Certified Government Auditing Professional (CGAP) Exam — Questions and Answers

Question 1: The controller and auditor general of India issued a directive for an audit.

government audit. (Correct answer)
management audit.
statutory audit.
final audit.

Correct answer: government audit.

The Comptroller and Auditor General (CAG) of India is the constitutional authority responsible for auditing all receipts and expenditures of the Union and State Governments. Therefore, any directive issued by this office for an audit would pertain to a government audit, falling within its mandate to ensure public accountability.

Question 2: To determine whether the organization's numerous activities are carried out effectively, an audit is done.

Interim audit.
Performance audit. (Correct answer)
Balance sheet audit.
Internal audit.

Correct answer: Performance audit.

A performance audit evaluates the economy, efficiency, and effectiveness of an organization's programs, operations, or management. Its objective is to determine whether resources are being used wisely and whether desired results are being achieved, thereby assessing how effectively various activities are carried out.

Question 3: Which principle requires government auditors to be free from personal, external, and organizational impairments to independence?

Professional skepticism
Independence in fact and appearance (Correct answer)
Objectivity and impartiality
Due professional care

Correct answer: Independence in fact and appearance

GAGAS requires auditors to maintain independence in both fact (actual state of mind) and appearance (perception by others) throughout the audit.

Question 4: What does the Schedule of Expenditures of Federal Awards (SEFA) report?

Performance metrics for federal grant programs
All federal awards expended by a non-federal entity during the audit period (Correct answer)
Grant revenue received but not yet spent
Federal agency spending on domestic programs

Correct answer: All federal awards expended by a non-federal entity during the audit period

The SEFA lists all federal awards expended by the auditee during the fiscal year and is a required supplementary schedule in a single audit.

Question 5: Who is in charge of examining the assets?

Auditor (Correct answer)
None of the above
Management
Director

Correct answer: Auditor

The auditor is an independent professional responsible for examining and verifying an entity's financial statements, which includes assessing the existence, valuation, and rights to assets. While management is responsible for safeguarding assets, the auditor's role is to provide an objective opinion on whether these assets are fairly presented in the financial statements.

Question 6: What is the significance of the 'cognizant agency' concept in federal single audits?

It is the agency responsible for coordinating audit follow-up and resolution for an auditee (Correct answer)
It is the agency that selects independent auditors for grantees
It is the GAO's point of contact for each audit engagement
It refers to the agency that funds the largest share of federal awards to the entity

Correct answer: It is the agency responsible for coordinating audit follow-up and resolution for an auditee

The cognizant agency is the federal agency assigned to coordinate oversight and audit resolution for a particular non-federal entity receiving federal funds.

Question 7: What is the purpose of the Yellow Book's 'conceptual framework' for independence?

To replace the need for ethics training
To list every specific relationship that impairs independence
To define materiality thresholds for independence determinations
To provide a principles-based approach for identifying and evaluating threats to independence (Correct answer)

Correct answer: To provide a principles-based approach for identifying and evaluating threats to independence

The conceptual framework guides auditors in identifying threats, evaluating their significance, and applying safeguards rather than relying on a rules-based list.

Question 8: The audit that is required by law is known as .

Continuous audit.
Complete audit.
Partial audit.
Statutory audit. (Correct answer)

Correct answer: Statutory audit.

A statutory audit is an audit that is legally required by a statute or law, such as the Companies Act, for certain entities like public companies. Its primary purpose is to ensure that the company's financial statements provide a true and fair view of its financial position and performance. This type of audit is mandatory and not optional, distinguishing it from other types of audits.

Question 9: In the Yellow Book (GAGAS), which type of finding must auditors report when they identify non-compliance that is material to a major program?

Material weakness in internal control over compliance (Correct answer)
Audit exception
Reportable condition
Significant deficiency

Correct answer: Material weakness in internal control over compliance

Under GAGAS and Single Audit requirements, non-compliance that is material to a major program requires reporting a material weakness in internal control over compliance.

Question 10: Which concept requires government auditors to communicate significant matters arising during an audit even if not required by the audit's original scope?

Peer review standards
Engagement letter requirements
Audit risk assessment
Reporting of fraud, noncompliance, and abuse (Correct answer)

Correct answer: Reporting of fraud, noncompliance, and abuse

GAGAS requires auditors to report fraud, illegal acts, violations, and abuse discovered during the engagement regardless of scope.

Question 11: Which of the following engagement types provides the LOWEST level of assurance under Government Auditing Standards?

Performance audit
Financial statement audit
Attestation examination
Agreed-upon procedures engagement (Correct answer)

Correct answer: Agreed-upon procedures engagement

Agreed-upon procedures engagements provide no assurance level expressed by the auditor; the auditor only reports findings based on procedures agreed to by specified parties.

Question 12: Under the federal budget process, what happens to unobligated appropriations at the end of the fiscal year for most annual appropriations?

They are automatically carried forward to the next year
They expire and are no longer available for new obligations (Correct answer)
They revert to the Treasury General Fund immediately
They must be returned to OMB for reapportionment

Correct answer: They expire and are no longer available for new obligations

Most annual appropriations expire at the end of the fiscal year, meaning no new obligations can be incurred after that date.

Question 13: Which risk is defined as the probability that a material misstatement exists in a financial statement before considering internal controls?

Inherent risk (Correct answer)
Control risk
Detection risk
Audit risk

Correct answer: Inherent risk

Inherent risk is the susceptibility of an assertion to material misstatement assuming no related internal controls.

Question 14: Which governance structure is most directly responsible for setting a public entity's strategic direction and overseeing management accountability?

Chief Financial Officer
Governing board or legislative body (Correct answer)
External audit firm
Internal audit activity

Correct answer: Governing board or legislative body

The governing board or legislative body holds ultimate authority over strategic direction and holds management accountable in public sector entities.

Question 15: A government auditor reviews payroll records, interviews employees, and analyzes timekeeping systems to determine whether the agency is overpaying for labor. This is primarily an example of:

Investigative audit
Financial audit
Economy and efficiency audit (Correct answer)
Compliance audit

Correct answer: Economy and efficiency audit

Analyzing labor costs and whether the agency is overpaying examines the economy of resource use, a key objective of economy audits.

Question 16: An auditor discovers irregularities suggesting that a public official may have diverted grant funds for personal use. The auditor should:

Ignore the finding if it does not affect the financial statements materially
Document the indicators, notify appropriate officials, and consider referring the matter for investigation (Correct answer)
Immediately suspend the audit and await law enforcement direction
Include the finding in the routine performance audit report without special treatment

Correct answer: Document the indicators, notify appropriate officials, and consider referring the matter for investigation

When auditors detect indications of fraud, they must document indicators, notify management or those charged with governance, and consider referral for investigation.

Question 17: Which of the following is a distinguishing feature of investigative audits compared to other government audit types?

They always result in criminal referrals
They follow performance audit standards exclusively
They are always conducted by external auditors
They are primarily focused on detecting and documenting potential fraud, waste, or abuse (Correct answer)

Correct answer: They are primarily focused on detecting and documenting potential fraud, waste, or abuse

Investigative audits are specifically aimed at detecting, documenting, and reporting suspected fraud, waste, or abuse in government operations.

Question 18: Which of the following auditing procedures would most likely give an auditor the greatest peace of mind regarding the efficacy of a control's operation?

Walk-through.
Reperformance of the control by the auditor. (Correct answer)
Inquiry of entity personnel.
Observation of entity personnel.

Correct answer: Reperformance of the control by the auditor.

Reperformance of a control by the auditor involves the auditor independently executing the control activity to verify its operation. This procedure provides the highest level of assurance regarding the efficacy of a control's operation because the auditor directly observes and verifies the control's effectiveness, rather than relying on inquiries, observations (which are point-in-time), or walk-throughs (which confirm understanding but not necessarily consistent operation).

Question 19: What is a 'major program' in the context of a Single Audit?

All programs listed in the Schedule of Expenditures of Federal Awards
Any federal program that received over $1 million in funding
A federal program selected for compliance testing based on risk assessment criteria in 2 CFR Part 200 (Correct answer)
Programs designated as high-risk by the awarding agency

Correct answer: A federal program selected for compliance testing based on risk assessment criteria in 2 CFR Part 200

Major programs are selected using a risk-based approach under 2 CFR Part 200, considering expenditure size, prior audit findings, and other risk factors.

Question 20: Which internal control activity involves reviewing transaction reports after the fact to catch errors or unauthorized activity?

Detective control (Correct answer)
Directive control
Preventive control
Corrective control

Correct answer: Detective control

Detective controls identify errors, irregularities, or unauthorized transactions after they occur, such as account reconciliations, exception reports, and supervisory reviews.

Question 21: A government audit report concludes that a social services agency's case management system processes 30% fewer cases per staff member than comparable agencies. This finding relates to which performance dimension?

Equity
Economy
Effectiveness
Efficiency (Correct answer)

Correct answer: Efficiency

Efficiency measures the relationship between inputs (staff) and outputs (cases processed); a lower ratio indicates inefficiency.

Question 22: Which document guides cost principles for non-federal entities receiving federal awards?

2 CFR Part 200 (Uniform Guidance) (Correct answer)
OMB Circular A-11
FASAB SFFAS No. 4
OMB Circular A-76

Correct answer: 2 CFR Part 200 (Uniform Guidance)

2 CFR Part 200, the Uniform Administrative Requirements, Cost Principles, and Audit Requirements, governs federal grant management for non-federal entities.

Question 23: In government auditing, what is 'due professional care'?

Completing all audit procedures within the budgeted hours
Applying the diligence, knowledge, and judgment expected of a reasonably prudent auditor in similar circumstances (Correct answer)
Reporting all findings regardless of significance
Using the most expensive audit tools available

Correct answer: Applying the diligence, knowledge, and judgment expected of a reasonably prudent auditor in similar circumstances

Due professional care requires auditors to exercise the care and skill of a reasonably prudent professional, including appropriate planning, supervision, and documentation.

Question 24: The audit, which is not mandated by law but is carried out at the request of owners, is referred to as:

Operational Audit.
Private audit. (Correct answer)
Efficiency audit.
Balance sheet audit.

Correct answer: Private audit.

A private audit is conducted at the request of the owners or management of an entity, rather than being mandated by law. Its purpose is to provide assurance or specific information to the requesting parties, often for internal decision-making or to satisfy specific stakeholder requirements.

Question 25: What is the auditor's responsibility regarding the agency's response to performance audit findings?

The auditor must accept all management responses and revise findings accordingly
The auditor must obtain legal counsel before including agency responses
The auditor is not required to consider management responses
The auditor must include the agency's written comments in the report and evaluate their validity (Correct answer)

Correct answer: The auditor must include the agency's written comments in the report and evaluate their validity

GAGAS requires auditors to include the agency's written comments in the report and to evaluate and address them, noting areas of agreement or disagreement with the agency's position.

Question 26: Which of the following best describes the role of criteria in a performance audit?

Criteria are the audit objectives established by the legislature
Criteria are audit findings that must be reported to management
Criteria are the standards or benchmarks against which auditor evidence is compared to form conclusions (Correct answer)
Criteria are the laws and regulations that determine compliance

Correct answer: Criteria are the standards or benchmarks against which auditor evidence is compared to form conclusions

In performance audits, criteria are the standards, benchmarks, or expectations against which actual conditions are measured.

Question 27: What is 'interperiod equity' in government financial reporting?

The concept that current-year revenues should finance current-year services (Correct answer)
Equal treatment of all fund types in financial statements
Consistent application of accounting policies across periods
Fair distribution of tax burdens among citizens

Correct answer: The concept that current-year revenues should finance current-year services

Interperiod equity means that today's taxpayers pay for today's services rather than deferring costs to future generations.

Question 28: Which body issues the Generally Accepted Government Auditing Standards (GAGAS) used in the United States?

American Institute of CPAs (AICPA)
Institute of Internal Auditors (IIA)
U.S. Government Accountability Office (GAO) (Correct answer)
Office of Management and Budget (OMB)

Correct answer: U.S. Government Accountability Office (GAO)

GAGAS, commonly called the Yellow Book, is issued by the Comptroller General of the United States through the GAO.

Question 29: A city's general fund reports a negative unassigned fund balance. What does this most likely indicate?

The city's total liabilities exceed total assets on a government-wide basis
The city must immediately reduce expenditures by law
The city has overspent its total assets
The city has consumed more resources than it has generated over time in the general fund (Correct answer)

Correct answer: The city has consumed more resources than it has generated over time in the general fund

A negative unassigned fund balance in the general fund indicates cumulative expenditures have exceeded cumulative revenues, suggesting fiscal stress in the operating fund.

Question 30: What is a 'management override of controls,' and why is it a significant fraud risk?

When IT staff bypass password controls for maintenance purposes
When an agency director approves emergency sole-source contracts
When senior management uses their authority to circumvent existing controls, enabling fraud that lower-level employees could not commit (Correct answer)
When auditors waive control testing for low-risk areas

Correct answer: When senior management uses their authority to circumvent existing controls, enabling fraud that lower-level employees could not commit

Management override allows senior officials to bypass controls that exist to prevent fraud, making it difficult to detect because those with override authority also supervise the very controls they bypass.

Question 31: Which of the following statements correctly distinguishes internal from external auditing in a government context?

Internal auditors report exclusively to the legislature, while external auditors report to management
External auditors are independent of the audited entity, while internal auditors are part of the organization they audit (Correct answer)
Internal auditors cannot perform compliance audits, only financial audits
External auditors are prohibited from conducting performance audits under government standards

Correct answer: External auditors are independent of the audited entity, while internal auditors are part of the organization they audit

External auditors maintain independence from the audited entity, while internal auditors operate within the organization and report to management or an audit committee.

Question 32: What is the primary purpose of a government's Comprehensive Annual Financial Report (CAFR), now called Annual Comprehensive Financial Report (ACFR)?

To present the approved operating budget
To provide a complete audited picture of a government's financial position and results (Correct answer)
To summarize federal grant expenditures only
To report on program performance outcomes

Correct answer: To provide a complete audited picture of a government's financial position and results

The ACFR provides a complete, audited financial overview of a state or local government, including financial statements, notes, and statistical data.

Question 33: Which government-wide regulation governs the procurement of goods and services by federal agencies?

OMB Circular A-123
Federal Acquisition Regulation (FAR) (Correct answer)
Government Accountability Standards (Yellow Book)
2 CFR Part 200

Correct answer: Federal Acquisition Regulation (FAR)

The Federal Acquisition Regulation (FAR) is the primary set of rules governing the acquisition process for executive branch federal agencies.

Question 34: A government auditor is evaluating a revenue bond issue. Which factor most distinguishes revenue bonds from general obligation bonds?

Revenue bonds are repaid from specific pledged revenues rather than general tax revenues (Correct answer)
Revenue bonds require voter approval while general obligation bonds do not
Revenue bonds are backed by the full faith and credit and taxing power of the government
Revenue bonds are exempt from federal income tax while general obligation bonds are not

Correct answer: Revenue bonds are repaid from specific pledged revenues rather than general tax revenues

Revenue bonds are secured by and repaid from specific revenue streams (e.g., utility fees, tolls), whereas general obligation bonds pledge the government's full taxing authority.

Question 35: A CGAP candidate is reviewing a government entity's charter. Which element is MOST critical to ensure the internal audit function has appropriate authority?

Unrestricted access to records, personnel, and physical properties (Correct answer)
Requirement to report findings only to line management
Specification of audit software to be used
Authority to sign contracts on behalf of the entity

Correct answer: Unrestricted access to records, personnel, and physical properties

Unrestricted access to all records, personnel, and properties is essential for internal audit to fulfill its mandate without obstruction.

Question 36: What is 'cost allocation' in the context of government financial management?

Transferring budget authority from one agency to another
Distributing shared costs among programs, grants, or cost objectives based on a reasonable methodology (Correct answer)
Reporting total government expenditures by object class
Calculating depreciation on general capital assets

Correct answer: Distributing shared costs among programs, grants, or cost objectives based on a reasonable methodology

Cost allocation assigns shared or indirect costs to programs or grants using a rational, consistent methodology that reflects actual resource consumption.

Question 37: Which act established the framework for congressional oversight of federal programs through regular reporting of performance results?

Chief Financial Officers Act
Government Performance and Results Act (GPRA) of 1993 (Correct answer)
Federal Financial Management Improvement Act
Budget and Accounting Act of 1921

Correct answer: Government Performance and Results Act (GPRA) of 1993

GPRA of 1993 required federal agencies to develop strategic plans, set performance goals, and report annually on results, creating a results-oriented management framework.

Question 38: What is 'apportionment' in the U.S. federal budget process?

A rescission of unspent appropriations
OMB's distribution of appropriated funds to agencies over time (Correct answer)
Congressional approval of a full-year budget
An agency's internal allocation of funds to programs

Correct answer: OMB's distribution of appropriated funds to agencies over time

Apportionment is the process by which OMB distributes appropriated amounts to agencies, usually by quarter, to prevent early over-spending.

Question 39: The COSO Internal Control—Integrated Framework's monitoring section is important. Which of the following statements regarding how the business can implement the monitoring component is false?

The independent auditor can serve as part of the entity’s control environment and continuous monitoring. (Correct answer)
Monitoring can be an ongoing process.
Monitoring can be conducted as a separate evaluation.
Monitoring and other audit work conducted by internal audit staff can reduce external audit costs.

Correct answer: The independent auditor can serve as part of the entity’s control environment and continuous monitoring.

The independent (external) auditor provides an objective opinion on the financial statements and is external to the entity's internal control system. They cannot be part of the entity's control environment or continuous monitoring activities, as this would compromise their independence. Monitoring is an internal management responsibility, which internal auditors can support.

Question 40: The first auditor of a corporation is chosen by the board of directors.

within one month of the commencement of the business of the company.
within one month of completion of capital subscription state of the company
within one month of incorporation of the company. (Correct answer)
within one month of the promotion of the company.

Correct answer: within one month of incorporation of the company.

According to company law in many jurisdictions, including India, the first auditor of a company is appointed by the Board of Directors within a specific timeframe after the company's incorporation. This ensures that the company has an auditor in place to oversee its financial records from its initial stages.

Question 41: Which of the following doesn't qualify as an audit?

None of these. (Correct answer)
Continuous, final, Interim, Cash, Cost and Management audit.
Government and continuous audit.
Statutory and private audit.

Correct answer: None of these.

All the options listed (Government, continuous, final, interim, cash, cost, management, statutory, and private audits) are recognized and distinct types or classifications of audits. Therefore, none of the provided choices represent something that does not qualify as an audit.

Question 42: Under GAGAS, what is required when an auditor identifies a violation of provisions of contracts or grant agreements?

Immediately notify law enforcement
Notify the awarding federal agency directly before completing fieldwork
Withdraw from the engagement
Report the violation in the audit report unless clearly inconsequential (Correct answer)

Correct answer: Report the violation in the audit report unless clearly inconsequential

GAGAS requires auditors to report violations of contract or grant provisions in the audit report unless the violations are clearly inconsequential.

Question 43: Under GASB standards, which measurement focus is used for governmental funds?

Current financial resources measurement focus (Correct answer)
Total resources measurement focus
Economic resources measurement focus
Cash flow measurement focus

Correct answer: Current financial resources measurement focus

Governmental funds use the current financial resources measurement focus, reporting only current assets and current liabilities and their effect on fund balance.

Question 44: Under the Federal Managers' Financial Integrity Act (FMFIA), what are agency heads required to do annually?

Certify that no Antideficiency Act violations occurred
File a report with Congress listing all identified fraud cases
Provide a statement of assurance on the effectiveness of internal controls and financial systems (Correct answer)
Submit to a GAO audit of all agency programs

Correct answer: Provide a statement of assurance on the effectiveness of internal controls and financial systems

FMFIA requires agency heads to provide an annual assurance statement to the President and Congress on the adequacy of internal controls and compliance with financial system requirements.

Question 45: Government audit is carried out by the following department, which is maintained by the Indian government:

Accounts and Audit Department. (Correct answer)
GST and Audit Department.
Cost and Audit Department.
Tax and Audit Department.

Correct answer: Accounts and Audit Department.

In the Indian context, the Accounts and Audit Department, headed by the Comptroller and Auditor General (CAG), is the constitutional body responsible for auditing government agencies and offices. This department ensures public accountability of government expenditure and financial operations.

Question 46: Which concept best explains why a performance audit of a job training program might examine both the number of graduates placed in jobs and the quality of those jobs?

Compliance requires verifying participant eligibility
Economy requires tracking costs per participant
Efficiency requires benchmarking against similar programs
Effectiveness requires measuring both outputs and outcomes (Correct answer)

Correct answer: Effectiveness requires measuring both outputs and outcomes

Effectiveness audits measure whether programs achieve intended outcomes, including quality of results, not just numerical counts.

Question 47: Which of the following better ensures that shareholders are aware of corporate policies and financial results?

hiring a prestigious independent public accounting firm
conducting well-organized shareholder meetings and conference calls with the investment community (Correct answer)
ensuring cultural diversity and public speaking eloquence of the senior management team
self-evaluation and training for members of the board of directors

Correct answer: conducting well-organized shareholder meetings and conference calls with the investment community

Conducting well-organized shareholder meetings and conference calls with the investment community better ensures that shareholders are aware of corporate policies and financial results. These direct communication channels foster transparency, allow for questions and answers, and provide a structured way for the company to disseminate important information to its investors and the public.

Question 48: Which of the following is true regarding the value of vouching?

All the above (Correct answer)
It helps to verify whether entries are passed as per acceptable accounting principles.
Ensures all items are disclosed in the financial statement as per Schedule VI provisions
Helps in detection and prevention of errors & frauds

Correct answer: All the above

Vouching is a fundamental audit procedure that offers multiple benefits. It helps in detecting and preventing errors and frauds by verifying transactions against supporting documents. It also ensures that entries comply with acceptable accounting principles and that all relevant items are properly disclosed in financial statements according to regulatory provisions, making all the given options true.

Question 49: Which accounting basis does the U.S. federal government primarily use for its consolidated financial statements?

Full accrual basis (Correct answer)
Modified accrual basis
Cash basis
Budgetary basis

Correct answer: Full accrual basis

The U.S. federal government uses full accrual accounting for its consolidated financial statements as required by federal accounting standards.

Question 50: What is the primary purpose of a government's risk management fund (often structured as an internal service fund)?

To accumulate resources to pay claims and fund self-insurance activities (Correct answer)
To record contingent liabilities excluded from the general fund
To invest government surplus cash to maximize returns
To account for federal risk-sharing grant revenues

Correct answer: To accumulate resources to pay claims and fund self-insurance activities

A risk management internal service fund pools resources from participating departments to self-insure against losses and pay claims, spreading risk across the organization.

Question 51: GAGAS requires that performance audit reports include which of the following when reporting findings?

Criteria, condition, cause, and effect for each significant finding (Correct answer)
A complete listing of all audit procedures performed
The personal opinions of the audit team members
Only positive findings to avoid damaging the agency's reputation

Correct answer: Criteria, condition, cause, and effect for each significant finding

GAGAS requires that significant findings be reported with sufficient detail on criteria, condition, cause, and effect so that users can understand the nature and significance of the finding.

Question 52: In government auditing, 'materiality' for a compliance audit is typically determined based on:

Net income thresholds
Quantitative and qualitative factors related to the specific law or regulation (Correct answer)
The auditor's prior year materiality level
A fixed dollar amount set by the legislature

Correct answer: Quantitative and qualitative factors related to the specific law or regulation

Compliance audit materiality considers both quantitative thresholds and qualitative factors such as the sensitivity of the legal requirement.

Question 53: What is 'pass-through entity' responsibility under federal grant management?

The pass-through entity must monitor sub-recipients and ensure federal requirements flow down (Correct answer)
The pass-through entity assumes all liability for sub-recipient fraud
The pass-through entity must perform audits of sub-recipients
The pass-through entity must approve all sub-recipient expenditures in advance

Correct answer: The pass-through entity must monitor sub-recipients and ensure federal requirements flow down

Pass-through entities are responsible for monitoring sub-recipients, ensuring that federal compliance requirements are passed down, and reviewing sub-recipient audit findings.

Question 54: In a performance audit, the 'condition' element of a finding refers to:

The applicable law or regulation governing the program
The situation as it actually exists based on audit evidence (Correct answer)
The auditor's recommendation for corrective action
The root cause of an identified problem

Correct answer: The situation as it actually exists based on audit evidence

The condition is what the auditor found — the actual state of the program or activity as supported by evidence collected during the audit.

Question 55: In the NIST Cybersecurity Framework (CSF), which function focuses on activities to identify the occurrence of a cybersecurity event?

Protect
Identify
Respond
Detect (Correct answer)

Correct answer: Detect

The Detect function encompasses activities to identify cybersecurity events in a timely manner, including continuous monitoring and anomaly detection.

Question 56: When audit is carried out throughout the year at regular or sporadic intervals, it is known as:

Internal Audit.
Continuous Audit. (Correct answer)
Interim Audit.
Statutory Audit.

Correct answer: Continuous Audit.

A continuous audit involves the auditor examining records and transactions throughout the financial year, either at regular intervals or sporadically. This approach allows for timely detection of errors and irregularities, provides ongoing assurance, and can help expedite the year-end audit process by spreading the workload.

Question 57: When an auditor uses the work of a specialist in a government audit, what is the auditor's responsibility?

The auditor must evaluate the specialist's qualifications, objectivity, and the reasonableness of their work (Correct answer)
The specialist's report replaces the auditor's report for technical matters
The specialist assumes full responsibility for any errors in their area
The auditor need not document the specialist's work separately

Correct answer: The auditor must evaluate the specialist's qualifications, objectivity, and the reasonableness of their work

The auditor remains responsible for the audit conclusions and must evaluate whether the specialist is qualified, independent, and whether their findings are reasonable and consistent with other evidence.

Question 58: The following organizations would benefit from continuous auditing:

All of the above. (Correct answer)
Banks
Audited statements are required immediately after the close of financial year.
Business is very large and large numbers of transactions are needed to be checked.

Correct answer: All of the above.

Continuous auditing is beneficial for organizations with a high volume of transactions, such as banks, where real-time monitoring is advantageous. It is also crucial when audited statements are needed immediately after the financial year-end, as it helps spread the audit work throughout the year, preventing last-minute rushes and facilitating timely reporting.

Question 59: An auditor is evaluating a government job-training program. The audit objective is to determine whether participants obtained and retained employment after completing the program. This objective primarily relates to which performance dimension?

Economy
Compliance
Efficiency
Effectiveness (Correct answer)

Correct answer: Effectiveness

Effectiveness measures whether a program achieves its intended outcomes; obtaining and retaining employment is the intended outcome of a job-training program.

Question 60: Which concept in government compliance auditing refers to the totality of laws, regulations, and contracts that an audited entity must follow?

Compliance matrix
Regulatory framework
Compliance universe
Legal and regulatory requirements (Correct answer)

Correct answer: Legal and regulatory requirements

In government auditing, 'legal and regulatory requirements' encompasses the full set of laws, regulations, grant terms, and contracts binding the entity.

Question 61: A state auditor conducts an engagement to verify that a contractor accurately reported costs reimbursed under a cost-plus contract with the government. This is best classified as:

Contract audit (Correct answer)
Attestation engagement
Performance audit
Program results audit

Correct answer: Contract audit

A contract audit examines contractor costs and compliance with contract terms, especially under cost-reimbursement arrangements.

Question 62: A government entity receives a federal grant. Which body's standards govern the audit of federal grant expenditures?

The Institute of Internal Auditors (IIA)
The Office of Management and Budget's Uniform Guidance (2 CFR Part 200) (Correct answer)
The Financial Accounting Standards Board (FASB)
The Public Company Accounting Oversight Board (PCAOB)

Correct answer: The Office of Management and Budget's Uniform Guidance (2 CFR Part 200)

2 CFR Part 200 (Uniform Guidance) establishes audit requirements for entities expending federal awards.

Question 63: What does 'materiality' mean in the context of a government financial statement audit?

The magnitude of a misstatement or omission that could influence decisions of users of the financial statements (Correct answer)
The total value of federal grants subject to single audit
The importance of a finding to legislative decision-makers
Any dollar amount above the entity's threshold for capitalizing assets

Correct answer: The magnitude of a misstatement or omission that could influence decisions of users of the financial statements

Materiality is the threshold at which a misstatement or omission could reasonably be expected to influence the decisions of financial statement users.

Question 64: Internal auditing's goal is to

To detect frauds and errors (Correct answer)
To prevent frauds and errors
Both (a) and (b)
Both (a) and (b)

Correct answer: To detect frauds and errors

Internal auditing's primary goal is to evaluate and improve the effectiveness of risk management, control, and governance processes. While it indirectly contributes to prevention by recommending improvements, its direct function involves systematically examining operations to detect existing frauds and errors. This detection allows management to implement corrective actions and strengthen controls.

Question 65: Which condition would cause a government auditor to issue a 'disclaimer of opinion' on financial statements?

Minor misstatements in footnote disclosures
Disagreement with management on a single accounting estimate
Detection of a material but isolated misstatement
Pervasive scope limitations that prevent gathering sufficient appropriate evidence (Correct answer)

Correct answer: Pervasive scope limitations that prevent gathering sufficient appropriate evidence

A disclaimer of opinion is issued when scope limitations are so pervasive that the auditor cannot obtain sufficient evidence to form any opinion.

Question 66: The main factor an auditor looks at when evaluating an entity's internal controls is whether they

Reflect management’s philosophy and operating style.
Relate to the control environment.
Prevent management override.
Affect the financial statement assertions. (Correct answer)

Correct answer: Affect the financial statement assertions.

When evaluating internal controls, an auditor's main concern is how these controls relate to the financial statement assertions (e.g., existence, completeness, valuation, rights and obligations). Effective controls reduce the risk of material misstatements related to these assertions, thereby impacting the auditor's assessment of control risk and the scope of substantive testing.

Question 67: The auditor must do all of the activities listed below with the exception of:

Conclude on the achieved level of control risk.
Identify all general IT controls. (Correct answer)
Perform tests of controls.
Identify specific controls that will be relied upon.

Correct answer: Identify all general IT controls.

While auditors consider IT controls, their objective is not to identify *all* general IT controls within an entity. Instead, the auditor focuses on identifying specific controls, including relevant IT controls, that are necessary to address risks of material misstatement and upon which they intend to rely to reduce substantive testing. Identifying every single general IT control would be an overly exhaustive and unnecessary task for audit purposes.

Question 68: Which GAGAS principle requires auditors to communicate all significant deficiencies and material weaknesses identified during the audit?

Reporting requirements for internal control findings (Correct answer)
Independence standards
Professional skepticism
Continuing professional education

Correct answer: Reporting requirements for internal control findings

GAGAS reporting requirements mandate that auditors communicate significant deficiencies and material weaknesses in internal control identified during the audit.

Question 69: Under GAGAS, continuing professional education (CPE) requirements for government auditors include at least how many hours every two years?

100 hours with 50 in financial auditing
60 hours total with 20 in ethics
40 hours total with no subject restriction
80 hours, with at least 24 in government auditing subjects (Correct answer)

Correct answer: 80 hours, with at least 24 in government auditing subjects

GAGAS requires 80 CPE hours per two-year period, with at least 24 hours directly related to the government environment or government auditing.

Question 70: When planning the scope of a performance audit, which of the following factors is most important for auditors to consider?

The preference of the agency's public affairs office
The risk and significance of program areas in relation to audit objectives (Correct answer)
The personal interests of audit team members in the subject area
The time and budget available for the audit engagement

Correct answer: The risk and significance of program areas in relation to audit objectives

Audit scope should be driven by risk and significance — auditors should focus resources on the areas most likely to yield meaningful findings relative to the audit objectives.

Question 71: Which governance body characteristic MOST supports audit committee effectiveness in a public sector entity?

Majority of members are current employees of the entity
The committee meets annually to review the audit plan
Members are appointed by the Chief Executive Officer
Members have financial expertise and serve independently from management (Correct answer)

Correct answer: Members have financial expertise and serve independently from management

An effective audit committee requires members with financial expertise who are independent from management to provide objective oversight.

Question 72: A CGAP candidate reviews a county's control environment. Which factor is LEAST indicative of a strong control environment?

Reliance on detective controls only, with no preventive controls (Correct answer)
A formal code of conduct with enforcement mechanisms
Tone at the top emphasizing ethical conduct
Clearly defined organizational structures and reporting lines

Correct answer: Reliance on detective controls only, with no preventive controls

Relying exclusively on detective controls without preventive controls indicates a weak control environment because problems are only caught after they occur.

Question 73: A government entity's risk assessment process should update identified risks when:

Only at the start of each fiscal year
Whenever significant changes in the environment, operations, or personnel occur (Correct answer)
Only when a significant budget increase occurs
Only after an external audit is completed

Correct answer: Whenever significant changes in the environment, operations, or personnel occur

Risk assessments must be dynamic and updated whenever significant organizational or environmental changes occur that could affect the control environment.

Question 74: When generally accepted accounting rules are not adhered to when documenting any transaction in the books of accounts, errors may result.

Errors of duplication
Compensating errors
Errors of principle (Correct answer)
Clerical errors

Correct answer: Errors of principle

Errors of principle occur when a transaction is recorded in violation of generally accepted accounting principles (GAAP), even if the debit and credit amounts are numerically correct. For example, incorrectly classifying a capital expenditure as a revenue expenditure is an error of principle. These errors lead to misrepresentation of financial performance and position.

Question 75: Which of the following does not apply to the vouching process for cash sales:

Examine balance sheet (Correct answer)
Examine cash memos
Examine cash book
Examine the counterfoil of pay in slops

Correct answer: Examine balance sheet

When vouching cash sales, an auditor focuses on documents directly related to the transaction, such as cash memos, the cash book, and counterfoils of pay-in slips. The balance sheet, however, is a summary financial statement at a specific point in time and does not provide the detailed transactional evidence needed to verify individual cash sales. Therefore, examining the balance sheet is not part of the vouching process for cash sales.

Question 76: The concept of 'materiality' in government auditing differs from private sector auditing primarily because:

Government auditors never use quantitative thresholds
Only financial statement users define materiality in government audits
Government audit materiality is always set at 5% of total expenditures
Materiality may include qualitative factors such as sensitivity, visibility, or public interest (Correct answer)

Correct answer: Materiality may include qualitative factors such as sensitivity, visibility, or public interest

In government auditing, materiality encompasses qualitative factors like political sensitivity and public interest, not just dollar thresholds.

Question 77: All of the following, with the exception of, are aimed to help the organization meet its goals through internal controls:

Safeguarding of assets.
Reduction of debt financing costs. (Correct answer)
Reliability of financial reporting.
Compliance with laws and regulations.

Correct answer: Reduction of debt financing costs.

Internal controls are designed to help an organization achieve its objectives related to the reliability of financial reporting, the effectiveness and efficiency of operations (including safeguarding assets), and compliance with applicable laws and regulations. While strong internal controls can indirectly influence a company's creditworthiness, their direct aim is not the reduction of debt financing costs.

Question 78: What is the primary purpose of the Inspector General Act of 1978?

To establish the Office of Management and Budget
To create the GAO as the congressional audit arm
To require annual financial statement audits of all agencies
To establish independent oversight bodies within federal agencies to detect and prevent fraud, waste, and abuse (Correct answer)

Correct answer: To establish independent oversight bodies within federal agencies to detect and prevent fraud, waste, and abuse

The Inspector General Act created statutory Offices of Inspector General to conduct independent audits, investigations, and inspections within federal agencies.

Question 79: Which IIA Standard requires internal audit to evaluate the effectiveness of the organization's risk management processes?

Standard 2010 — Planning
Standard 2120 — Risk Management (Correct answer)
Standard 2410 — Criteria for Communicating
Standard 2200 — Engagement Planning

Correct answer: Standard 2120 — Risk Management

IIA Standard 2120 specifically requires internal audit to evaluate the effectiveness and contribution of risk management processes.

Question 80: Which type of government audit evaluates whether a program is achieving its intended results?

Attestation engagement
Compliance audit
Financial audit
Performance audit (Correct answer)

Correct answer: Performance audit

Performance audits assess effectiveness by examining whether programs are achieving stated objectives and desired outcomes.

Question 81: In a government financial audit, 'those charged with governance' typically refers to:

The entity's accounting and finance staff
The board, audit committee, or legislative oversight body (Correct answer)
Program managers responsible for grant funds
External auditors and their supervisors

Correct answer: The board, audit committee, or legislative oversight body

Those charged with governance include the body responsible for oversight of the entity's strategic direction, financial reporting, and accountability.

Question 82: What is 'procurement fraud' in the government context?

Illegal conduct in the acquisition process such as bid rigging, kickbacks, or conflicts of interest (Correct answer)
Using sole-source contracts without documented justification
Overestimating project costs in a budget request
Paying invoices before goods are received

Correct answer: Illegal conduct in the acquisition process such as bid rigging, kickbacks, or conflicts of interest

Procurement fraud includes bid rigging, kickbacks, conflicts of interest, false certifications, and collusion that corrupts the integrity of competitive contracting.

Question 83: The auditor should investigate any sales returns.

Credit notes and delivery challans.
Credit notes and goods received notes. (Correct answer)
Purchase invoices and goods received notes.
Whether cash has been repaid to the client

Correct answer: Credit notes and goods received notes.

When investigating sales returns, an auditor should examine credit notes, which formally acknowledge the return and reduce the customer's outstanding balance. Additionally, goods received notes confirm that the returned items were physically received back into the company's inventory. These two documents provide strong evidence for the legitimacy and proper recording of sales returns.

Question 84: When an auditee provides a written response to a draft audit report, the auditor's responsibility is to:

Ignore responses that dispute factual findings
Accept all explanations and remove contested findings
Include the response in the final report and evaluate whether it warrants changes to findings (Correct answer)
Submit the response to the legislature without comment

Correct answer: Include the response in the final report and evaluate whether it warrants changes to findings

GAGAS requires auditors to include auditee responses in final reports and assess whether responses warrant revisions to findings.

Question 85: What is a 'compensating control'?

A financial control that calculates employee compensation
A detective control that compensates for preventive control failures
A control that rewards employees for good performance
A secondary control that mitigates risk when a primary control cannot be implemented (Correct answer)

Correct answer: A secondary control that mitigates risk when a primary control cannot be implemented

A compensating control is an alternative control that reduces the risk of error or fraud when the ideal primary control (such as segregation of duties) is impractical.

Question 86: Under the GAO Green Book (Standards for Internal Control in the Federal Government), which principle requires management to define objectives with sufficient clarity to identify associated risks?

CC2.01 – Use Quality Information
CC3.01 – Specify Suitable Objectives (Correct answer)
CC1.01 – Demonstrate Commitment to Integrity
CC4.01 – Conduct Ongoing Evaluations

Correct answer: CC3.01 – Specify Suitable Objectives

Green Book principle CC3.01 requires management to specify objectives clearly so that risks to achieving them can be identified and assessed.

Question 87: The 'three lines of defense' model in government internal control assigns internal audit to which line?

Second line — risk management and compliance functions
First line — operational management
Third line — independent assurance (Correct answer)
Fourth line — external oversight

Correct answer: Third line — independent assurance

Internal audit serves as the third line of defense by providing independent assurance over the effectiveness of governance, risk management, and controls.

Question 88: The audit that a statute makes required is known as __________ .

Continuous audit.
Statutory audit. (Correct answer)
Partial audit.
Complete audit.

Correct answer: Statutory audit.

A statutory audit is an audit that is mandated by a specific law or statute, such as company law or banking regulations. Its purpose is to ensure that the financial statements comply with legal requirements and present a true and fair view, thereby protecting the interests of various stakeholders.

Question 89: Which federal law requires annual single audits for non-federal entities expending $750,000 or more in federal awards?

Single Audit Act as amended, implemented via 2 CFR Part 200 (Correct answer)
Federal Acquisition Regulation
Government Management Reform Act
Inspector General Act

Correct answer: Single Audit Act as amended, implemented via 2 CFR Part 200

The Single Audit Act, as amended and implemented through 2 CFR Part 200, requires a single organization-wide audit when federal expenditures meet the threshold.

Question 90: Which of the following best describes an encumbrance in governmental accounting?

A fund balance restriction required by law
A reservation of appropriations for anticipated purchase commitments (Correct answer)
An accrued liability for services already received
A lien placed on government property by a creditor

Correct answer: A reservation of appropriations for anticipated purchase commitments

Encumbrances represent commitments related to unperformed contracts, reserving appropriation authority so funds are not overspent before goods or services are received.

Question 91: Which fund type is used to account for resources that are legally restricted to expenditure for specified purposes other than debt service or capital projects?

Enterprise fund
Permanent fund
Special revenue fund (Correct answer)
Agency fund

Correct answer: Special revenue fund

Special revenue funds account for specific revenue sources that are restricted or committed to expenditure for specified purposes other than debt service or capital projects.

Question 92: When auditing government programs, the concept of 'accountability' primarily refers to:

Matching budget amounts to actual expenditures
Filing timely reports with the Office of Management and Budget
Demonstrating that public resources are used legally, efficiently, and for intended purposes (Correct answer)
Ensuring all transactions are recorded in a general ledger

Correct answer: Demonstrating that public resources are used legally, efficiently, and for intended purposes

Government accountability means demonstrating that public funds and authority are used legally, efficiently, effectively, and for their intended purposes.

Question 93: When auditing a government entity, the auditor discovers that the entity failed to disclose a contingent liability for pending litigation. This omission would most likely affect the:

Neither, as contingencies are not auditable
Financial statement opinion (Correct answer)
Compliance opinion only
Opinion on internal controls only

Correct answer: Financial statement opinion

Omission of a material contingent liability is a financial statement misstatement that affects the fair presentation opinion.

Question 94: When auditing a government entity's ERM program, which finding would MOST indicate a mature, integrated risk management culture?

The risk register is maintained solely in spreadsheet format by one risk officer
Risk information is embedded in strategic planning, budgeting, and performance reporting processes (Correct answer)
Risk assessments are performed annually by the internal audit department only
Risk appetite is defined verbally by the CFO without board documentation

Correct answer: Risk information is embedded in strategic planning, budgeting, and performance reporting processes

A mature ERM culture integrates risk information across strategic planning, budgeting, and performance management rather than treating it as a separate compliance exercise.

Question 95: In risk management, 'risk velocity' refers to:

The financial magnitude of a risk event
The number of risks identified per audit cycle
The frequency with which a risk event occurs
The speed at which a risk can impact the organization once triggered (Correct answer)

Correct answer: The speed at which a risk can impact the organization once triggered

Risk velocity measures how quickly a risk could impact the organization after it materializes, influencing how much response time management has.

Question 96: A government auditor finds that a department head verbally approved $300,000 in expenditures without obtaining a purchase order. This primarily represents a failure of which control?

Physical safeguarding of cash and marketable securities
The pre-expenditure authorization and encumbrance process (Correct answer)
Reconciliation of subsidiary ledgers to control accounts
Segregation of duties between payment and receiving functions

Correct answer: The pre-expenditure authorization and encumbrance process

Pre-expenditure authorization—requiring a purchase order before commitments are made—is a critical control that ensures spending is approved and encumbrances are recorded before obligations are incurred.

Question 97: The auditor is required to provide a report on the accounts they examined.

to the shareholders. (Correct answer)
to the court.
to the general public.
to the bank.

Correct answer: to the shareholders.

The auditor is appointed by the shareholders (or in some cases, the Board of Directors, subject to shareholder approval) to examine the company's financial statements on their behalf. Therefore, the auditor's report, which expresses an opinion on the truth and fairness of these accounts, is primarily addressed and submitted to the shareholders. This allows the owners to assess the financial health and management of their company.

Question 98: What is a 'finding' in a government performance audit report?

Any observation the auditor makes about program operations
A structured presentation of criteria, condition, cause, and effect identifying a deficiency or noteworthy achievement (Correct answer)
A disclosure of auditor qualifications
A summary of recommendations for management action

Correct answer: A structured presentation of criteria, condition, cause, and effect identifying a deficiency or noteworthy achievement

A finding in a performance audit presents the criteria (what should be), condition (what is), cause (why), and effect (so what) to explain the significance of an issue.

Question 99: Under GASB standards, which basis of accounting is used for governmental funds?

Cash basis
Full accrual basis
Modified accrual basis (Correct answer)
Budgetary basis

Correct answer: Modified accrual basis

Governmental funds use the modified accrual basis, recognizing revenues when measurable and available, and expenditures when a fund liability is incurred.

Question 100: A legislative auditor examines whether a corrections department's recidivism reduction program is cost-effective compared to similar programs in other states. This audit addresses which objective?

Compliance with federal sentencing guidelines
Effectiveness of program outcomes relative to costs (Correct answer)
Economy of resource acquisition
Efficiency of program delivery

Correct answer: Effectiveness of program outcomes relative to costs

Benchmarking outcomes relative to costs across programs is an effectiveness evaluation, assessing whether the program achieves results worth the investment.

Question 101: Under the Hatch Act, what primary restriction applies to most federal employees?

They may not hold elected office at any level
They may not engage in partisan political activity while on duty or in federal facilities (Correct answer)
They may not contribute to political campaigns
They may not accept outside employment

Correct answer: They may not engage in partisan political activity while on duty or in federal facilities

The Hatch Act restricts federal employees from engaging in partisan political activity while on duty, in a federal building, or using government resources.

Question 102: Which of the following BEST describes 'performance auditing' in the public sector?

Verifying compliance with procurement regulations exclusively
Reviewing payroll records for mathematical accuracy
Evaluating economy, efficiency, and effectiveness of government programs (Correct answer)
Examining only financial transactions for accuracy

Correct answer: Evaluating economy, efficiency, and effectiveness of government programs

Performance auditing (value-for-money auditing) examines whether government programs achieve their intended outcomes economically, efficiently, and effectively.

Question 103: What is the purpose of a 'risk assessment' component in an internal control framework?

To identify which employees have the highest fraud risk profiles
To determine the appropriate level of insurance coverage for the agency
To assess the risk of external audit findings becoming public
To identify and analyze risks that could prevent the entity from achieving its objectives, informing how controls should be designed (Correct answer)

Correct answer: To identify and analyze risks that could prevent the entity from achieving its objectives, informing how controls should be designed

Risk assessment involves identifying and analyzing relevant risks to achieving objectives so that management can design appropriate controls to address those risks.

Question 104: In the fraud triangle, which element refers to the justification a fraudster uses to rationalize their behavior?

Rationalization (Correct answer)
Pressure
Opportunity
Incentive

Correct answer: Rationalization

Rationalization is the self-justification fraudsters use to make dishonest behavior seem acceptable to themselves, such as 'I'll pay it back' or 'the government wastes money anyway.'

Question 105: Which type of audit evidence is generally considered MOST reliable for a government auditor?

Evidence obtained directly by the auditor from independent external sources (Correct answer)
Photocopies of original documents provided by the auditee
Oral representations from management
Internal memos created by program staff

Correct answer: Evidence obtained directly by the auditor from independent external sources

Evidence obtained directly from independent external sources is most reliable because it is uninfluenced by the auditee and carries the highest assurance.

Question 106: What does 'prompt payment' legislation require of federal agencies?

Agencies must pay vendors by a specified due date or pay interest on late payments (Correct answer)
Agencies must process grant reimbursements within 30 days
Agencies must approve invoices within 5 business days
Agencies must pay employee salaries before the 15th of each month

Correct answer: Agencies must pay vendors by a specified due date or pay interest on late payments

The Prompt Payment Act requires federal agencies to pay invoices by the due date or pay interest penalties to vendors for late payment.

Question 107: Which control helps prevent duplicate payments in a government accounts payable process?

Rotating the accounts payable clerk annually
Matching invoice number, vendor ID, and dollar amount against prior payments before processing (Correct answer)
Using a single checking account for all disbursements
Requiring all vendors to submit invoices electronically

Correct answer: Matching invoice number, vendor ID, and dollar amount against prior payments before processing

Checking invoice details against prior payment records before processing is a preventive control that flags potential duplicates before funds are disbursed.

Question 108: An auditor may be held liable for _______ .

Official
Civil and Criminal. (Correct answer)
Civil
Criminal

Correct answer: Civil and Criminal.

An auditor can be held liable for both civil and criminal offenses. Civil liability arises from negligence, where the auditor fails to exercise due care and skill, leading to financial loss for stakeholders. Criminal liability can arise in cases of fraud, collusion, or knowingly signing off on false financial statements, which can result in fines or imprisonment.

Question 109: In a big corporation, who is ultimately in charge of the business operations?

stakeholders
board of directors (Correct answer)
external auditors
shareholders

Correct answer: board of directors

In a large corporation, the board of directors holds the ultimate responsibility for overseeing the company's management and strategic direction. While management handles daily operations, the board is elected by shareholders to ensure the company is run in their best interests and to provide overall governance and accountability.

Question 110: When assessing program efficiency in a performance audit, an auditor would most likely examine:

The ratio of program outputs produced per unit of resource consumed (Correct answer)
The qualifications and independence of program management
Whether the program's financial statements are free from material misstatement
Whether program funds were spent in compliance with appropriations laws

Correct answer: The ratio of program outputs produced per unit of resource consumed

Efficiency measures how well a program converts inputs (resources) into outputs, so auditors examine the cost per unit of service delivered or the volume of services provided relative to resources used.

Question 111: What is the role of a 'whistleblower protection' program in government fraud prevention?

To give auditors direct access to confidential employee communications
To guarantee promotions for employees who report fraud
To encourage employees to report suspected fraud by protecting them from retaliation (Correct answer)
To require mandatory reporting of all government expenditures

Correct answer: To encourage employees to report suspected fraud by protecting them from retaliation

Whistleblower protection programs encourage reporting of fraud, waste, and abuse by shielding employees from demotion, termination, harassment, or other retaliation.

Question 112: A state auditor reviewing procurement controls notes that purchase orders are approved by the same individual who receives goods. Which control principle is violated?

Dual authorization
Separation of duties (Correct answer)
Physical safeguarding
Management override prevention

Correct answer: Separation of duties

Separation of duties requires that incompatible functions—such as authorization and custody—be performed by different individuals to prevent and detect errors and fraud.

Question 113: Which of the following claims about the internal control documents by the auditor for the entity is true?

No documentation is necessary to satisfy auditing standards, however, oral inquiry is required at minimum.
Internal control questionnaires are specifically tailored to meet the needs of each individual entity.
Documentation must include narrative memorandums.
The auditor’s assessment of the level of control risk can be documented using a structured working paper, an internal control questionnaire or a memorandum. (Correct answer)

Correct answer: The auditor’s assessment of the level of control risk can be documented using a structured working paper, an internal control questionnaire or a memorandum.

Auditing standards require auditors to document their understanding and assessment of internal controls. The method for documenting the auditor's assessment of control risk is flexible and can be achieved through various means, including structured working papers, internal control questionnaires, or narrative memorandums. This allows auditors to choose the most efficient and effective documentation method for a given engagement.

Question 114: One of the audit methods used to verify the newly established company's share capital issue is .

the memorandum of association and articles of association. (Correct answer)
none of the above.
the share transfer register.
the issue of debenture.

Correct answer: the memorandum of association and articles of association.

When auditing the share capital issue of a newly established company, the auditor must refer to the Memorandum of Association and Articles of Association. These foundational documents define the company's authorized share capital, the classes of shares it can issue, and the rules and procedures for their issuance. They provide the legal framework against which the actual share issue is verified.

Question 115: Under the Single Audit Act, a 'major program' determination is significant because:

Major programs receive no federal funding oversight
Major programs must be audited in detail for compliance with federal requirements (Correct answer)
Major programs require a separate audit firm from the financial audit
Major programs are exempt from the schedule of expenditures of federal awards

Correct answer: Major programs must be audited in detail for compliance with federal requirements

The Single Audit Act requires detailed compliance auditing of major federal programs to ensure grant funds are used in accordance with applicable requirements.

Question 116: Which of the following best represents the concept of 'materiality' in a government financial audit context?

Amounts that exceed the single audit threshold
The magnitude of an omission or misstatement that could influence the judgment of a reasonable user of the financial statements (Correct answer)
Any amount exceeding 5% of total expenditures
Errors that management has deemed significant

Correct answer: The magnitude of an omission or misstatement that could influence the judgment of a reasonable user of the financial statements

Materiality is a judgment about the significance of information to reasonable users' decision-making, not a fixed percentage.

Question 117: The 'efficiency' component of a government performance audit measures:

Whether the entity complied with applicable laws
Whether program goals have been achieved
The cost per unit of output produced (Correct answer)
The accuracy of financial records

Correct answer: The cost per unit of output produced

Efficiency measures the relationship between outputs produced and resources consumed, often expressed as cost per unit of output.

Question 118: A government auditor's 'professional skepticism' is BEST demonstrated by:

Refusing to accept any oral evidence during fieldwork
Assuming all management representations are false
Critically assessing audit evidence without accepting it at face value, regardless of past experience (Correct answer)
Conducting surprise audits without notifying the auditee

Correct answer: Critically assessing audit evidence without accepting it at face value, regardless of past experience

Professional skepticism means maintaining a questioning mind and critically evaluating evidence, neither assuming honesty nor dishonesty by default.

Question 119: The Sarbanes-Oxley Act (SOX) Section 404 requirement for management to assess internal controls over financial reporting most directly influenced public sector auditing by:

Requiring government entities to register with the SEC
Eliminating the need for government audit committees
Raising expectations for internal control documentation and testing in government entities (Correct answer)
Mandating rotation of all government auditors every five years

Correct answer: Raising expectations for internal control documentation and testing in government entities

SOX's rigorous internal control assessment standards raised the bar for documentation and testing expectations in both private and public sector contexts.

Question 120: Which NIST SP 800-39 tier addresses risk at the mission/business process level in a government organization?

Tier 3 – Information System
Tier 4 – Operations
Tier 1 – Organization
Tier 2 – Mission/Business Process (Correct answer)

Correct answer: Tier 2 – Mission/Business Process

NIST SP 800-39 defines Tier 2 as the mission/business process level, which addresses risk from the perspective of core organizational functions.

Question 121: Under the False Claims Act, who can bring a 'qui tam' lawsuit on behalf of the federal government?

Any private citizen (whistleblower) with knowledge of fraud against the government (Correct answer)
Only employees of the agency being defrauded
Inspectors General only
Only U.S. Attorneys

Correct answer: Any private citizen (whistleblower) with knowledge of fraud against the government

The qui tam provision of the False Claims Act allows private individuals (relators) to file lawsuits alleging fraud against the government and share in recovered funds.

Question 122: An audit organization conducting a peer review must have the review completed at least once every:

Three years (Correct answer)
One year
Five years
Two years

Correct answer: Three years

GAGAS requires audit organizations to have an external peer review at least once every three years.

Question 123: What is 'confirmations' as an audit procedure in a government financial audit?

The auditor's internal memo confirming that all procedures were completed
Management's written assertion that the financial statements are accurate
Obtaining direct written responses from third parties (banks, debtors) to verify account balances or terms (Correct answer)
Confirming with management that identified risks have been mitigated

Correct answer: Obtaining direct written responses from third parties (banks, debtors) to verify account balances or terms

Confirmations obtain independent written responses directly from third parties, providing highly reliable evidence about the existence and accuracy of account balances.

Question 124: A government auditor discovers that a program manager has not complied with a federal grant requirement. This finding should be reported as a:

Significant deficiency in internal control
Instance of noncompliance (Correct answer)
Control environment deficiency
Material weakness

Correct answer: Instance of noncompliance

Failure to comply with laws, regulations, or grant requirements is classified and reported as noncompliance in government audit reports.

Question 125: Who among the following can be chosen to serve as a company's auditor?

Mr. Y who owes Rs. 500 to the company.
A partner or a director of the company.
A person of unsound mind.
Mr. Z the holder of C.A certificate. (Correct answer)

Correct answer: Mr. Z the holder of C.A certificate.

According to company law, only a qualified Chartered Accountant (C.A.) holding a certificate of practice is eligible to be appointed as a company's auditor. The other options represent disqualifications: a partner or director has a conflict of interest, a person of unsound mind lacks legal capacity, and someone indebted to the company is not independent. Therefore, Mr. Z, a C.A. certificate holder, is the only eligible candidate.

Certified Government Auditing Professional (CGAP) Exam

The CGAP certification is designed for auditors working in the public sector, validating their proficiency in government auditing standards, practices, and ethics.

125

Questions

180 min

Time Limit

60%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds