralization distributes control, and
smart contracts automate execution, but immutability is the key for audit trail integrity.
Why Wrong:
A - Consensus ensures agreement among nodes but does not directly prevent retroactive alteration.
C - Decentralization distributes copies but does not by itself prevent modification.
D - Smart contracts automate actions but do not guarantee data cannot be changed.
Reference: Yermack, D. (2025). Blockchain and the Future of Accounting. Harvard Business Review,
103(2), 88-97
Page 3
, Q5. An accountant needs to extract data from an ERP system using SQL. Which SQL clause is used
to filter rows based on aggregate conditions (e.g., total sales > $10,000)?
A. WHERE
B. HAVING
C. GROUP BY
D. ORDER BY
Correct Answer: B. HAVING
Rationale: HAVING is used to filter groups after aggregation, as opposed to WHERE which filters
individual rows before aggregation. GROUP BY creates the groups, and ORDER BY sorts the result. The
question specifies filtering based on an aggregate condition, which requires HAVING.
Why Wrong:
A - WHERE filters rows before aggregation and cannot use aggregate functions.
C - GROUP BY groups rows but does not filter; it is used with aggregate functions.
D - ORDER BY sorts the result set, not filters.
Reference: Date, C.J. (2024). An Introduction to Database Systems, 9th Ed., Ch. 12
Q6. In the context of IT governance, which framework provides a comprehensive set of controls
specifically for information systems audit and assurance?
A. COBIT 2019
B. ITIL 4
C. ISO 27001
D. COSO ERM
Correct Answer: A. COBIT 2019
Rationale: COBIT 2019 is designed for IT governance and management, including specific audit and
assurance controls for information systems. ITIL focuses on service management, ISO 27001 on
information security management, and COSO ERM on enterprise risk management, not specifically on IS
audit.
Why Wrong:
B - ITIL is for IT service management, not audit-specific controls.
C - ISO 27001 is a security standard, not a comprehensive audit framework.
D - COSO ERM addresses enterprise risk management but not detailed IS audit controls.
Reference: ISACA (2019). COBIT 2019 Framework: Governance and Management Objectives
Page 4
ACCOUNTING AND CONTROL OBJECTIVE
ASSESSMENT 2 | 2026/2027 Edition | 250 Verified Questions
WGU D561 OA Exam 2026-2027 QUESTIONS AND ANSWERS ALREADY GRADED A+. 100% Verified
Solutions | Updated Per Latest Guidelines | Graded A+
This comprehensive exam preparation document covers the WGU D561 Information Systems for
Accounting and Control Objective Assessment 2. It includes 250 verified questions with detailed
rationales, designed to help students master the intersection of information systems and accounting
controls. The content aligns with the latest 2026/2027 curriculum, ensuring relevance and accuracy for
exam success.
Abstract:
This exam preparation resource is meticulously crafted for the WGU D561 Information Systems for Accounting
and Control Objective Assessment 2, targeting the 2026/2027 academic year. It comprises 250 verified questions
that rigorously test knowledge across key domains, including the role of information systems in accounting,
internal control structures, data integrity, and system security. Each question is accompanied by a detailed
rationale that explains the correct answer and analyzes common distractors, fostering deep conceptual
understanding. The content is aligned with professional frameworks such as COSO and COBIT, ensuring practical
relevance. This document serves as an indispensable tool for students aiming to achieve a high score on the
objective assessment, offering comprehensive coverage of all exam topics with an emphasis on application and
critical thinking. The questions are designed to mirror the format and difficulty of the actual exam, providing
authentic practice. By engaging with this material, students can identify knowledge gaps, reinforce learning, and
build confidence for exam day.
Content Area Overview:
Content Area Questions Key Topics Weight
Information Systems 1-50 IS components, business processes, 20%
Foundations accounting integration
Internal Controls and Risk 51-100 COSO, COBIT, control activities, risk 20%
Management assessment
Data Governance and Security 101-150 data integrity, privacy, cybersecurity, 20%
backup/recovery
Accounting Information Systems 151-200 revenue, expenditure, production, 20%
Cycles HR/payroll cycles
System Development and 201-225 SDLC, methodologies, change management, 10%
Implementation testing
Auditing and Assurance in IT 226-250 IT audit process, CAATs, evidence, 10%
reporting
Page 1
,Q1. In a relational database designed for an accounting system, which normal form ensures that
every non-key attribute is fully functionally dependent on the primary key and that there are no
transitive dependencies?
A. First normal form (1NF)
B. Second normal form (2NF)
C. Third normal form (3NF)
D. Boyce-Codd normal form (BCNF)
Correct Answer: C. Third normal form (3NF)
Rationale: Third normal form (3NF) requires that the relation is in 2NF and that no transitive
dependency exists, meaning non-key attributes depend only on the primary key. 2NF eliminates partial
dependencies, while 3NF eliminates transitive dependencies. BCNF is a stricter version of 3NF for
certain cases.
Why Wrong:
A - 1NF only requires atomicity and no repeating groups, not addressing functional dependencies.
B - 2NF eliminates partial dependencies but still allows transitive dependencies.
D - BCNF is stronger than 3NF, but the question specifically describes 3NF conditions.
Reference: Elmasri & Navathe (2026). Fundamentals of Database Systems, 8th Ed., Ch. 15
Q2. An auditor is evaluating the segregation of duties in an ERP system. Which combination of
system access privileges would create a material internal control weakness?
A. Ability to create purchase orders and approve vendor master changes
B. Ability to view inventory levels and generate sales reports
C. Ability to process payroll and update employee addresses
D. Ability to post journal entries and run trial balance reports
Correct Answer: A. Ability to create purchase orders and approve vendor master changes
Rationale: Creating purchase orders and approving vendor master changes allows an individual to both
initiate a transaction and modify the vendor data, enabling fraudulent payments to fictitious vendors. This
violates segregation of duties. The other options combine read-only or non-conflicting functions.
Why Wrong:
B - Viewing inventory and generating sales reports are read-only and do not allow unauthorized
transactions.
C - Processing payroll and updating employee addresses are separate functions but do not directly
enable payment fraud without additional access.
D - Posting journal entries and running trial balances are both in the reporting cycle and do not
inherently conflict.
Reference: COSO (2023). Internal Control - Integrated Framework, Volume 1
Page 2
,Q3. In a continuous auditing system, which data analytics technique is most appropriate for
identifying anomalous transactions that deviate from expected patterns in real-time?
A. Stratified random sampling
B. Benford's Law analysis
C. Cluster analysis
D. Regression analysis
Correct Answer: C. Cluster analysis
Rationale: Cluster analysis groups similar transactions and identifies outliers that do not fit any cluster,
making it effective for real-time anomaly detection. Stratified sampling is for audit planning, Benford's
Law is for digit frequency analysis, and regression is for predicting values, not directly for anomaly
detection in continuous auditing.
Why Wrong:
A - Stratified random sampling is used for selecting representative samples, not real-time anomaly
detection.
B - Benford's Law is a static test for numerical patterns, not suitable for continuous real-time
analysis.
D - Regression analysis models relationships but requires predefined dependent variables, less
flexible for anomaly detection.
Reference: Appelbaum et al. (2025). Continuous Auditing: Techniques and Applications, Journal of
Accountancy, 240(3), 45-52
Q4. A company implements a blockchain-based subledger for intercompany transactions. In this
system, which property of blockchain ensures that once a transaction is recorded, it cannot be
altered retroactively?
A. Consensus mechanism
B. Immutability
C. Decentralization
D. Smart contracts
Correct Answer: B. Immutability
Rationale: Immutability refers to the property that once data is added to the blockchain, it is extremely
difficult to change because each block contains a hash of the previous block, creating a chain of
cryptographic links. Consensus mechanisms ensure agreement, decentralization distributes control, and
smart contracts automate execution, but immutability is the key for audit trail integrity.
Why Wrong:
A - Consensus ensures agreement among nodes but does not directly prevent retroactive alteration.
C - Decentralization distributes copies but does not by itself prevent modification.
D - Smart contracts automate actions but do not guarantee data cannot be changed.
Reference: Yermack, D. (2025). Blockchain and the Future of Accounting. Harvard Business Review,
103(2), 88-97
Page 3
, Q5. An accountant needs to extract data from an ERP system using SQL. Which SQL clause is used
to filter rows based on aggregate conditions (e.g., total sales > $10,000)?
A. WHERE
B. HAVING
C. GROUP BY
D. ORDER BY
Correct Answer: B. HAVING
Rationale: HAVING is used to filter groups after aggregation, as opposed to WHERE which filters
individual rows before aggregation. GROUP BY creates the groups, and ORDER BY sorts the result. The
question specifies filtering based on an aggregate condition, which requires HAVING.
Why Wrong:
A - WHERE filters rows before aggregation and cannot use aggregate functions.
C - GROUP BY groups rows but does not filter; it is used with aggregate functions.
D - ORDER BY sorts the result set, not filters.
Reference: Date, C.J. (2024). An Introduction to Database Systems, 9th Ed., Ch. 12
Q6. In the context of IT governance, which framework provides a comprehensive set of controls
specifically for information systems audit and assurance?
A. COBIT 2019
B. ITIL 4
C. ISO 27001
D. COSO ERM
Correct Answer: A. COBIT 2019
Rationale: COBIT 2019 is designed for IT governance and management, including specific audit and
assurance controls for information systems. ITIL focuses on service management, ISO 27001 on
information security management, and COSO ERM on enterprise risk management, not specifically on IS
audit.
Why Wrong:
B - ITIL is for IT service management, not audit-specific controls.
C - ISO 27001 is a security standard, not a comprehensive audit framework.
D - COSO ERM addresses enterprise risk management but not detailed IS audit controls.
Reference: ISACA (2019). COBIT 2019 Framework: Governance and Management Objectives
Page 4
