CPA Business Environment and Concepts (BEC) — Questions and Answers
Question 1: According to COSO's ERM framework, which of the following is an essential element of the governance and culture of an entity?
- Information, communication, and reporting
- Strategy
- Commitment to core values (Correct answer)
- Performance
Correct answer: Commitment to core values
According to the COSO ERM framework, 'Governance and Culture' is a foundational component that establishes the organization's tone and ethical values. A key principle supporting this component is the 'Commitment to core values,' which ensures that the entity's ethical standards are understood, embraced, and practiced throughout the organization. This commitment shapes the entity's culture and guides decision-making.
Question 2: Which of the following is an example of a variable cost?
- Depreciation on equipment
- Direct materials (Correct answer)
- Rent expense
- Insurance premiums
Correct answer: Direct materials
Direct materials are variable costs because they increase or decrease proportionally with the level of production.
Question 3: Which of the following best describes a phishing attack?
- Overloading a server with traffic to make it unavailable
- Unauthorized access to a system by exploiting software vulnerabilities
- Malware that encrypts files and demands a ransom payment
- Fraudulent communications disguised as legitimate to trick users into revealing sensitive information (Correct answer)
Correct answer: Fraudulent communications disguised as legitimate to trick users into revealing sensitive information
Phishing attacks use deceptive emails, texts, or websites impersonating trusted entities to manipulate victims into disclosing credentials, financial data, or other sensitive information.
Question 4: A competitive advantage is considered 'sustainable' when it is:
- Based solely on lower pricing than all rivals
- Difficult for competitors to imitate, substitute, or replicate over time (Correct answer)
- Dependent on a single key employee's expertise
- Derived from a single product innovation that won an industry award
Correct answer: Difficult for competitors to imitate, substitute, or replicate over time
A sustainable competitive advantage persists because it is rooted in capabilities or resources that are valuable, rare, costly to imitate, and not substitutable (the VRIN framework).
Question 5: A company uses a PESTEL analysis to evaluate which category of external factors?
- Pricing, Expenses, Sales, Trade, Earnings, and Liability factors
- Political, Economic, Social, Technological, Environmental, and Legal factors (Correct answer)
- Products, Expansion, Strategy, Talent, Execution, and Loyalty factors
- People, Equipment, Systems, Technology, Efficiency, and Logistics factors
Correct answer: Political, Economic, Social, Technological, Environmental, and Legal factors
PESTEL analysis is a strategic framework for scanning the macro-environment by systematically examining Political, Economic, Social, Technological, Environmental, and Legal factors that affect the organization.
Question 6: The Economic Order Quantity (EOQ) model determines the order size that:
- Reduces the number of suppliers needed
- Eliminates all stockout occurrences
- Minimizes total inventory costs including ordering and holding costs (Correct answer)
- Maximizes gross profit margin on inventory sales
Correct answer: Minimizes total inventory costs including ordering and holding costs
EOQ calculates the optimal order quantity that minimizes total inventory costs by balancing the cost of placing orders against the cost of holding inventory.
Question 7: Lean manufacturing primarily focuses on eliminating:
- All forms of employee overtime
- Dependence on external suppliers
- Waste (non-value-adding activities) from production processes (Correct answer)
- Product variety to simplify manufacturing
Correct answer: Waste (non-value-adding activities) from production processes
Lean manufacturing identifies and systematically eliminates eight categories of waste (overproduction, waiting, transport, over-processing, inventory, motion, defects, underutilized talent) to maximize value delivery.
Question 8: A company's Internal Rate of Return (IRR) decision rule states: accept a project if:
- IRR exceeds the required rate of return (hurdle rate) (Correct answer)
- IRR is less than the cost of debt
- IRR equals zero
- IRR is less than the NPV
Correct answer: IRR exceeds the required rate of return (hurdle rate)
The IRR decision rule holds that a project should be accepted when its IRR exceeds the company's required rate of return, indicating the project earns more than its cost of capital.
Question 9: In IT governance, the principle of 'separation of duties' means:
- No single individual should have control over all phases of a transaction (Correct answer)
- User access should be separated from administrator access
- Software development and testing must be done by different companies
- IT and accounting departments must operate independently
Correct answer: No single individual should have control over all phases of a transaction
Separation of duties is an internal control requiring that key steps in a transaction (authorization, recording, custody of assets) be handled by different individuals to prevent fraud.
Question 10: Big Data is typically characterized by which three 'V's?
- Volume, Veracity, and Value
- Volume, Velocity, and Variety (Correct answer)
- Velocity, Visualization, and Vulnerability
- Value, Validity, and Visibility
Correct answer: Volume, Velocity, and Variety
Big Data is classically defined by Volume (enormous size), Velocity (high-speed generation), and Variety (diverse formats including structured and unstructured data).
Question 11: Which of the following would increase a company's operating leverage?
- Reducing accounts receivable days outstanding
- Shifting from variable to fixed production costs (Correct answer)
- Raising the dividend payout ratio
- Increasing the proportion of debt in the capital structure
Correct answer: Shifting from variable to fixed production costs
Higher operating leverage results from a greater proportion of fixed costs in the cost structure, amplifying the impact of revenue changes on operating income.
Question 12: The optimal capital structure for a firm minimizes its:
- Accounts payable turnover
- Gross profit margin
- Total revenue
- Weighted average cost of capital (WACC) (Correct answer)
Correct answer: Weighted average cost of capital (WACC)
The optimal capital structure is the debt-to-equity mix that minimizes the firm's WACC, thereby maximizing the value of the firm and shareholder wealth.
Question 13: A balanced scorecard measures organizational performance using which four perspectives?
- Revenue, Profit, Market Share, and Employee Satisfaction
- Short-term, Medium-term, Long-term, and Strategic goals
- Sales, Operations, HR, and IT performance metrics
- Financial, Customer, Internal Business Processes, and Learning & Growth (Correct answer)
Correct answer: Financial, Customer, Internal Business Processes, and Learning & Growth
The balanced scorecard framework, developed by Kaplan and Norton, evaluates performance across four linked perspectives: financial results, customer value, internal process efficiency, and organizational learning and growth.
Question 14: In IT risk management, a vulnerability is best described as:
- The likelihood that a control will fail
- A specific attack targeting company data
- The potential financial impact of a system failure
- A weakness in a system that could be exploited by a threat (Correct answer)
Correct answer: A weakness in a system that could be exploited by a threat
A vulnerability is a flaw or weakness in hardware, software, or procedures that a threat actor could exploit to gain unauthorized access or cause harm.
Question 15: The concept of 'least privilege' in IT security means users should:
- Have access only to the resources needed to perform their job functions (Correct answer)
- Share login credentials with supervisors for accountability
- Have administrator rights on their own workstations
- Use the simplest passwords possible to avoid forgetting them
Correct answer: Have access only to the resources needed to perform their job functions
The principle of least privilege limits user access rights to the minimum necessary for their job, reducing the attack surface and potential damage from compromised accounts.
Question 16: The overhead spending variance measures the difference between:
- Actual overhead and static budget overhead
- Flexible budget overhead and applied overhead
- Applied overhead and budgeted overhead at standard hours
- Actual overhead and flexible budget overhead (Correct answer)
Correct answer: Actual overhead and flexible budget overhead
The overhead spending variance is the difference between actual overhead incurred and the flexible budget allowance for overhead at the actual activity level.
Question 17: A master budget in operations typically includes:
- Only the capital expenditure budget for the coming year
- A single projected income statement for board approval
- All functional area budgets integrated into a comprehensive financial plan (Correct answer)
- The budget prepared exclusively by the CFO without departmental input
Correct answer: All functional area budgets integrated into a comprehensive financial plan
The master budget integrates all subsidiary budgets (sales, production, direct materials, direct labor, overhead, SG&A, capital) into a comprehensive financial plan including projected financial statements.
Question 18: The Committee on Sponsoring Organizations prepared the Internal Control-Integrated Framework:
- To respond to the internal control assessment requirements of the SOX Act of 2002
- As a part of the Congressional task force known as the Treadway Commission
- To compliment the overarching concepts of the ERM framework
- To help businesses assess internal control (Correct answer)
Correct answer: To help businesses assess internal control
The Committee of Sponsoring Organizations of the Treadway Commission (COSO) developed the Internal Control-Integrated Framework primarily to provide comprehensive guidance for organizations to design, implement, and assess the effectiveness of their internal control systems. This framework helps businesses achieve their objectives by ensuring reliable financial reporting, compliance with laws, and efficient operations. While it became a basis for SOX compliance, its initial and primary purpose was broader.
Question 19: A trade deficit occurs when a country's:
- Imports exceed its exports (Correct answer)
- Exports exceed its imports
- National debt exceeds its GDP
- Government spending exceeds tax revenues
Correct answer: Imports exceed its exports
A trade deficit (negative balance of trade) occurs when a country imports more goods and services than it exports during a given period.
Question 20: Financial leverage refers to the use of:
- Short-term borrowing to fund current operations
- Debt financing to amplify returns on equity (Correct answer)
- Accounts receivable to secure a line of credit
- Retained earnings to fund capital expenditures
Correct answer: Debt financing to amplify returns on equity
Financial leverage involves using borrowed funds to magnify potential returns to equity holders, though it also amplifies losses and increases financial risk.
Question 21: Enterprise risk management (ERM) is best described as:
- A compliance program designed solely to meet regulatory requirements
- A comprehensive framework for identifying, assessing, and managing risks across the entire organization (Correct answer)
- An insurance strategy to transfer all business risks externally
- A system for managing only financial and accounting risks
Correct answer: A comprehensive framework for identifying, assessing, and managing risks across the entire organization
ERM is an integrated, organization-wide approach to risk management that addresses all categories of risk — strategic, operational, financial, and compliance — in a coordinated manner.
Question 22: Which of the below is NOT a typical tactic for a company in a market that is only competitive?
- Lean manufacturing.
- Development of a brand name. (Correct answer)
- Process reengineering.
- Supply chain management.
Correct answer: Development of a brand name.
End-user computing refers to situations where non-IT professionals directly use and often develop computer applications. Personal computers (PCs) are designed for individual use and provide the accessibility and software tools (like spreadsheets and word processors) that empower end-users to manage their own data and tasks without extensive IT support, making them ideal for this purpose.
Question 23: Economic Value Added (EVA) is calculated as:
- Net income divided by total equity
- Net operating profit after tax minus a charge for the cost of capital employed (Correct answer)
- Revenue minus operating expenses
- EBITDA minus depreciation and amortization
Correct answer: Net operating profit after tax minus a charge for the cost of capital employed
EVA equals NOPAT minus the dollar cost of capital (invested capital × WACC), measuring whether a company earns more than its true cost of capital.
Question 24: Scenario planning in strategic management involves:
- Setting performance targets based on competitor benchmarks
- Creating a single most-likely forecast and planning around it
- Analyzing historical financial data to extrapolate future performance
- Developing multiple plausible future situations and strategies for each (Correct answer)
Correct answer: Developing multiple plausible future situations and strategies for each
Scenario planning creates several distinct but plausible future scenarios (e.g., optimistic, pessimistic, most likely) and develops strategic responses for each, improving organizational resilience.
Question 25: A company owns and operates multiple businesses in the Caribbean. Management has identified interruptions in normal operations as a potential risk resulting from storm damage caused by hurricanes. <br>Recognizing this, the company decides to treat the potential damage as part of its business model. The company's response to this potential risk is known as:
- Sharing
- Reduction
- Acceptance (Correct answer)
- Avoidance
Correct answer: Acceptance
Risk acceptance is a risk response strategy where an organization acknowledges a potential risk and decides to take no action to reduce or mitigate it, essentially absorbing the potential impact. In this scenario, the company recognizes the risk of storm damage but chooses to treat it as part of its business model, indicating they will bear the consequences if it occurs. This strategy is often chosen when the cost of mitigating the risk outweighs the potential impact.
Question 26: Supply chain management coordinates which of the following activities?
- Employee recruitment and performance management
- Financial reporting and investor relations
- Procurement, production, inventory, logistics, and customer delivery (Correct answer)
- Marketing, advertising, and brand management
Correct answer: Procurement, production, inventory, logistics, and customer delivery
Supply chain management integrates the flow of materials, information, and finances from raw material suppliers through production to the final customer delivery.
Question 27: Which of the these types of computers is most probably to be used for end-user computing?
- Personal reference assistants.
- Minicomputers.
- Personal computers. (Correct answer)
- Mainframe.
Correct answer: Personal computers.
A check digit is a calculated digit appended to a number, used to detect errors during data entry. 'Check digit verification' recalculates this digit upon entry and compares it to the stored one. This control is specifically designed to catch transcription errors, such as entering a similar but incorrect product code (Z96015 instead of Z96014), making it the most effective control for this mistake.
Question 28: Which of the following is an example of a general controls in IT?
- A validation check ensuring a date field contains only valid dates
- Access controls governing who can log into the system (Correct answer)
- An automated calculation of sales tax on invoices
- A report flagging duplicate invoice numbers
Correct answer: Access controls governing who can log into the system
General IT controls apply broadly to the IT environment (access controls, change management, physical security), while application controls are specific to individual programs.
Question 29: The Theory of Constraints (TOC) recommends focusing improvement efforts on:
- Reducing fixed costs across every department
- All processes simultaneously to maximize efficiency gains
- Non-bottleneck processes with the most available capacity
- The binding constraint that limits the system's overall output (Correct answer)
Correct answer: The binding constraint that limits the system's overall output
TOC states that a system's output is limited by its single binding constraint, so improvement efforts should focus on identifying and elevating that constraint before moving on to others.
Question 30: A favorable direct labor efficiency variance indicates that:
- Actual units produced exceeded budgeted units
- Actual hours worked were less than standard hours allowed (Correct answer)
- Actual hours worked exceeded standard hours allowed
- Actual wage rate was lower than the standard wage rate
Correct answer: Actual hours worked were less than standard hours allowed
A favorable direct labor efficiency variance means actual hours worked were less than the standard hours allowed for actual production, indicating efficient use of labor.
CPA Business Environment and Concepts (BEC)
The BEC section of the Uniform CPA Examination tests candidates' knowledge of corporate governance, economic concepts, financial management, information technology, and operations management as they relate to business environments. Note: BEC was retired in January 2024 as part of CPA Evolution and replaced by BAR, ISC, and TCP discipline exams.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds