CPA AUD: Auditing and Attestation Practice Test

Prepare for the American Institute of Certified Public Accountants (AICPA) Certified Public Accountant Auditing and Attestation (CPA AUD) section with 24 free sample questions, a 78-question multiple-choice question (MCQ) diagnostic, topic drills, timed practice, and detailed explanations aligned to the 2026 blueprint.

Use this page when you are preparing for the Certified Public Accountant Auditing and Attestation section and want a direct practice route. The public preview gives you sample questions and a full-length MCQ diagnostic; the web app adds mixed sets, topic drills, timed mocks, progress tracking, and full practice.

Mastery Exam Prep is independent exam-prep software. These are original practice questions, not official CPA Exam questions from AICPA, NASBA, or any state board.

Open CPA AUD on web for timed mocks, topic drills, progress tracking, explanations, and full practice.

What this CPA AUD page gives you

  • a direct web route into Certified Public Accountant Auditing and Attestation practice
  • 24 public sample questions with detailed explanations before you subscribe
  • a free 78-question multiple-choice question (MCQ) diagnostic across the AUD blueprint areas
  • focused topic pages for each major blueprint area
  • timed mixed practice for pacing, review discipline, and exam-day readiness
  • explanations written to show why the reasoning is right, not just which answer is marked correct

CPA AUD exam snapshot

ItemDetail
ProviderAmerican Institute of Certified Public Accountants (AICPA)
Exam sectionCertified Public Accountant Auditing and Attestation (CPA AUD)
CPA Exam roleCore section
Current blueprint focus2026 AICPA AUD blueprint
Practice reference on this site78-question multiple-choice question (MCQ) diagnostic plus topic drills and mixed practice
Time reference4 hours
Passing score reference75
Important format noteThe CPA AUD section also involves task-based simulations and exhibit-heavy work. Use the free page as a multiple-choice diagnostic, then use the full practice route for broader repetition and review.

Abbreviation guide for this page

AbbreviationMeaningWhy it matters for practice
CPACertified Public AccountantThis is the professional credential path. The page supports exam practice, not licensure advice.
AUDAuditing and AttestationThis section focuses on audit judgment, attestation standards, evidence, risk assessment, independence, and reporting consequences.
MCQMultiple-choice questionThe public full-length page is an MCQ diagnostic. Use it for concept and pacing review, not as a promise that every live item type is represented.
AICPAAmerican Institute of Certified Public AccountantsUse the sponsor’s current materials and your state-board requirements as the final authority before exam day.

Topic coverage for CPA AUD practice

AUD blueprint areaOfficial weighting range
Ethics, Professional Responsibilities and General Principles15-25%
Assessing Risk and Developing a Planned Response25-35%
Performing Further Procedures and Obtaining Evidence30-40%
Forming Conclusions and Reporting10-20%

What CPA AUD is really testing

CPA AUD rewards candidates who can connect engagement facts to the right audit objective, professional responsibility, evidence requirement, or reporting effect. Strong answers usually identify what changed in the engagement before choosing the procedure or report consequence.

CPA AUD versus other CPA sections

If the stem is mainly about…It usually belongs here because…
audit judgment, attestation standards, evidence, risk assessment, independence, and reporting consequencesCPA AUD is the section built around this judgment area.
recognition, measurement, presentation, or disclosurecompare with CPA FAR before drilling more CPA AUD questions.
systems, controls, security, privacy, or SOC reportingcompare with CPA ISC before drilling more CPA AUD questions.
business analysis, performance management, reporting analysis, or governmental accountingcompare with CPA BAR before drilling more CPA AUD questions.

High-yield CPA AUD traps

  • treating management representations as a substitute for stronger evidence
  • choosing a report modification before deciding materiality, pervasiveness, correction, and disclosure
  • mixing AICPA, PCAOB, Government Auditing Standards, and ERISA independence contexts
  • matching a procedure to the wrong assertion or risk

Simulation-style skills to pair with MCQs

Use multiple-choice practice to build the rule and judgment base, then pair it with exhibit-style review. For CPA AUD, that means reading short workpaper excerpts, matching facts to assertions, identifying which evidence is stronger, and deciding how a finding changes the report or communication. When you miss an MCQ, write the missing simulation skill beside it: evidence strength, assertion mapping, risk response, documentation, or reporting consequence.

How to use CPA AUD practice efficiently

  1. Start with focused topic drills until you can explain the rule, objective, or calculation setup behind each answer.
  2. Use the free 78-question diagnostic once as a baseline rather than as a memorization set.
  3. Review misses by weakness type and return to the matching topic page before another timed set.
  4. Move into timed mixed practice when topic-level accuracy is stable and you need pacing discipline.
  5. If several unseen timed attempts are above roughly 75%, schedule or proceed instead of trying to memorize the full bank.

Miss pattern to next drill

If your misses look like…Drill next
You know the standard but choose the wrong next stepdrill risk assessment and planned-response questions; name the assertion before reading choices
You over-trust management explanationsdrill evidence questions and compare external evidence, recalculation, inspection, and representation strength
You choose the wrong report effectdrill conclusion and reporting questions; decide materiality and pervasiveness first

CPA section routes

  • CPA AUD: Auditing and Attestation
  • CPA FAR : Financial Accounting and Reporting
  • CPA REG : Taxation and Regulation
  • CPA BAR : Business Analysis and Reporting
  • CPA ISC : Information Systems and Controls
  • CPA TCP : Tax Compliance and Planning

Free review resources

Need concept review before timed practice? Read the CPA AUD guide on CPAExamsMastery.com, then return here for sample questions, topic drills, timed mocks, and the full practice route.

Focused sample questions

Use these child pages when you want focused Mastery Exam Prep practice before returning to mixed sets and timed mocks.

Free samples and full practice

  • Live now: CPA AUD practice is available on web.
  • On-page sample set: this page includes 24 public sample questions for the AUD route.
  • Full practice: open the web route for mixed sets, topic drills, timed mocks, progress tracking, and detailed explanations.

24 CPA AUD sample questions with detailed explanations

These are original Mastery Exam Prep practice questions aligned to the live CPA AUD route and the main blueprint areas shown above. Use them to test readiness here, then continue in Mastery Exam Prep with mixed sets, topic drills, and timed mocks.

Question 1

Topic: Performing Further Procedures and Obtaining Evidence

During the audit of a nonissuer’s financial statements, the auditor is evaluating the completeness of warranty liabilities. Management told the auditor that no product defects occurred before year-end. The auditor then interviewed the customer service manager, who does not prepare the financial statements, and the manager described a pre-year-end defect, identified affected product lines, and referred the auditor to a post-year-end claims log. The auditor has not yet inspected the log or performed other follow-up procedures. How should this interview result be characterized in the audit documentation?

  • A. Inquiry evidence from a knowledgeable employee outside financial reporting, documented with the person’s role, date, matters discussed, and planned corroborating follow-up.
  • B. Observation evidence that directly proves the physical condition of the products at year-end.
  • C. A test of controls that supports reducing substantive procedures over warranty liabilities.
  • D. A written management representation that can replace inspection of the related claims log.

Best answer: A

Explanation: The customer service manager’s statements are inquiry evidence from a knowledgeable person outside the accounting function. Because inquiry alone is generally not sufficient appropriate audit evidence for the warranty liability, the auditor should document the interview and perform corroborating follow-up, such as inspecting the claims log. Inquiry is an audit procedure used to obtain information from management and others within or outside the entity. Responses from personnel outside financial reporting can be especially useful when they provide information about operations, claims, defects, or other conditions affecting financial statement assertions. However, oral inquiry by itself usually does not provide sufficient appropriate evidence for an account balance or disclosure. The auditor should document key details of the interview, such as who was interviewed, the person’s role, when the discussion occurred, what was asked, the substance of the responses, and any follow-up procedures needed. Here, the discussion raises a potential completeness issue for warranty liabilities and points to a claims log that should be inspected or otherwise corroborated.


Question 2

Topic: Forming Conclusions and Reporting

An accountant is reviewing the annual financial statements of a privately held nonissuer under SSARS. No material misstatements or scope limitations were identified. The accountant plans to issue a review report that concludes on the income tax basis of accounting and includes a separate “Basis of Accounting” paragraph referring to the note describing that basis. Which engagement-file item best supports this report form and content?

  • A. The summary of uncorrected misstatements shows no uncorrected misstatements exceeding materiality.
  • B. The signed engagement letter states that management is responsible for the financial statements and for designing internal control.
  • C. Draft Note 1 states that the financial statements are prepared on the income tax basis of accounting, describes that basis, and the financial statement titles do not imply U.S. GAAP.
  • D. The analytical procedures workpaper shows that gross margin fluctuations are consistent with prior-year trends.

Best answer: C

Explanation: The financial statement note identifying and describing the income tax basis directly supports both the conclusion wording and the separate special-purpose-framework paragraph. In a SSARS review, the report should alert users when the financial statements are prepared under a basis of accounting other than U.S. GAAP. For reviewed financial statements prepared under a special purpose framework, such as the income tax basis of accounting, the accountant’s review report should describe the framework used. The conclusion is framed in terms of whether material modifications are needed for the financial statements to be in accordance with that basis. The report also includes a separate paragraph, often titled “Basis of Accounting,” that refers to the note describing the framework and alerts users that it is a basis other than U.S. GAAP. Documentation showing that the financial statements and notes actually identify and describe the income tax basis is the most direct support for that report content.


Question 3

Topic: Ethics, Professional Responsibilities and General Principles

Rao & Co. has been asked to accept the first-year audit of Cline Co., a nonissuer. The engagement partner has determined that Rao is independent and competent, and the predecessor auditor reported no matters affecting acceptance. Cline’s controller says the financial statements will be prepared in accordance with U.S. GAAP, but the CEO states that management will not acknowledge responsibility for the financial statements, internal control, or providing unrestricted auditor access to records and personnel. What should Rao & Co. do next?

  • A. Decline the audit unless management agrees to acknowledge those responsibilities as a condition of acceptance.
  • B. Accept the audit and describe the access restriction as a scope limitation in the auditor’s report.
  • C. Ask the predecessor auditor to perform procedures on opening balances before accepting the audit.
  • D. Accept the audit and obtain management’s written representations at the end of fieldwork.

Best answer: A

Explanation: Rao should not accept the engagement while a required audit precondition is missing. Management must agree to its responsibilities for the financial statements, internal control, and unrestricted access before the auditor accepts the audit engagement. Before accepting an audit, the auditor must determine whether the preconditions for an audit are present. These include determining that the financial reporting framework is acceptable and obtaining management’s agreement that it is responsible for preparing and fairly presenting the financial statements, designing and maintaining internal control, and providing the auditor access to information and personnel. Here, the GAAP framework is acceptable, and other acceptance matters have been addressed. The unresolved issue is management’s refusal to acknowledge core responsibilities and access obligations. Written representations at the end of the audit do not replace this pre-acceptance agreement, and a known restriction is not something to accept and later report around.


Question 4

Topic: Assessing Risk and Developing a Planned Response

During planning for the audit of a nonissuer electronics distributor, the audit senior documented this inventory risk assessment:

  • Inventory is material.
  • Approximately 30% of year-end inventory consists of prior-generation devices discontinued by a major customer.
  • Post-year-end sales of those devices have been below recorded cost.
  • The client has no formal control for identifying obsolete items or comparing cost with net realizable value; adjustments are made only if sales staff notify accounting.
  • Warehouse access controls and physical count controls operated without noted exceptions.

The senior concluded: “The elevated inventory risk relates to existence, and both inherent risk and control risk are low because access and count controls operated effectively.” What correction should the audit reviewer require?

  • A. Assess all inventory assertions at high inherent and control risk without distinguishing among assertions.
  • B. Keep control risk low for inventory valuation because the access and physical count controls operated effectively.
  • C. Revise the assessment to identify inventory valuation as the elevated relevant assertion, with higher inherent risk and higher control risk for that assertion.
  • D. Revise only inventory existence control risk to high and plan additional physical inventory observation procedures.

Best answer: C

Explanation: The documented conclusion addresses the wrong assertion. The facts point to inventory valuation risk from possible obsolescence and lower-of-cost-and-net-realizable-value issues, and the client lacks a relevant control over that valuation process. Risk assessment should be performed at the relevant assertion level. Inventory may have different risks for existence, completeness, and valuation. Here, clean access and count controls provide evidence about physical custody and quantities, not whether discontinued products are recorded above net realizable value. The discontinued product line, sales below cost, and lack of a formal obsolescence or NRV review indicate elevated inherent risk for valuation. Because there is no identified relevant control that addresses that valuation risk, control risk for the valuation assertion should also be assessed higher unless other effective controls are identified and relied upon.


Question 5

Topic: Performing Further Procedures and Obtaining Evidence

An auditor of a nonissuer plans to use the client’s year-end inventory aging report to select items for lower-of-cost-and-net-realizable-value testing. The report is produced by the client’s inventory system.

Workpaper notes:

Procedure/resultFinding
Reconciled report total units to the perpetual inventory records and general ledgerNo differences noted
Traced quantities for 20 report items to inventory recordsNo exceptions noted
Recalculated aging for the same 20 items using transaction historyFour items shown as 0-90 days old had no sale or movement for more than 365 days because a manual cycle-count adjustment reset the last-movement date
Tested user access for manual changes to last-movement datesNot performed

Which interpretation best addresses whether the report is sufficiently reliable for the planned procedure?

  • A. The report is not usable because internally generated reports cannot provide audit evidence for substantive procedures.
  • B. The report is sufficiently reliable because sampled quantities agreed to inventory records, so the report’s calculated aging is also accurate.
  • C. The report is sufficiently reliable because total units reconcile to the perpetual inventory records and the general ledger.
  • D. The report is not sufficiently reliable for selecting aged inventory unless the auditor performs additional procedures on the aging field and manual date changes.

Best answer: D

Explanation: The report’s reliability must be evaluated for the specific purpose for which it will be used. Here, the planned procedure depends on aging data, and the auditor found misclassified items caused by manual date resets. Information produced by the entity can be used as audit evidence, but the auditor must evaluate whether it is sufficiently reliable for the intended audit procedure. That evaluation includes considering the accuracy and completeness of the relevant data and, when necessary, controls over its preparation or maintenance. In this case, reconciling total units supports completeness of quantities, but it does not validate the aging classification. Because the auditor found exceptions in last-movement dates—the data element used to identify aged inventory—the report is not sufficiently reliable for selecting aged items without additional procedures, such as testing report logic, manual changes, or corroborating aging from transaction history.


Question 6

Topic: Forming Conclusions and Reporting

An auditor is completing the final review in an integrated audit of an issuer. The workpapers include these facts:

  • A material revenue cutoff misstatement was identified before report issuance.
  • Management recorded the proposed adjustment, and the corrected financial statements are fairly presented.
  • The misstatement resulted from an ineffective year-end revenue cutoff control that was not remediated by year-end.
  • The auditor obtained sufficient appropriate evidence about both the financial statements and internal control over financial reporting.

Which conclusion is most consistent with the evidence obtained?

  • A. Issue an unmodified opinion on the financial statements and disclaim an opinion on internal control over financial reporting.
  • B. Issue an unmodified opinion on the financial statements and an adverse opinion on internal control over financial reporting.
  • C. Issue an unmodified opinion on the financial statements and a qualified opinion on internal control over financial reporting.
  • D. Issue an adverse opinion on the financial statements and an adverse opinion on internal control over financial reporting.

Best answer: B

Explanation: The financial statement misstatement was corrected before issuance, and the auditor has sufficient evidence that the corrected financial statements are fairly presented. However, the ineffective cutoff control caused a material misstatement and was not remediated by year-end, supporting a material weakness and an adverse ICFR opinion. In an integrated audit of an issuer, the auditor forms separate conclusions on the financial statements and on internal control over financial reporting. A detected material misstatement does not automatically require a modified financial statement opinion if management records the adjustment and the corrected financial statements are fairly presented. However, a control deficiency that results in a material misstatement is strong evidence of a material weakness. If that material weakness exists as of year-end, the auditor should express an adverse opinion on ICFR, even though the financial statement opinion may be unmodified.


Question 7

Topic: Ethics, Professional Responsibilities and General Principles

A registered public accounting firm audits the annual financial statements of Cloudport Inc., an SEC registrant. During the audit period, Cloudport’s audit committee preapproved the firm to use management’s adjusted trial balance to draft the financial statements and footnote disclosures for Cloudport’s Form 10-K. Management reviewed the drafts, made all accounting decisions, and accepted responsibility for the statements. How should this service be characterized for auditor independence purposes?

  • A. An SEC/PCAOB independence impairment because preparing an issuer’s financial statements and notes is a prohibited bookkeeping-related service.
  • B. An independence issue only if the firm also designed or operated Cloudport’s financial reporting system.
  • C. A permissible issuer non-audit service because the audit committee preapproved the service before the firm performed it.
  • D. An AICPA-only independence matter that is permissible if management accepts responsibility and appropriate safeguards are applied.

Best answer: A

Explanation: Because Cloudport is an issuer, the audit firm must comply with SEC/PCAOB independence requirements. Those rules prohibit the auditor from preparing the issuer’s financial statements or notes; audit committee preapproval and management acceptance do not cure a prohibited service. For issuer audit clients, the auditor’s independence is evaluated under SEC and PCAOB requirements, not merely the AICPA nonattest services framework. Preparing financial statements or footnote disclosures from the client’s trial balance is considered a bookkeeping-related service connected to the accounting records or financial statements being audited. That service is prohibited for an issuer audit client. Audit committee preapproval is required for permissible non-audit services, but it cannot make a prohibited service allowable. Management’s review and acceptance of responsibility may be important in AICPA nonissuer contexts, but those safeguards do not override SEC/PCAOB prohibitions for issuer engagements.


Question 8

Topic: Assessing Risk and Developing a Planned Response

Marin CPA is planning the audit of a nonissuer. The engagement partner approved income before income taxes as the benchmark and 5% as the percentage for materiality for the financial statements as a whole. The draft current-year financial statements include the following amounts, all tied to the preliminary trial balance:

Financial dataAmount
Revenue$75,000,000
Total assets$48,000,000
Income before income taxes$8,400,000
Net income$6,000,000

Which audit evidence best supports the engagement team’s materiality calculation?

  • A. A written representation from management that misstatements below $420,000 would not affect users’ decisions.
  • B. A recalculation showing $6,000,000 of net income multiplied by 5%, producing materiality of $300,000.
  • C. An analytical procedure showing that 0.56% of revenue equals approximately $420,000.
  • D. A recalculation showing $8,400,000 of income before income taxes multiplied by 5%, producing materiality of $420,000.

Best answer: D

Explanation: The approved benchmark is income before income taxes, and the approved percentage is 5%. Applying 5% to $8,400,000 gives materiality for the financial statements as a whole of $420,000, so the recalculation using that benchmark is the best support. Materiality for the financial statements as a whole is calculated by applying the selected percentage to the selected benchmark. Here, the engagement partner approved income before income taxes as the benchmark and 5% as the percentage. The calculation is \(8,400,000 × 5% =\)420,000. The strongest support is audit documentation that ties the benchmark amount to the draft financial statements or trial balance and reperforms the calculation using the approved percentage. Management’s views, alternate benchmarks, or calculations using net income do not support the approved materiality basis.


Question 9

Topic: Performing Further Procedures and Obtaining Evidence

An auditor is testing a $480,000 sale recorded on December 30, Year 1. The sale is material to revenue cutoff. The customer’s purchase order states FOB shipping point and has no clause transferring control before shipment.

Evidence obtained:

ItemDetail
InvoiceDated December 30, Year 1
Positive confirmationCustomer confirmed it owed $480,000 for the invoice at December 31, Year 1
Shipping recordBill of lading shows carrier pickup on January 3, Year 2
Management explanationGoods were boxed and segregated in the warehouse on December 30

Which response best applies professional skepticism to these evidential matters?

  • A. Resolve the inconsistency by obtaining a written representation from management that the goods were segregated by year-end.
  • B. Evaluate the confirmation as evidence of the customer’s acknowledgment, but investigate the shipping record contradiction before concluding on revenue cutoff.
  • C. Accept the confirmed balance as sufficient evidence that the Year 1 revenue was properly recorded.
  • D. Conclude that the contradiction establishes intentional misstatement and modify the auditor’s report.

Best answer: B

Explanation: Professional skepticism requires the auditor to consider both corroborating and contradictory evidence. The external confirmation supports that the customer acknowledges the invoice, but it does not resolve the cutoff issue raised by the January 3 bill of lading under FOB shipping point terms. Audit evidence must be evaluated for both reliability and relevance to the assertion being tested. A customer confirmation is generally reliable, but in this fact pattern it is most relevant to the existence of the receivable or the customer’s acknowledgment of the invoice. The bill of lading is highly relevant to revenue cutoff because the terms are FOB shipping point and no contract provision transfers control before shipment. Evidence that goods were merely boxed and segregated does not, by itself, resolve the cutoff contradiction. Applying professional skepticism means not accepting one piece of corroborating evidence while ignoring contradictory evidence; the auditor should perform additional procedures, reconcile the inconsistency, and evaluate whether a Year 1 adjustment is necessary.


Question 10

Topic: Forming Conclusions and Reporting

An auditor is completing a nonissuer audit of financial statements prepared in accordance with U.S. GAAP. Overall materiality for pretax income is $500,000. All planned audit procedures have been completed, the auditor has obtained sufficient appropriate audit evidence, and management refuses to correct the following known misstatements:

MisstatementEffect on pretax income
Improper revenue cutoffOverstatement of $280,000
Understatement of warranty liabilityOverstatement of $190,000
Capitalized repair expenseOverstatement of $80,000

The auditor does not believe the misstatements are pervasive to the financial statements as a whole. Which interpretation is best supported by the accumulated evidence?

  • A. The auditor should issue an unmodified opinion because no individual misstatement exceeds overall materiality.
  • B. The auditor should modify the report and express a qualified opinion if management does not correct the misstatements.
  • C. The auditor should obtain more evidence because management’s refusal to correct the misstatements creates a scope limitation.
  • D. The auditor should express an adverse opinion because any aggregate misstatement above materiality is pervasive.

Best answer: B

Explanation: The accumulated evidence is sufficient to support a conclusion that the financial statements are materially misstated. Because the total known pretax income overstatement is $550,000, which exceeds $500,000 materiality, and the effect is not pervasive, a qualified opinion is appropriate if management refuses correction. In forming an opinion, the auditor evaluates whether sufficient appropriate evidence has been obtained and whether uncorrected misstatements are material individually or in the aggregate. Here, the known misstatements all overstate pretax income, and their aggregate effect is $550,000, exceeding overall materiality of $500,000. Because the auditor has completed the necessary procedures and has sufficient appropriate evidence, the issue is not a lack of evidence. Management’s refusal to correct a material misstatement results in a departure from U.S. GAAP. Since the stem states the misstatements are not pervasive, the appropriate report modification is a qualified opinion rather than an adverse opinion.


Question 11

Topic: Ethics, Professional Responsibilities and General Principles

An audit senior is evaluating management’s estimate of the inventory obsolescence reserve. In prior years, the reserve was 2% of inventory. In the current year, a major customer canceled future orders for one product line, and inventory aging increased significantly. The senior concluded that the current-year 2% reserve was reasonable and noted that no additional procedures were necessary because the prior-year estimate had been accepted. Which documented item best supports the engagement partner’s concern that the senior’s skeptical evaluation was impaired by a judgment shortcut?

  • A. A controller-prepared schedule showing that total inventory increased only slightly from the prior year.
  • B. A management representation stating that the reserve reflects all information known to management at year-end.
  • C. A workpaper using the prior-year 2% reserve as the benchmark, with no evaluation of the canceled orders or aged items.
  • D. An inventory observation record showing that quantities on hand agreed to the perpetual inventory records.

Best answer: C

Explanation: The strongest support is evidence that the auditor anchored on the prior-year reserve and disregarded current-year contradictory information. Professional skepticism requires considering evidence that may contradict management’s estimate, especially when conditions have changed. Auditor bias can impair skeptical judgment when an auditor relies too heavily on an initial benchmark or prior-year conclusion. Here, the prior-year 2% reserve became an anchor even though current-year facts—canceled orders and increased aging—indicated a higher risk of obsolescence. A workpaper that fails to address those contrary facts best supports the conclusion that the evaluation was affected by a judgment shortcut. Management representations, existence testing, or high-level inventory trends do not adequately address whether the reserve estimate was skeptically evaluated.


Question 12

Topic: Assessing Risk and Developing a Planned Response

An auditor is planning the audit of a December 31, 20X5 financial statement audit. The client uses a service organization to calculate customer usage charges and generate monthly invoices. The auditor identified a risk that revenue could be misstated if usage-rate tables or invoice-generation controls are ineffective.

Workpaper itemFact
SOC report obtainedSOC 1 Type 2 report for January 1 through June 30, 20X5
Objectives coveredUser access provisioning and data center physical security
Objectives not coveredUsage-rate table changes, invoice generation, and processing completeness
Other service organization evidenceNo updated or expanded SOC 1 report will be available, and the service organization will not provide direct access to control records
Client records availableApproved rate tables, device usage logs, invoices, and cash receipt records

Based on the exhibit, which planned audit response is most appropriate?

  • A. Rely on the SOC 1 Type 2 report because it has an unmodified service auditor’s opinion for the service organization.
  • B. Design substantive procedures at the client using approved rate tables, usage logs, invoices, and cash receipt records rather than relying on service organization controls.
  • C. Obtain a bridge letter from service organization management and rely on the SOC 1 report through December 31, 20X5.
  • D. Issue a qualified opinion because the service organization will not provide direct access to its control records.

Best answer: B

Explanation: The available SOC 1 report is not relevant to the identified revenue risk because it excludes the controls over rate changes, invoice generation, and processing completeness. Since no expanded report or direct control evidence is available, the auditor should plan alternative substantive procedures using client records. A user auditor may use a SOC 1 Type 2 report as evidence only for the controls and period covered by the report, and only if those controls are relevant to the user entity’s financial statement assertions. Here, the report covers access provisioning and physical security, but the identified risk relates to revenue accuracy and completeness from rate-table changes and invoice generation. A bridge letter would address only the gap period and would not add coverage for omitted control objectives. Because relevant service organization control evidence is unavailable, the auditor should revise the planned response and obtain sufficient appropriate evidence through procedures at the user entity, such as recalculating invoices from approved rates and usage logs and agreeing amounts to invoices and cash receipts.


Question 13

Topic: Performing Further Procedures and Obtaining Evidence

An auditor is preparing a data request for a search for unrecorded liabilities. The planned procedure is to match goods received on or before December 31, 20X5, to related vendor invoices recorded through January 15, 20X6.

Data setRequested populationRequested fields
Receiving reportsReceipts dated December 20-31, 20X5receiving_report_no, receipt_date, vendor_name, item_no, quantity_received
Vendor invoicesAP invoices recorded December 20-31, 20X5invoice_no, invoice_date, vendor_name, invoice_amount
Purchase ordersPOs open at December 31, 20X5po_no, vendor_name, item_no, quantity_ordered

Process note: The purchasing system links vendor invoices to receipts using po_no and receiving_report_no.

Which revision is most necessary before the auditor uses this request?

  • A. Remove the purchase order extract because open purchase orders are not accounting records and cannot support liability testing.
  • B. Use vendor name and invoice amount as the primary join fields because they are sufficient to match invoices to receiving reports.
  • C. Request only vendor invoices dated on or before December 31, 20X5, because later invoice dates do not relate to year-end liabilities.
  • D. Request AP invoices recorded through January 15, 20X6, and include po_no and receiving_report_no so invoices can be joined to receipts.

Best answer: D

Explanation: The draft request is incomplete for the planned audit procedure. It omits the subsequent-period AP invoice population and the relational fields needed to link invoices to receiving reports, so the auditor could not reliably identify goods received before year-end but invoiced after year-end. A data request should align with the audit procedure it is intended to support. For a search for unrecorded liabilities, the auditor often examines goods received before year-end and determines whether related invoices recorded shortly after year-end indicate obligations existing at year-end. Here, the vendor invoice population stops at December 31 even though the procedure requires invoices recorded through January 15. Also, the process note says invoices are linked to receipts using po_no and receiving_report_no, but those fields are missing from the vendor invoice extract. Without the proper date range and join keys, the auditor may have an incomplete population and unreliable matching results.


Question 14

Topic: Forming Conclusions and Reporting

An auditor is completing an audit of a nonissuer’s financial statements prepared in accordance with U.S. GAAP. Audit evidence shows that inventory should be written down by $1.2 million for obsolescence, but management refuses to record the adjustment. The misstatement is material to inventory and net income but is not pervasive to the financial statements, and the auditor obtained sufficient appropriate evidence on all significant accounts. Which opinion should the auditor express?

  • A. A disclaimer of opinion because management refused to record the proposed adjustment
  • B. An unmodified opinion with an emphasis-of-matter paragraph describing the unrecorded adjustment
  • C. An adverse opinion because management refused to correct the misstatement
  • D. A qualified opinion because the financial statements are materially misstated but the effects are not pervasive

Best answer: D

Explanation: The issue is a known material misstatement caused by management’s refusal to record a required inventory write-down. Because the misstatement is material but not pervasive, the appropriate report modification is a qualified opinion rather than an adverse opinion or disclaimer. When the auditor obtains sufficient appropriate evidence and concludes that the financial statements contain a material misstatement, the type of opinion depends on pervasiveness. A material misstatement that is not pervasive results in a qualified opinion. A material and pervasive misstatement results in an adverse opinion. A disclaimer is used for an inability to obtain sufficient appropriate evidence when the possible effects could be material and pervasive, not for a known GAAP departure when evidence has been obtained. An emphasis-of-matter paragraph does not substitute for modifying the opinion when the financial statements are materially misstated.


Question 15

Topic: Ethics, Professional Responsibilities and General Principles

During the audit of a nonissuer, a staff auditor documented a material sale recorded on December 31. The customer confirmation stated, “Our purchase is subject to final board approval, and we did not have a binding obligation as of December 31.” Management explained that the customer employee who signed the confirmation was uninformed and provided a signed management representation stating that the sale was final. The staff auditor concluded that revenue recognition was appropriate based on management’s detailed explanation. Which correction to the audit response is best?

  • A. Propose an adjustment reversing the sale solely because the confirmation response contradicted management’s representation.
  • B. Add an emphasis-of-matter paragraph describing the inconsistent evidence if management refuses to change the recorded sale.
  • C. Revise the workpaper to accept revenue based on the detailed management explanation and signed management representation.
  • D. Perform additional procedures to resolve the inconsistency, such as confirming the terms with an authorized customer representative and inspecting executed agreements, before concluding on revenue recognition.

Best answer: D

Explanation: The best skeptical response is to investigate and resolve the contradiction before reaching a conclusion. A management representation may support other evidence, but it does not substitute for persuasive audit evidence when external evidence conflicts with management’s explanation. Professional skepticism requires a questioning mind and critical assessment of audit evidence, especially when evidence is inconsistent or management’s explanation is overly persuasive. Here, the external confirmation directly conflicts with management’s assertion that a material year-end sale was final. The appropriate correction is not to accept management’s representation, nor to immediately force a conclusion. The auditor should perform additional procedures targeted at the inconsistency, such as confirming with an authorized customer representative, inspecting the executed contract and approval terms, and evaluating whether the revenue recognition criteria were met as of year-end.


Question 16

Topic: Assessing Risk and Developing a Planned Response

During planning for the audit of a nonissuer retail company, the engagement team is identifying fraud risk factors. Which condition is the clearest example of an opportunity for misappropriation of assets, rather than a pressure, incentive, or rationalization related to fraudulent financial reporting?

  • A. Cashiers may approve customer refunds under $500 without independent review, and the refunds are paid from register cash.
  • B. The CFO states that aggressive revenue estimates are acceptable because major competitors use similar assumptions.
  • C. Store managers receive significant bonuses only if quarterly same-store sales increase by at least 8%.
  • D. Management is negotiating a debt covenant waiver based on the company’s current ratio at year-end.

Best answer: A

Explanation: The key distinction is between a motive to commit fraud and the ability to carry it out. Unsupervised refund approval with access to cash is a control weakness that creates an opportunity for employees to misappropriate assets. Fraud risk factors are commonly grouped as pressures or incentives, opportunities, and attitudes or rationalizations. For misappropriation of assets, opportunity often arises from weak controls over custody, authorization, recording, or review of assets such as cash or inventory. In this scenario, cashiers can both authorize refunds and access the cash used to pay them, with no independent review. That combination permits an employee to create fictitious refunds and remove cash, so it is most directly an opportunity for misappropriation. The other facts may create pressure to overstate results or rationalize aggressive reporting, but they do not primarily describe access to assets or a control weakness enabling theft.


Question 17

Topic: Performing Further Procedures and Obtaining Evidence

An audit team received a client extract for planned revenue data analytics. The team wants to use the following fields as audit evidence in matching sales records to shipping activity, but the team has not yet reviewed the data dictionary or documented which calculations are valid for each field.

FieldExample values
Sales region codeNE, SE, W
Credit review level1 = low, 2 = medium, 3 = high
Invoice date20X6-02-14
Shipment weight25.4 pounds
Units shipped10

What should the auditor do next?

  • A. Compute average values for the sales region code and credit review level after assigning numeric codes to each value.
  • B. Select the largest units-shipped transactions for vouching before determining which fields can support the planned analytics.
  • C. Convert all fields to categorical labels and limit the procedure to frequency counts of each distinct value.
  • D. Obtain or confirm the data dictionary and classify sales region as nominal, credit review level as ordinal, invoice date as interval, shipment weight as ratio/continuous, and units shipped as ratio/discrete before selecting calculations.

Best answer: D

Explanation: Before using client data fields as audit evidence, the auditor should understand what each field represents and which mathematical operations are valid. Classifying the fields by measurement scale prevents invalid analytics, such as averaging nominal codes or treating ordered ratings as if equal intervals were proven. Data preparation for audit analytics includes confirming field definitions, formats, and measurement scales. Nominal data identify categories without rank, such as sales region codes. Ordinal data have an order but not necessarily equal spacing, such as low, medium, and high credit review levels. Interval data support meaningful differences but not meaningful ratios, such as calendar dates. Ratio data have a meaningful zero and support ratios, such as weight and units. Continuous fields can take decimal values within a range, while discrete fields are counts. These classifications determine whether procedures such as sorting, grouping, averaging, stratifying, or ratio analysis are appropriate.


Question 18

Topic: Forming Conclusions and Reporting

A county’s financial statement audit is performed under GAAS and Government Auditing Standards, and the county is also subject to a single audit under the Uniform Guidance. During testing of a major federal award program, the auditor determines that eligibility approvals required by the grant agreement were not reviewed, resulting in ineligible costs charged to the program. The noncompliance is material to the major program but not material to the financial statements, and the related control deficiency is a material weakness in internal control over compliance. How should this matter be presented?

  • A. Present it in the single audit reporting package as material noncompliance for the major federal program and a material weakness in internal control over compliance.
  • B. Present it only in a management letter because findings related to federal awards are not reported unless they materially affect the financial statements.
  • C. Present it as a significant deficiency in internal control over financial reporting because the effect is not material to the financial statements.
  • D. Present it only in the Government Auditing Standards report on internal control over financial reporting and compliance as a material financial statement compliance finding.

Best answer: A

Explanation: This condition relates to compliance requirements for a major federal award program, not to internal control over financial reporting. Because the noncompliance is material to the major program and the control deficiency is a material weakness in internal control over compliance, it belongs in the single audit reporting package. In a single audit, the auditor reports on compliance for each major federal program and on internal control over compliance. A finding that is material to a major program is reported as major program noncompliance, and a severe control deficiency over compliance is reported as a material weakness in internal control over compliance. The fact that the questioned costs are not material to the financial statements means the financial statement opinion is not modified solely for this matter. It also means the matter is not classified as an internal control over financial reporting deficiency merely because federal funds affect accounting records.


Question 19

Topic: Ethics, Professional Responsibilities and General Principles

A CPA firm is engaged to audit a county’s financial statements under Government Auditing Standards. The county asks the firm to perform one nonaudit service during the audit period. The county finance director has sufficient skill, knowledge, and experience to oversee any permissible nonaudit service and will accept responsibility for the results. Which requested service would impair the firm’s independence because it involves assuming management responsibilities?

  • A. Drafting the county’s financial statements and note disclosures from the county’s final trial balance for the finance director’s review and approval.
  • B. Preparing proposed year-end accrual entries from schedules provided by county personnel, subject to the finance director’s approval before posting.
  • C. Selecting account codes for grant expenditures, approving the resulting journal entries, and instructing county staff to post them.
  • D. Training county accounting staff on the required format of a federal grant schedule without deciding the amounts to report.

Best answer: C

Explanation: Under GAO independence rules, safeguards may address threats from many permitted nonaudit services only if management oversees and accepts responsibility. However, the auditor may not assume management responsibilities. Approving entries, deciding classifications, and directing entity personnel cross that line. Government Auditing Standards allow auditors to provide certain nonaudit services to an audited entity if the service is not prohibited, management has sufficient skill, knowledge, and experience to oversee the service, management accepts responsibility, and any significant threats are reduced by safeguards. Preparing draft financial statements, proposed entries, or training materials may create significant threats, but those services can be permissible when management makes the decisions and approves the work. By contrast, an auditor impairs independence by performing management functions, such as authorizing transactions, approving journal entries, determining account classifications without management approval, or directing client employees. The service involving selecting account codes, approving entries, and instructing staff to post them is therefore impermissible.


Question 20

Topic: Assessing Risk and Developing a Planned Response

Assume the applicable Uniform Guidance threshold for a single audit is $1,000,000 of federal awards expended during the fiscal year. An independent auditor is planning the audit of a city and notes the following expenditures; no other federal assistance was expended:

Funding arrangementAmount expendedKey fact
Community policing grant$650,000Direct DOJ grant with an Assistance Listing number
Workforce training grant$400,000State pass-through award identifying a U.S. DOL Assistance Listing number; the city is a subrecipient
Economic development appropriation$300,000Funded entirely by state tax revenues; no federal source identified
Groundskeeping contract$150,000Fixed-price procurement contract for a federal agency’s own use; the city is a contractor

Which conclusion should the auditor reach for Uniform Guidance planning?

  • A. The city is subject to a single audit because the direct policing grant and the pass-through workforce grant are federal awards totaling $1,050,000; those federal programs or clusters form the population for major program determination.
  • B. The city is not subject to a single audit because only awards received directly from a federal agency count toward the threshold; the state pass-through workforce grant is excluded.
  • C. The city is subject to a single audit because all governmental funding and federal-agency procurement contracts count toward the threshold; all four funding arrangements are potential major programs.
  • D. The city is not subject to a single audit unless one federal program individually exceeds $1,000,000; major programs are identified before applying the audit threshold.

Best answer: A

Explanation: Uniform Guidance applies when a nonfederal entity expends at least the stated threshold in federal awards during the fiscal year. The direct DOJ grant and the state pass-through DOL subrecipient award are federal awards totaling $1,050,000, so the city is subject to a single audit. For single audit purposes, federal awards include federal financial assistance received directly from a federal agency and federal assistance passed through another entity when the auditee is a subrecipient. The threshold is based on total federal awards expended during the fiscal year, not total government funding and not only direct federal receipts. Here, $650,000 from DOJ and $400,000 of the DOL pass-through subaward total $1,050,000. The state-only appropriation and the fixed-price procurement contract in which the city acts as a contractor are excluded. Major programs are then determined from the federal program or cluster population under Uniform Guidance procedures.


Question 21

Topic: Performing Further Procedures and Obtaining Evidence

A nonissuer audit team is testing management’s allowance for credit losses at December 31. Management’s model assumes that a customer representing 35% of past-due receivables will repay in full because the customer’s bank is expected to renew its line of credit. Before the audit report is released, the auditor obtains a January 10 letter from the bank to the customer denying the renewal because of covenant violations that existed at December 31. Management keeps the full-repayment assumption, stating that the customer may find another lender. Which response best addresses the contradictory information?

  • A. Resolve the inconsistency by obtaining a written representation from management that alternative financing remains possible.
  • B. Accept the assumption if the credit-loss model is mathematically accurate and applied consistently with prior periods.
  • C. Treat the denial letter as contradictory audit evidence about a significant assumption, perform additional procedures to evaluate collectibility, and consider misstatement and management bias.
  • D. Treat the denial letter as only a subsequent-event disclosure matter because it was issued after December 31.

Best answer: C

Explanation: The bank’s denial is audit evidence that conflicts with management’s full-collection assumption. Because the denial relates to covenant violations existing at year-end, the auditor should evaluate its effect on the allowance estimate and consider whether management’s continued assumption indicates misstatement or bias. When audit evidence contradicts assumptions used in an accounting estimate, the auditor should not ignore the inconsistency or rely solely on management’s explanation. The auditor should evaluate whether the assumption remains reasonable in light of all available evidence, perform further procedures as needed, and consider whether the estimate is misstated. Here, the denied line renewal undermines management’s basis for assuming full repayment of a significant past-due receivable. Because the denial was tied to conditions existing at December 31, it is relevant to the year-end estimate. Management’s unsupported belief that another lender may be found does not overcome contradictory evidence without corroboration.


Question 22

Topic: Forming Conclusions and Reporting

A nonissuer audit team has obtained sufficient appropriate audit evidence over all significant accounts. Management refuses to record a required GAAP adjustment to consolidate a wholly owned subsidiary. The auditor concludes that the unrecorded consolidation adjustment is material and pervasive to the financial statements. The draft auditor’s report currently includes an unmodified opinion with an emphasis-of-matter paragraph describing the omission. What is the best correction to the draft report?

  • A. Keep the unmodified opinion and expand the emphasis-of-matter paragraph to quantify the omitted subsidiary.
  • B. Replace the unmodified opinion with an adverse opinion because the GAAP departure is material and pervasive.
  • C. Replace the unmodified opinion with a qualified opinion because the issue is limited to one subsidiary.
  • D. Replace the unmodified opinion with a disclaimer of opinion because management refused to record the adjustment.

Best answer: B

Explanation: The issue is a known GAAP departure, not merely a matter to emphasize. Because the auditor has evidence and concludes the misstatement is both material and pervasive, the report should contain an adverse opinion. Audit report modifications depend on both the nature and magnitude of the issue. A material misstatement caused by a departure from the applicable financial reporting framework results in a qualified opinion if material but not pervasive, and an adverse opinion if material and pervasive. A disclaimer is used for a scope limitation or inability to obtain sufficient appropriate audit evidence that is material and pervasive. Here, the auditor has sufficient appropriate evidence and has identified a required consolidation adjustment that management refuses to record. Since the omission is material and pervasive, an adverse opinion is the appropriate correction.


Question 23

Topic: Ethics, Professional Responsibilities and General Principles

Marin, CPA, an AICPA member, is the controller of a private company. The CFO directs Marin to record $850,000 of revenue from goods that were not shipped until January 3, even though the invoice is dated December 31. The amount is material to current-year income. The CFO says the reporting deadline cannot be missed and asks Marin to “just book it.” Which response best maintains integrity and complies with applicable professional standards?

  • A. Record the entry if the CFO approves it, because management is responsible for the financial statements.
  • B. Immediately disclose the matter to the company’s lender without company authorization to prevent reliance on misstated financial statements.
  • C. Refuse to record the misleading entry, communicate the concern to an appropriate higher level if unresolved, and consider further action such as resignation if necessary.
  • D. Record the entry but document Marin’s disagreement in a private memorandum to preserve evidence of professional judgment.

Best answer: C

Explanation: The correct response is to avoid association with a material misstatement and not subordinate professional judgment to the CFO’s instruction. The CPA should refuse to record the improper revenue and escalate internally if the issue is not corrected. Under the AICPA Code, a member must maintain integrity and objectivity and must not knowingly misrepresent facts or subordinate professional judgment. Recording revenue for goods shipped after year-end would materially overstate current-year income under the facts given. Because the CFO’s instruction would cause misleading financial reporting, the CPA should refuse to make the entry, discuss the matter with the CFO or an appropriate higher level such as those charged with governance, and consider additional steps if the matter remains unresolved. Outside disclosure generally is not the first response unless required or permitted by law, regulation, or professional standards.


Question 24

Topic: Assessing Risk and Developing a Planned Response

An audit senior prepared the following planning memo for the revenue cycle of a nonissuer client. Which planned audit response best aligns audit resources, timing, and procedures with the identified risks?

Planning matterNote
Revenue trendFourth-quarter revenue is 35% higher than the prior year; the client exceeded its annual revenue target by 1%.
IncentivesSales management bonuses are based on achieving the annual revenue target.
System changeA new order-entry and invoicing system was implemented on October 1; prior-year control walkthroughs relate to the old system.
ControlsThe December exception report for manual invoice-date changes was not reviewed because the controller position was vacant.
Shipping dataYear-end shipments are made FOB shipping point from an outsourced warehouse, which sends shipping files three business days after shipment.
  • A. Confirm year-end accounts receivable balances and reduce cutoff testing because shipments are FOB shipping point.
  • B. Assign more experienced personnel with IT involvement, perform key revenue work near year end, and expand substantive cutoff and detail testing of manual date changes and warehouse shipping files.
  • C. Perform most revenue procedures at interim using prior-year controls and update the work through inquiry at year end.
  • D. Keep staffing unchanged and rely primarily on final analytical procedures because annual revenue only slightly exceeded the target.

Best answer: B

Explanation: The exhibit identifies elevated revenue recognition and cutoff risks, including incentives to meet a target, a new system, unreviewed manual date changes, and delayed warehouse shipping data. The best response adjusts staffing, timing, and substantive procedures to address those specific risks. Audit planning should respond to identified risks by changing the nature, timing, and extent of procedures and by assigning appropriate personnel. Here, the revenue area has multiple risk indicators: management incentives tied to revenue, significant fourth-quarter growth, a new invoicing system, a missing review of manual invoice-date changes, and delayed third-party warehouse shipping data. Those facts support using more experienced staff and IT involvement, performing important work closer to year end rather than mainly at interim, and expanding substantive procedures focused on cutoff, occurrence, and manual overrides. Prior-year control work over the old system is not a sufficient basis for reliance, and analytical procedures or confirmations alone would not directly address the specific cutoff and override risks.

In this section

  • CPA AUD: Ethics and Professional Responsibilities
    Try 10 focused Certified Public Accountant Auditing and Attestation (CPA AUD) questions on ethics, professional responsibilities, independence, due care, confidentiality, and engagement principles.
  • CPA AUD: Risk Assessment and Planned Response
    Try 10 focused Certified Public Accountant Auditing and Attestation (CPA AUD) questions on risk assessment, materiality, assertions, fraud risk, controls, and planned response.
  • CPA AUD: Audit Procedures and Evidence
    Try 10 focused Certified Public Accountant Auditing and Attestation (CPA AUD) questions on audit procedures, evidence reliability, sampling, confirmations, analytics, and data preparation.
  • CPA AUD: Forming Conclusions and Reporting
    Try 10 focused Certified Public Accountant Auditing and Attestation (CPA AUD) questions on audit conclusions, report modifications, going concern, subsequent events, misstatements, and ICFR effects.
  • Free CPA AUD Full-Length Practice Exam: 78 Questions
    Try 78 free Certified Public Accountant Auditing and Attestation (CPA AUD) questions across the AUD blueprint areas, with answers and explanations, then continue in Mastery Exam Prep.
Revised on Wednesday, May 13, 2026