Exam 2 Flashcards
The primary purpose for obtaining an understanding of internal control during the audit of a nonissuer is to:
A: provide a basis for making constructive suggestions in a management letter.
B: determine the nature, timing, and extent of further audit tests to be performed.
C: provide the rationale for the inherent risk assessment at the financial statement assertion level.
D: provide information for a communication of internal control–related matters to management.AA
B: determine the nature, timing, and extent of further audit tests to be performed.Correct
Effectiveness of audit procedures would be reduced by
A: Performing audit procedures at the fiscal year-end date as opposed to the interim period.
B: Performing procedures during the interim period as opposed to at the fiscal year-end date.
C: Deciding to obtain external evidence instead of internal evidence.
D: Selecting larger sample sizes for audit.
B: Performing procedures during the interim period as opposed to at the fiscal year-end date.Correct
To test the operating effectiveness of a control, an audit team might use a combination of each of the following tests except for:
A: Inquiry of client personnel.
B: Confirmation of balances.
C: Observation of company operations.
D: Inspection of documentation.
B: Confirmation of balances.
Which of the following is a preventive control?
A: Detailed fluctuation analysis completed by the CFO for revenue.
B: Recalculation of a sample of payroll entries by internal auditors.
C: Reconciliation of a bank account.
D: Separation of duties between the payroll and personnel departments.
D: Separation of duties between the payroll and personnel departments.
A material weakness is a situation in which
A: There is a remote likelihood that a material misstatement would be detected on a timely basis.
B: It is reasonably possible that a material misstatement would not be detected on a timely basis.
C: It is reasonably possible that an immaterial misstatement would not be detected on a timely basis.
D: It is probable that an immaterial financial statement misstatement would not be detected on a timely basis.
B: It is reasonably possible that a material misstatement would not be detected on a timely basis.
When completing the audit of internal controls for an issuer, the severity of an internal control deficiency depends on:
A: Whether there is a reasonable possibility that the company’s controls will fail to prevent or detect a misstatement of an account balance or disclosure.
B: Whether the account has a history of errors.
C: The magnitude of the potential misstatement resulting from the deficiency or the deficiencies.
D: Both the magnitude of the potential misstatement resulting from the deficiency or the deficiencies and whether there is a reasonable possibility that the company’s controls will fail to prevent or detect a misstatement of an account balance or disclosure.
D: Both the magnitude of the potential misstatement resulting from the deficiency or the deficiencies and whether there is a reasonable possibility that the company’s controls will fail to prevent or detect a misstatement of an account balance or disclosure.
When completing the audit of internal controls for an issuer, the PCAOB requires the audit team to audit internal controls over:
A: Operations.
B: Compliance with regulations.
C: Financial reporting.
D: All of the choices are correct.
C: Financial reporting.
When completing the audit of internal controls for an issuer, AS 2201 requires auditors to test:
A: Operating effectiveness only.
B: Design effectiveness only.
C: Both operating and design effectiveness.
D: Neither operating nor design effectiveness.
C: Both operating and design effectiveness.
Which of the following would probably not be considered an indication of a material weakness?
A: Overproduction by the manufacturing plant.
B: Ineffective oversight by the audit committee.
C: Immaterial fraud committed by senior management.
D: Evidence of a material misstatement.
A: Overproduction by the manufacturing plant.
Which report would not be appropriate for a public accounting firm to provide on financial reporting controls?
A: Unqualified—no material weaknesses found.
B: Disclaimer of opinion—unable to perform all necessary procedures.
C: Disclaimer of opinion—significant deficiencies exist.
D: Adverse—material weaknesses exist.
C: Disclaimer of opinion—significant deficiencies exist.
The purpose of separating the duties of hiring personnel and distributing payroll checks is to separate the
A: Human resources function from the controllership function.
B: Operational responsibility from the record-keeping responsibility.
C: Authorization of transactions from the custody of related assets.
D: Administrative controls from the internal accounting controls.
C: Authorization of transactions from the custody of related assets.
If the auditors encounter a significant scope limitation in evaluating an issuer’s internal control over financial reporting, which of the following types of opinions on the effectiveness of the company’s internal control over financial reporting would be appropriate?
A: Unqualified opinion or adverse opinion.
B: Qualified opinion or adverse opinion.
C: Unqualified opinion or disclaimer of opinion.
D: Disclaimer of opinion.
D: Disclaimer of opinion.
If the auditor plans to assess control risk at less than the maximum and rely on controls, and the nature, timing, and extent of further audit procedures are based on that lower assessment, the auditor must
A: Perform only substantive procedures.
B: Assess control risk at less than the maximum for all relevant assertions.
C: Provide additional examples of responses to assessed fraud risks relating to fraudulent financial reporting.
D: Obtain evidence that the controls selected for testing are designed effectively and operated effectively during the entire period of reliance.
D: Obtain evidence that the controls selected for testing are designed effectively and operated effectively during the entire period of reliance.
When testing a control activity’s operating effectiveness, procedures the auditor performs to test operating effectiveness would likely include
A: Reading over the company’s code of conduct.
B: Inquiry of appropriate personnel.
C: Reperformance of the control activity.
D: Inquiry of appropriate personnel and reperformance of the control activity.
D: Inquiry of appropriate personnel and reperformance of the control activity.
The auditor should assess control risk for each relevant assertion by evaluating the evidence obtained from all sources, including
A: The auditor’s testing of controls for the audit of internal control on an issuer.
B: Misstatements detected during the financial statement audit.
C: Any control deficiencies identified during the audit.
D: All of the choices are correct.
D: All of the choices are correct.
Once the auditor detects a control deficiency, which of the following steps must he or she take first?
A: Evaluate the severity of the deficiency on the auditor’s control risk assessment for that assertion.
B: Test the deficient control, assuming a maximum level of risk.
C: Modify the planned substantive procedures as a result of the deficiency.
D: Perform tests of other controls related to the same assertion as the control deemed ineffective.
A: Evaluate the severity of the deficiency on the auditor’s control risk assessment for that assertion.
When an auditor plans to rely on controls that have changed since they were last tested, which of the following courses of action would be most appropriate?
A) Test the operating effectiveness of such controls in the current audit.
B) Document that reliance and proceed with the original audit strategy.
C) Inquire of management as to the effectiveness of the controls.
D) Report the reliance in the report on internal controls.
A) Test the operating effectiveness of such controls in the current audit.
Which of the following is a definition of control risk?
A) The risk that a material misstatement will not be prevented or detected on a timely basis by the client’s internal controls.
B) The risk that the auditor will not detect an existing material misstatement.
C) The risk that the auditor’s assessment of internal controls will be at less than the maximum level.
D) The susceptibility of material misstatement assuming there are no related internal controls, policies, or procedures.
A) The risk that a material misstatement will not be prevented or detected on a timely basis by the client’s internal controls.
Which of the following statements is correct regarding internal control?
A) A well-designed internal control environment ensures the achievement of an entity’s control objectives.
B) An inherent limitation to internal control is the fact that controls can be circumvented by management override.
C) A well-designed and operated internal control environment should detect collusion perpetrated by two people.
D) Internal control is a necessary business function and should be designed and operated to detect all errors and fraud.
B) An inherent limitation to internal control is the fact that controls can be circumvented by management override.
Which of the following statements best describes why an auditor would use only substantive procedures to evaluate specific relevant assertions and risks?
A) The relevant internal control components are not well documented.
B) The internal auditor already has tested the relevant controls and found them effective.
C) Testing the operating effectiveness of the relevant controls would not be efficient.
D) The cost of substantive procedures will exceed the cost of testing the relevant controls.
C) Testing the operating effectiveness of the relevant controls would not be efficient.
An auditor is evaluating a client’s internal controls. Which of the following situations would be the most difficult internal control issue for an auditor to detect?
A) The accounting staff neglects the control, due to increased transactions to be processed.
B) The technology department writes a program that does not properly implement the control, due to a lack of understanding.
C) Two employees, who work in different departments, are circumventing an internal control by collusion.
D) Someone erroneously disables edit checks in a software program designed to identify control exceptions.
C) Two employees, who work in different departments, are circumventing an internal control by collusion.