Certified Government Auditing Professional (CGAP) Exam — Questions and Answers
Question 1: The primary purpose of an economy and efficiency audit is to determine:
- Whether the program is achieving its intended goals and objectives
- Whether financial statements are free from material misstatement
- Whether the entity is using resources with minimum waste at an appropriate quality level (Correct answer)
- Whether the entity is complying with applicable laws
Correct answer: Whether the entity is using resources with minimum waste at an appropriate quality level
Economy and efficiency audits assess whether resources are acquired and used with minimum waste while maintaining appropriate quality.
Question 2: What is the primary framework used by U.S. federal agencies to evaluate and report on internal controls?
- COBIT Framework for IT Governance
- GAO's Standards for Internal Control in the Federal Government (Green Book) (Correct answer)
- ISO 31000 Risk Management Standard
- COSO Enterprise Risk Management Framework
Correct answer: GAO's Standards for Internal Control in the Federal Government (Green Book)
The GAO Green Book establishes standards for internal control in the federal government and is used to evaluate and report on internal control effectiveness under FMFIA.
Question 3: Which type of government fund accounts for activities financed by user fees and intended to be self-supporting?
- General Fund
- Enterprise Fund (Correct answer)
- Special Revenue Fund
- Capital Projects Fund
Correct answer: Enterprise Fund
Enterprise funds (a type of proprietary fund) account for government business-type activities that are financed primarily through user charges.
Question 4: What is the primary purpose of the Inspector General Act of 1978?
- To require annual financial statement audits of all agencies
- To establish independent oversight bodies within federal agencies to detect and prevent fraud, waste, and abuse (Correct answer)
- To create the GAO as the congressional audit arm
- To establish the Office of Management and Budget
Correct answer: To establish independent oversight bodies within federal agencies to detect and prevent fraud, waste, and abuse
The Inspector General Act created statutory Offices of Inspector General to conduct independent audits, investigations, and inspections within federal agencies.
Question 5: The following organizations would benefit from continuous auditing:
- Audited statements are required immediately after the close of financial year.
- Business is very large and large numbers of transactions are needed to be checked.
- All of the above. (Correct answer)
- Banks
Correct answer: All of the above.
Continuous auditing is beneficial for organizations with a high volume of transactions, such as banks, where real-time monitoring is advantageous. It is also crucial when audited statements are needed immediately after the financial year-end, as it helps spread the audit work throughout the year, preventing last-minute rushes and facilitating timely reporting.
Question 6: What is the significance of the 'cognizant agency' concept in federal single audits?
- It refers to the agency that funds the largest share of federal awards to the entity
- It is the agency that selects independent auditors for grantees
- It is the GAO's point of contact for each audit engagement
- It is the agency responsible for coordinating audit follow-up and resolution for an auditee (Correct answer)
Correct answer: It is the agency responsible for coordinating audit follow-up and resolution for an auditee
The cognizant agency is the federal agency assigned to coordinate oversight and audit resolution for a particular non-federal entity receiving federal funds.
Question 7: Which of the following is an acceptable excuse for skipping control test procedures?
- The auditor prefers the control risk to be the minimum.
- The internal control structure appears very strong.
- The company does not have any flowcharts of its system available for review.
- The procedures require more audit effort than the projected benefits to be obtained from lowering the control risk. (Correct answer)
Correct answer: The procedures require more audit effort than the projected benefits to be obtained from lowering the control risk.
Auditors perform tests of controls to assess their effectiveness and potentially reduce the extent of substantive testing. However, if the cost (audit effort) of testing controls outweighs the potential benefits (reduction in substantive testing), the auditor may decide to skip control tests and instead rely entirely on substantive procedures. This is a cost-benefit decision in audit planning.
Question 8: In a performance audit, the 'condition' element of a finding refers to:
- The applicable law or regulation governing the program
- The situation as it actually exists based on audit evidence (Correct answer)
- The root cause of an identified problem
- The auditor's recommendation for corrective action
Correct answer: The situation as it actually exists based on audit evidence
The condition is what the auditor found — the actual state of the program or activity as supported by evidence collected during the audit.
Question 9: Which type of evidence is generally considered most reliable in a performance audit?
- Documentation provided by program management upon request
- Summaries prepared by program staff from original records
- Physical evidence observed directly by the auditor (Correct answer)
- Oral testimony from program beneficiaries
Correct answer: Physical evidence observed directly by the auditor
Physical evidence observed directly by the auditor is generally the most reliable because it is less susceptible to manipulation or misrepresentation than evidence provided by others.
Question 10: Which control helps prevent duplicate payments in a government accounts payable process?
- Requiring all vendors to submit invoices electronically
- Matching invoice number, vendor ID, and dollar amount against prior payments before processing (Correct answer)
- Rotating the accounts payable clerk annually
- Using a single checking account for all disbursements
Correct answer: Matching invoice number, vendor ID, and dollar amount against prior payments before processing
Checking invoice details against prior payment records before processing is a preventive control that flags potential duplicates before funds are disbursed.
Question 11: Under the Single Audit Act, a 'major program' determination is significant because:
- Major programs must be audited in detail for compliance with federal requirements (Correct answer)
- Major programs are exempt from the schedule of expenditures of federal awards
- Major programs receive no federal funding oversight
- Major programs require a separate audit firm from the financial audit
Correct answer: Major programs must be audited in detail for compliance with federal requirements
The Single Audit Act requires detailed compliance auditing of major federal programs to ensure grant funds are used in accordance with applicable requirements.
Question 12: A government auditor discovers that a program manager has not complied with a federal grant requirement. This finding should be reported as a:
- Control environment deficiency
- Significant deficiency in internal control
- Material weakness
- Instance of noncompliance (Correct answer)
Correct answer: Instance of noncompliance
Failure to comply with laws, regulations, or grant requirements is classified and reported as noncompliance in government audit reports.
Question 13: A state auditor general's office is reviewing all expenditures of a state agency over a five-year period to evaluate both financial accuracy and whether the agency met its legislative mandates. This engagement combines which two audit types?
- Attestation and operational audits
- Performance and investigative audits
- Financial and compliance audits (Correct answer)
- Compliance and economy audits
Correct answer: Financial and compliance audits
Reviewing financial accuracy is a financial audit, while checking adherence to legislative mandates is a compliance audit; both can be combined.
Question 14: Which of the following is not one of internal control's five main pillars?
- Control activities.
- Human resource background checks. (Correct answer)
- Information and communication.
- Risk assessment.
Correct answer: Human resource background checks.
The five main components of internal control, as per the COSO framework, are: Control Environment, Risk Assessment, Control Activities, Information & Communication, and Monitoring Activities. Human resource background checks are a specific control activity within the broader 'Control Activities' component, but they are not one of the five overarching pillars themselves.
Question 15: An auditor discovers irregularities suggesting that a public official may have diverted grant funds for personal use. The auditor should:
- Ignore the finding if it does not affect the financial statements materially
- Immediately suspend the audit and await law enforcement direction
- Document the indicators, notify appropriate officials, and consider referring the matter for investigation (Correct answer)
- Include the finding in the routine performance audit report without special treatment
Correct answer: Document the indicators, notify appropriate officials, and consider referring the matter for investigation
When auditors detect indications of fraud, they must document indicators, notify management or those charged with governance, and consider referral for investigation.
Question 16: Under GASB standards, which measurement focus and basis of accounting applies to governmental funds?
- Cash / cash basis
- Current financial resources / modified accrual (Correct answer)
- Economic resources / accrual
- Economic resources / modified accrual
Correct answer: Current financial resources / modified accrual
Governmental funds use the current financial resources measurement focus and modified accrual basis of accounting under GASB standards.
Question 17: Which set of standards primarily governs performance audits conducted in the U.S. government sector?
- IIA International Standards for the Professional Practice of Internal Auditing
- GAGAS (Generally Accepted Government Auditing Standards) (Correct answer)
- GAAS (Generally Accepted Auditing Standards)
- PCAOB Auditing Standards
Correct answer: GAGAS (Generally Accepted Government Auditing Standards)
GAGAS, issued by the U.S. Government Accountability Office (GAO), is the authoritative standard for government performance audits, also known as the 'Yellow Book.'
Question 18: Which of the following is NOT a justification for why a business requires sound corporate governance?
- to avoid mismanagement of the company
- to analyze the company’s operations and systems of internal control in order to detect and prevent various forms of fraud and other accounting irregularities (Correct answer)
- to enable the company to raise capital more efficiently and mitigate financial and operational risk to stakeholders
- to increase the company’s overall accountability and prevent significant organizational problems
Correct answer: to analyze the company’s operations and systems of internal control in order to detect and prevent various forms of fraud and other accounting irregularities
While good corporate governance aims to create a framework that prevents mismanagement and fraud, the *direct* operational analysis of internal controls to detect and prevent specific instances of fraud and accounting irregularities is primarily the responsibility of internal audit, management, and external auditors. Corporate governance provides the overarching structure and oversight, but it does not perform the detailed investigative work itself.
Question 19: Which statement best describes the role of 'materiality' in a government performance audit?
- All findings must be reported regardless of their significance
- Materiality is determined solely by agency management
- Materiality applies only to dollar thresholds and is irrelevant in performance audits
- Auditors must consider whether findings are significant enough to affect the user's decision-making or understanding of the program (Correct answer)
Correct answer: Auditors must consider whether findings are significant enough to affect the user's decision-making or understanding of the program
In performance audits, materiality is a judgment about whether a finding is significant enough to be reported; it encompasses both quantitative and qualitative significance relative to program objectives.
Question 20: Which component of the COSO Internal Control Framework addresses the organization's commitment to integrity and ethical values?
- Risk Assessment
- Information & Communication
- Monitoring Activities
- Control Environment (Correct answer)
Correct answer: Control Environment
The Control Environment is the foundation of COSO's framework and encompasses tone at the top, ethical values, and management's philosophy.
Question 21: An auditor-in-charge learns that a key auditee staff member is their former college roommate. The appropriate action is to:
- Recuse from the audit without notifying management
- Continue the audit since a personal relationship does not affect professional judgment
- Disclose the relationship to audit management and assess whether independence is impaired (Correct answer)
- Limit contact with the staff member during fieldwork
Correct answer: Disclose the relationship to audit management and assess whether independence is impaired
Auditors must disclose relationships that could impair independence so management can assess and document the impact.
Question 22: In government auditing, 'materiality' for a compliance audit is typically determined based on:
- The auditor's prior year materiality level
- Net income thresholds
- Quantitative and qualitative factors related to the specific law or regulation (Correct answer)
- A fixed dollar amount set by the legislature
Correct answer: Quantitative and qualitative factors related to the specific law or regulation
Compliance audit materiality considers both quantitative thresholds and qualitative factors such as the sensitivity of the legal requirement.
Question 23: Which of the following is true regarding the value of vouching?
- Ensures all items are disclosed in the financial statement as per Schedule VI provisions
- All the above (Correct answer)
- It helps to verify whether entries are passed as per acceptable accounting principles.
- Helps in detection and prevention of errors & frauds
Correct answer: All the above
Vouching is a fundamental audit procedure that offers multiple benefits. It helps in detecting and preventing errors and frauds by verifying transactions against supporting documents. It also ensures that entries comply with acceptable accounting principles and that all relevant items are properly disclosed in financial statements according to regulatory provisions, making all the given options true.
Question 24: What does 'prompt payment' legislation require of federal agencies?
- Agencies must approve invoices within 5 business days
- Agencies must process grant reimbursements within 30 days
- Agencies must pay employee salaries before the 15th of each month
- Agencies must pay vendors by a specified due date or pay interest on late payments (Correct answer)
Correct answer: Agencies must pay vendors by a specified due date or pay interest on late payments
The Prompt Payment Act requires federal agencies to pay invoices by the due date or pay interest penalties to vendors for late payment.
Question 25: A government issues $5 million in general obligation bonds at a premium of $200,000. In the governmental funds, how should the premium be reported?
- As a deferred inflow of resources
- As an other financing source in the fund receiving the proceeds (Correct answer)
- As revenue in the general fund
- As an other financing source in the debt service fund
Correct answer: As an other financing source in the fund receiving the proceeds
Bond premiums are reported as other financing sources in the fund that receives the bond proceeds, separate from the par value of the bonds.
Question 26: In the Yellow Book (GAGAS), which type of finding must auditors report when they identify non-compliance that is material to a major program?
- Reportable condition
- Material weakness in internal control over compliance (Correct answer)
- Audit exception
- Significant deficiency
Correct answer: Material weakness in internal control over compliance
Under GAGAS and Single Audit requirements, non-compliance that is material to a major program requires reporting a material weakness in internal control over compliance.
Question 27: Which concept in government compliance auditing refers to the totality of laws, regulations, and contracts that an audited entity must follow?
- Legal and regulatory requirements (Correct answer)
- Compliance matrix
- Regulatory framework
- Compliance universe
Correct answer: Legal and regulatory requirements
In government auditing, 'legal and regulatory requirements' encompasses the full set of laws, regulations, grant terms, and contracts binding the entity.
Question 28: What is 'control testing' in a financial statement audit?
- Reviewing the IT system's technical configuration
- Testing the operating effectiveness of internal controls to support a reduced level of substantive testing (Correct answer)
- Verifying that controls exist by reading policy manuals
- Evaluating whether management's control self-assessments are accurate
Correct answer: Testing the operating effectiveness of internal controls to support a reduced level of substantive testing
Control testing (tests of controls) assesses whether internal controls operated effectively during the period, allowing auditors to reduce the extent of substantive testing if controls are effective.
Question 29: Accounts audited by company personnel is referred to as:
- Continuous Audit.
- Statutory Audit.
- Internal Audit. (Correct answer)
- Interim Audit.
Correct answer: Internal Audit.
Internal audit involves an independent, objective assurance and consulting activity designed to add value and improve an organization's operations. It is typically performed by personnel within the company or by an outsourced firm reporting to management and the audit committee, focusing on risk management, control, and governance processes.
Question 30: Which of the following doesn't qualify as an audit?
- Continuous, final, Interim, Cash, Cost and Management audit.
- None of these. (Correct answer)
- Government and continuous audit.
- Statutory and private audit.
Correct answer: None of these.
All the options listed (Continuous, final, interim, cash, cost, management, statutory, private, and government audits) are recognized types or classifications of audits. Since the question asks which option does not qualify as an audit, and all provided are valid audit types, 'None of these' is the correct answer.
Question 31: What does the Schedule of Expenditures of Federal Awards (SEFA) report?
- Federal agency spending on domestic programs
- Performance metrics for federal grant programs
- Grant revenue received but not yet spent
- All federal awards expended by a non-federal entity during the audit period (Correct answer)
Correct answer: All federal awards expended by a non-federal entity during the audit period
The SEFA lists all federal awards expended by the auditee during the fiscal year and is a required supplementary schedule in a single audit.
Question 32: In government performance auditing, 'economy' is measured by examining:
- Whether the program achieved its stated performance targets
- Whether inputs (resources) are acquired at the lowest reasonable cost while meeting quality standards (Correct answer)
- Whether program outputs achieved desired societal outcomes
- Whether services are delivered without waste or redundancy
Correct answer: Whether inputs (resources) are acquired at the lowest reasonable cost while meeting quality standards
Economy focuses on input acquisition — obtaining the right quality and quantity of resources at the lowest reasonable cost.
Question 33: The auditor should investigate any sales returns.
- Whether cash has been repaid to the client
- Credit notes and goods received notes. (Correct answer)
- Credit notes and delivery challans.
- Purchase invoices and goods received notes.
Correct answer: Credit notes and goods received notes.
When investigating sales returns, an auditor should examine credit notes, which formally acknowledge the return and reduce the customer's outstanding balance. Additionally, goods received notes confirm that the returned items were physically received back into the company's inventory. These two documents provide strong evidence for the legitimacy and proper recording of sales returns.
Question 34: Which of the following best distinguishes an attestation engagement from a performance audit?
- Performance audits require a written management response, while attestation engagements do not
- Attestation engagements always examine financial data, while performance audits examine programs
- In attestation engagements, the auditor reports on a subject matter or assertion made by another party (Correct answer)
- Attestation engagements are conducted only by external auditors
Correct answer: In attestation engagements, the auditor reports on a subject matter or assertion made by another party
In attestation engagements, the auditor provides assurance on a subject matter or an assertion made by a responsible party, not the auditor's own findings.
Question 35: Which IIA Standard requires internal audit to evaluate the effectiveness of the organization's risk management processes?
- Standard 2200 — Engagement Planning
- Standard 2410 — Criteria for Communicating
- Standard 2120 — Risk Management (Correct answer)
- Standard 2010 — Planning
Correct answer: Standard 2120 — Risk Management
IIA Standard 2120 specifically requires internal audit to evaluate the effectiveness and contribution of risk management processes.
Question 36: When generally accepted accounting rules are not adhered to when documenting any transaction in the books of accounts, errors may result.
- Errors of duplication
- Compensating errors
- Clerical errors
- Errors of principle (Correct answer)
Correct answer: Errors of principle
Errors of principle occur when a transaction is recorded in violation of generally accepted accounting principles (GAAP), even if the debit and credit amounts are numerically correct. For example, incorrectly classifying a capital expenditure as a revenue expenditure is an error of principle. These errors lead to misrepresentation of financial performance and position.
Question 37: When one clerk's work is automatically reviewed by another, it is referred as as
- Internal audit.
- None of the above.
- Internal check. (Correct answer)
- Internal control.
Correct answer: Internal check.
Internal check refers to a system where the duties of employees are arranged so that the work of one person is automatically reviewed or verified by another in the ordinary course of business. This inherent segregation of duties helps prevent and detect errors and frauds by ensuring no single individual has complete control over a transaction from start to finish.
Question 38: Which element is NOT typically included in a government audit report prepared under GAGAS?
- The scope of the audit
- The auditor's opinion or findings
- A statement on compliance with GAGAS
- Management's corrective action plan (Correct answer)
Correct answer: Management's corrective action plan
Management's corrective action plan may be included as a response but is not a required element of the auditor's report under GAGAS.
Question 39: When a performance audit reveals that a government agency's program is achieving its goals but at excessive cost, the auditor's primary finding is a deficiency in:
- Economy (Correct answer)
- Effectiveness
- Compliance
- Equity
Correct answer: Economy
Achieving goals at excessive cost indicates the program is effective but not economical, pointing to an economy deficiency.
Question 40: The auditor sets out the entire audit process before work on it begins, and this process is known as .
- Audit note.
- Audit plan.
- Audit programme. (Correct answer)
- Audit risk.
Correct answer: Audit programme.
An audit programme is a detailed plan or set of instructions prepared by the auditor before commencing the audit work. It outlines the scope, objectives, and procedures to be followed, ensuring a systematic, comprehensive, and efficient approach to the entire audit process.
Question 41: Which internal control activity involves reviewing transaction reports after the fact to catch errors or unauthorized activity?
- Corrective control
- Directive control
- Detective control (Correct answer)
- Preventive control
Correct answer: Detective control
Detective controls identify errors, irregularities, or unauthorized transactions after they occur, such as account reconciliations, exception reports, and supervisory reviews.
Question 42: What is a 'major program' in the context of a Single Audit?
- All programs listed in the Schedule of Expenditures of Federal Awards
- Programs designated as high-risk by the awarding agency
- Any federal program that received over $1 million in funding
- A federal program selected for compliance testing based on risk assessment criteria in 2 CFR Part 200 (Correct answer)
Correct answer: A federal program selected for compliance testing based on risk assessment criteria in 2 CFR Part 200
Major programs are selected using a risk-based approach under 2 CFR Part 200, considering expenditure size, prior audit findings, and other risk factors.
Question 43: Which act established the framework for congressional oversight of federal programs through regular reporting of performance results?
- Federal Financial Management Improvement Act
- Government Performance and Results Act (GPRA) of 1993 (Correct answer)
- Chief Financial Officers Act
- Budget and Accounting Act of 1921
Correct answer: Government Performance and Results Act (GPRA) of 1993
GPRA of 1993 required federal agencies to develop strategic plans, set performance goals, and report annually on results, creating a results-oriented management framework.
Question 44: The name of the corporate press release is .
- written by the chief financial officer in conjunction with the audit committee
- best written to be easy to understand, free of corporate jargon, and as concise as possible (Correct answer)
- not yet a thing of the past, though it is highly likely to be replaced by social media in the near future
- no longer an important component of modern investor relations strategy
Correct answer: best written to be easy to understand, free of corporate jargon, and as concise as possible
A corporate press release is most effective when it is written to be easy to understand, free of corporate jargon, and as concise as possible. Its purpose is to communicate important information clearly and broadly to various audiences, including media, investors, and the public, ensuring the message is accessible and impactful.
Question 45: A company's internal auditor must be _________ .
- Cost accountant. (Correct answer)
- Chartered accountant.
- need not possess any professional qualification.
- ICWA
Correct answer: Cost accountant.
While a Chartered Accountant is highly qualified for internal audit, a Cost Accountant (e.g., an ICWA in India) is also a recognized professional qualification highly suitable for internal audit roles, especially in organizations where cost management and operational efficiency are critical. Internal audit encompasses a broad range of areas, and a cost accountant's expertise is particularly valuable for evaluating cost systems and performance.
Question 46: Which COSO ERM 2017 component includes 'Performance' as a key area where risk is identified, assessed, and prioritized in relation to risk appetite?
- Review and Revision
- Performance (Correct answer)
- Strategy and Objective-Setting
- Governance and Culture
Correct answer: Performance
In COSO ERM 2017, the Performance component is where risks are identified, assessed, prioritized, and responded to in relation to the entity's risk appetite.
Question 47: Which of the following items does the auditor not check when examining the liabilities?
- Existence
- All of the above (Correct answer)
- Completeness
- Obligation
Correct answer: All of the above
When examining liabilities, an auditor must address all relevant financial statement assertions. This includes completeness (ensuring all liabilities are recorded), existence (verifying that recorded liabilities are real), and obligation (confirming the entity has a legal or constructive duty to settle them). Therefore, an auditor checks for all these aspects to ensure liabilities are accurately presented.
Question 48: In the NIST Cybersecurity Framework (CSF), which function focuses on activities to identify the occurrence of a cybersecurity event?
- Identify
- Detect (Correct answer)
- Respond
- Protect
Correct answer: Detect
The Detect function encompasses activities to identify cybersecurity events in a timely manner, including continuous monitoring and anomaly detection.
Question 49: In government budgeting, what is an 'obligation'?
- A transfer of funds between programs
- A budget request submitted to the legislature
- Actual cash disbursed for goods received
- A legally binding commitment that will require future outlays (Correct answer)
Correct answer: A legally binding commitment that will require future outlays
An obligation is a legally binding act that commits the government to make a payment once conditions are met, such as signing a contract.
Question 50: Under the Hatch Act, what primary restriction applies to most federal employees?
- They may not accept outside employment
- They may not engage in partisan political activity while on duty or in federal facilities (Correct answer)
- They may not hold elected office at any level
- They may not contribute to political campaigns
Correct answer: They may not engage in partisan political activity while on duty or in federal facilities
The Hatch Act restricts federal employees from engaging in partisan political activity while on duty, in a federal building, or using government resources.
Question 51: Which accounting basis does the U.S. federal government primarily use for its consolidated financial statements?
- Cash basis
- Budgetary basis
- Full accrual basis (Correct answer)
- Modified accrual basis
Correct answer: Full accrual basis
The U.S. federal government uses full accrual accounting for its consolidated financial statements as required by federal accounting standards.
Question 52: Which federal act requires agencies to produce audited financial statements and links performance to budget?
- Inspectors General Act
- Chief Financial Officers Act of 1990 (Correct answer)
- Federal Managers' Financial Integrity Act
- Government Performance and Results Act
Correct answer: Chief Financial Officers Act of 1990
The Chief Financial Officers Act of 1990 requires 24 major federal agencies to produce annual audited financial statements and establishes CFO positions.
Question 53: Which of the following does not apply to the vouching process for cash sales:
- Examine cash book
- Examine the counterfoil of pay in slops
- Examine balance sheet (Correct answer)
- Examine cash memos
Correct answer: Examine balance sheet
When vouching cash sales, an auditor focuses on documents directly related to the transaction, such as cash memos, the cash book, and counterfoils of pay-in slips. The balance sheet, however, is a summary financial statement at a specific point in time and does not provide the detailed transactional evidence needed to verify individual cash sales. Therefore, examining the balance sheet is not part of the vouching process for cash sales.
Question 54: When assessing program efficiency in a performance audit, an auditor would most likely examine:
- The ratio of program outputs produced per unit of resource consumed (Correct answer)
- The qualifications and independence of program management
- Whether program funds were spent in compliance with appropriations laws
- Whether the program's financial statements are free from material misstatement
Correct answer: The ratio of program outputs produced per unit of resource consumed
Efficiency measures how well a program converts inputs (resources) into outputs, so auditors examine the cost per unit of service delivered or the volume of services provided relative to resources used.
Question 55: What does 'materiality' mean in the context of a government financial statement audit?
- Any dollar amount above the entity's threshold for capitalizing assets
- The total value of federal grants subject to single audit
- The magnitude of a misstatement or omission that could influence decisions of users of the financial statements (Correct answer)
- The importance of a finding to legislative decision-makers
Correct answer: The magnitude of a misstatement or omission that could influence decisions of users of the financial statements
Materiality is the threshold at which a misstatement or omission could reasonably be expected to influence the decisions of financial statement users.
Question 56: Which fund type is used to account for resources that are legally restricted to expenditure for specified purposes other than debt service or capital projects?
- Enterprise fund
- Special revenue fund (Correct answer)
- Agency fund
- Permanent fund
Correct answer: Special revenue fund
Special revenue funds account for specific revenue sources that are restricted or committed to expenditure for specified purposes other than debt service or capital projects.
Question 57: What is 'tone at the top' in the context of government internal control?
- Management's formal written internal control policies
- The ethical climate and commitment to integrity established by leadership that influences behavior throughout the organization (Correct answer)
- The highest level of risk an agency is willing to accept
- The volume of control documentation maintained by senior management
Correct answer: The ethical climate and commitment to integrity established by leadership that influences behavior throughout the organization
Tone at the top reflects leadership's values and commitment to ethical behavior, which directly influences whether employees at all levels act with integrity.
Question 58: An auditor is evaluating a government job-training program. The audit objective is to determine whether participants obtained and retained employment after completing the program. This objective primarily relates to which performance dimension?
- Economy
- Effectiveness (Correct answer)
- Efficiency
- Compliance
Correct answer: Effectiveness
Effectiveness measures whether a program achieves its intended outcomes; obtaining and retaining employment is the intended outcome of a job-training program.
Question 59: Which body sets accounting and financial reporting standards for U.S. federal entities?
- FASAB (Correct answer)
- FASB
- GASB
- AICPA
Correct answer: FASAB
The Federal Accounting Standards Advisory Board (FASAB) establishes generally accepted accounting principles for federal reporting entities.
Question 60: Under GAGAS, what is required when an auditor identifies a violation of provisions of contracts or grant agreements?
- Withdraw from the engagement
- Immediately notify law enforcement
- Notify the awarding federal agency directly before completing fieldwork
- Report the violation in the audit report unless clearly inconsequential (Correct answer)
Correct answer: Report the violation in the audit report unless clearly inconsequential
GAGAS requires auditors to report violations of contract or grant provisions in the audit report unless the violations are clearly inconsequential.
Question 61: A government auditor is evaluating a revenue bond issue. Which factor most distinguishes revenue bonds from general obligation bonds?
- Revenue bonds are exempt from federal income tax while general obligation bonds are not
- Revenue bonds require voter approval while general obligation bonds do not
- Revenue bonds are backed by the full faith and credit and taxing power of the government
- Revenue bonds are repaid from specific pledged revenues rather than general tax revenues (Correct answer)
Correct answer: Revenue bonds are repaid from specific pledged revenues rather than general tax revenues
Revenue bonds are secured by and repaid from specific revenue streams (e.g., utility fees, tolls), whereas general obligation bonds pledge the government's full taxing authority.
Question 62: Which of the following auditing procedures would most likely give an auditor the greatest peace of mind regarding the efficacy of a control's operation?
- Walk-through.
- Observation of entity personnel.
- Inquiry of entity personnel.
- Reperformance of the control by the auditor. (Correct answer)
Correct answer: Reperformance of the control by the auditor.
Reperformance of a control by the auditor involves the auditor independently executing the control activity to verify its operation. This procedure provides the highest level of assurance regarding the efficacy of a control's operation because the auditor directly observes and verifies the control's effectiveness, rather than relying on inquiries, observations (which are point-in-time), or walk-throughs (which confirm understanding but not necessarily consistent operation).
Question 63: Which governance structure is most directly responsible for setting a public entity's strategic direction and overseeing management accountability?
- External audit firm
- Governing board or legislative body (Correct answer)
- Chief Financial Officer
- Internal audit activity
Correct answer: Governing board or legislative body
The governing board or legislative body holds ultimate authority over strategic direction and holds management accountable in public sector entities.
Question 64: What one of the following is NOT a responsibility of an audit committee?
- reviewing the work of the internal audit
- launching special investigations of employees, company practices, or procedures (Correct answer)
- ensuring that appropriate resources are used in company operations
- reviewing systems of internal control.
Correct answer: launching special investigations of employees, company practices, or procedures
An audit committee's primary role is oversight of financial reporting, internal controls, and the audit process. While it oversees the internal audit function and can direct them to investigate matters, the *launching* of special investigations into employees, company practices, or procedures is typically an operational or management function, often involving HR or legal departments, rather than a direct responsibility of the audit committee itself.
Question 65: Which type of sampling is most appropriate when the auditor wants every item in the population to have an equal chance of selection?
- Stratified sampling
- Cluster sampling
- Simple random sampling (Correct answer)
- Judgmental sampling
Correct answer: Simple random sampling
Simple random sampling gives every item in the population an equal probability of being selected, making results projectable to the population.
Question 66: When no auditor is appointed or reappointed at a company's annual general meeting. If so, then
- the central government appoints a person to fill the vacancy (Correct answer)
- the managing director of the company appoints a person to fill the vacancy.
- none of these can appoint a person to fill the vacancy.
- the board of directors appoints a person to fill the vacancy.
Correct answer: the central government appoints a person to fill the vacancy
If a company fails to appoint or reappoint an auditor at its Annual General Meeting, a vacuum is created in the audit function. In such a situation, to ensure compliance with statutory requirements and protect stakeholder interests, the Central Government is empowered to appoint a person to fill the vacancy. This prevents the company from operating without a statutory auditor.
Question 67: What is 'segregation of duties' as an internal control principle?
- Dividing key tasks among different individuals so no single person can perpetrate and conceal an error or fraud (Correct answer)
- Rotating employees between departments annually
- Assigning different supervisors to different teams
- Separating financial records by fiscal year
Correct answer: Dividing key tasks among different individuals so no single person can perpetrate and conceal an error or fraud
Segregation of duties splits authorization, custody, and record-keeping functions among different employees to prevent one person from having complete control over a transaction.
Question 68: Which risk framework element defines the boundaries within which an organization is willing to operate, expressed as quantitative or qualitative limits?
- Risk tolerance (Correct answer)
- Risk appetite
- Risk velocity
- Risk capacity
Correct answer: Risk tolerance
Risk tolerance specifies the acceptable level of variation from risk appetite through specific thresholds or limits that guide day-to-day decision-making.
Question 69: The company's owners go by the name of _______ .
- None of the above.
- Debenture holders.
- Shareholders (Correct answer)
- Debtors
Correct answer: Shareholders
Shareholders are the individuals or entities who own shares in a company, representing their proportional ownership stake. They invest capital in the company and, in return, have rights such as voting on major decisions and receiving dividends. Debtors owe money to the company, and debenture holders are creditors who have lent money to the company.
Question 70: Under GAGAS, a nonaudit service that would impair independence is one that:
- Assists in preparing a schedule that is not subject to audit
- Provides training to auditee staff on accounting software
- Involves reviewing draft financial statements for obvious errors only
- Places the auditor in the role of management or creates a situation where the auditor audits their own work (Correct answer)
Correct answer: Places the auditor in the role of management or creates a situation where the auditor audits their own work
Nonaudit services impair independence when they result in the auditor performing management functions or subsequently auditing their own work.
Question 71: Which of the following statements correctly distinguishes internal from external auditing in a government context?
- Internal auditors cannot perform compliance audits, only financial audits
- External auditors are independent of the audited entity, while internal auditors are part of the organization they audit (Correct answer)
- Internal auditors report exclusively to the legislature, while external auditors report to management
- External auditors are prohibited from conducting performance audits under government standards
Correct answer: External auditors are independent of the audited entity, while internal auditors are part of the organization they audit
External auditors maintain independence from the audited entity, while internal auditors operate within the organization and report to management or an audit committee.
Question 72: Which document guides cost principles for non-federal entities receiving federal awards?
- OMB Circular A-11
- 2 CFR Part 200 (Uniform Guidance) (Correct answer)
- FASAB SFFAS No. 4
- OMB Circular A-76
Correct answer: 2 CFR Part 200 (Uniform Guidance)
2 CFR Part 200, the Uniform Administrative Requirements, Cost Principles, and Audit Requirements, governs federal grant management for non-federal entities.
Question 73: What is the purpose of an 'entrance conference' at the start of a government audit?
- To obtain management's signed representation letter
- To introduce the audit team, explain the audit scope and objectives, and establish communication protocols with the entity (Correct answer)
- To review prior audit reports and open findings
- To formally present audit findings to management
Correct answer: To introduce the audit team, explain the audit scope and objectives, and establish communication protocols with the entity
The entrance conference establishes communication, clarifies expectations, confirms the scope, and builds a cooperative working relationship with the audited entity.
Question 74: Which of the following doesn't qualify as an audit?
- Statutory and private audit.
- Continuous, final, Interim, Cash, Cost and Management audit.
- None of these. (Correct answer)
- Government and continuous audit.
Correct answer: None of these.
All the options listed (Government, continuous, final, interim, cash, cost, management, statutory, and private audits) are recognized and distinct types or classifications of audits. Therefore, none of the provided choices represent something that does not qualify as an audit.
Question 75: What is the primary purpose of an 'audit objective' in a performance audit?
- To specify the dollar threshold for materiality
- To list the auditing standards that will be applied
- To define the scope of financial transactions to be tested
- To clearly state what the audit is intended to answer or accomplish (Correct answer)
Correct answer: To clearly state what the audit is intended to answer or accomplish
The audit objective defines the specific questions the audit is designed to answer and guides the entire audit process, including evidence collection and reporting.
Question 76: The department in charge of accounts and audits is:
- Prime Minister.
- Home Minister.
- Ministry of finance.
- Comptroller and Auditor General of India. (Correct answer)
Correct answer: Comptroller and Auditor General of India.
The Comptroller and Auditor General (CAG) of India is the head of the Indian Audit and Accounts Department and is the chief external auditor of the Government of India and state governments. The CAG is responsible for auditing all receipts and expenditures of the government, ensuring financial accountability and transparency.
Question 77: What is a 'ghost employee' fraud scheme?
- Adding fictitious employees to the payroll to divert salary payments to the fraudster (Correct answer)
- Using a fake company name to submit vendor invoices
- Submitting duplicate expense reimbursements
- Stealing physical assets from government inventory
Correct answer: Adding fictitious employees to the payroll to divert salary payments to the fraudster
A ghost employee scheme places fake or former employees on the payroll, causing the government to issue salary payments that the fraudster intercepts.
Question 78: A CGAP candidate is reviewing a government entity's charter. Which element is MOST critical to ensure the internal audit function has appropriate authority?
- Authority to sign contracts on behalf of the entity
- Requirement to report findings only to line management
- Specification of audit software to be used
- Unrestricted access to records, personnel, and physical properties (Correct answer)
Correct answer: Unrestricted access to records, personnel, and physical properties
Unrestricted access to all records, personnel, and properties is essential for internal audit to fulfill its mandate without obstruction.
Question 79: Under the False Claims Act, who can bring a 'qui tam' lawsuit on behalf of the federal government?
- Only employees of the agency being defrauded
- Only U.S. Attorneys
- Any private citizen (whistleblower) with knowledge of fraud against the government (Correct answer)
- Inspectors General only
Correct answer: Any private citizen (whistleblower) with knowledge of fraud against the government
The qui tam provision of the False Claims Act allows private individuals (relators) to file lawsuits alleging fraud against the government and share in recovered funds.
Question 80: A government auditor discovers that a department has been using petty cash funds for unauthorized purchases. Which audit procedure best addresses this finding?
- Issue a formal audit finding and recommend policy training (Correct answer)
- Disregard it if the amount is below materiality threshold
- Transfer the finding to the department's supervisor without documentation
- Immediately report the matter to law enforcement
Correct answer: Issue a formal audit finding and recommend policy training
Formal audit findings with recommendations for corrective action, including policy training, are the appropriate response to control violations.
Question 81: Under the Yellow Book, which type of audit work includes examining financial statements to determine whether they are presented fairly in conformity with GAAP?
- Investigative audits
- Financial audits (Correct answer)
- Performance audits
- Attestation engagements
Correct answer: Financial audits
Financial audits under the Yellow Book include examination of financial statements for fair presentation in accordance with GAAP or other applicable frameworks.
Question 82: A government auditor is assessing the reasonableness of a government's property tax levy. Which factor is least relevant to this assessment?
- The expected collection rate based on historical data
- The budgeted expenditures that the levy is intended to fund
- The credit ratings of the government's outstanding bonds (Correct answer)
- The assessed value of taxable property in the jurisdiction
Correct answer: The credit ratings of the government's outstanding bonds
Bond credit ratings reflect investor perception of creditworthiness but do not directly determine the reasonableness of the property tax levy amount, which depends on assessed values, collection rates, and budgeted needs.
Question 83: Under the Federal Managers' Financial Integrity Act (FMFIA), what are agency heads required to do annually?
- File a report with Congress listing all identified fraud cases
- Provide a statement of assurance on the effectiveness of internal controls and financial systems (Correct answer)
- Submit to a GAO audit of all agency programs
- Certify that no Antideficiency Act violations occurred
Correct answer: Provide a statement of assurance on the effectiveness of internal controls and financial systems
FMFIA requires agency heads to provide an annual assurance statement to the President and Congress on the adequacy of internal controls and compliance with financial system requirements.
Question 84: Which type of fraud involves government employees submitting claims for goods or services not received?
- Bid rigging
- Fictitious vendor scheme (Correct answer)
- Payroll padding
- Ghost employee scheme
Correct answer: Fictitious vendor scheme
A fictitious vendor scheme involves creating fake vendor records and submitting fraudulent invoices for goods or services never provided.
Question 85: An audit is required for:
- Trust and Co-operative societies.
- Companies.
- Companies formed under Special Act of Parliament.
- All of the above. (Correct answer)
Correct answer: All of the above.
Audits are legally required for various types of entities to ensure financial transparency and accountability. This includes companies formed under the Companies Act, those under special acts of Parliament, and other registered bodies like trusts and co-operative societies, making auditing a broad statutory requirement.
Question 86: A government auditor issues a report concluding that a housing agency's internal controls over rent collection are not adequate to detect errors. This finding most likely comes from which audit type?
- Program results audit
- Financial audit (Correct answer)
- Performance audit
- Compliance audit
Correct answer: Financial audit
Evaluating internal controls over financial processes such as rent collection is a core element of financial audits.
Question 87: The audit, which is not mandated by law but is carried out at the request of owners, is referred to as:
- Private audit. (Correct answer)
- Efficiency audit.
- Balance sheet audit.
- Operational Audit.
Correct answer: Private audit.
A private audit is conducted at the request of the owners or management of an entity, rather than being mandated by law. Its purpose is to provide assurance or specific information to the requesting parties, often for internal decision-making or to satisfy specific stakeholder requirements.
Question 88: Under Government Auditing Standards, which type of engagement is defined as one where the auditor expresses a conclusion about a subject matter based on criteria agreed upon by the practitioner and the engaging party?
- Performance audit
- Agreed-upon procedures engagement
- Attestation engagement (Correct answer)
- Financial audit
Correct answer: Attestation engagement
An attestation engagement involves the auditor expressing a conclusion on subject matter against agreed criteria, distinct from a full audit opinion.
Question 89: A vacancy left by an auditor's resignation is filled by ____________ .
- managing director.
- central government.
- general meeting. (Correct answer)
- board of directors.
Correct answer: general meeting.
When an auditor resigns, the resulting casual vacancy is typically filled by the general meeting of shareholders. Since the shareholders are the ultimate appointing authority for the company's auditors, they are responsible for approving a new auditor to fill the unexpired term. The Board of Directors may make an interim appointment, but it usually requires ratification by the shareholders.
Question 90: When planning a performance audit, which element is established first?
- Evidence collection methods
- Audit objectives (Correct answer)
- Reporting format
- Audit criteria
Correct answer: Audit objectives
Audit objectives must be established first because they drive the selection of criteria, evidence collection methods, and reporting format.
Question 91: Which government-wide regulation governs the procurement of goods and services by federal agencies?
- Government Accountability Standards (Yellow Book)
- 2 CFR Part 200
- OMB Circular A-123
- Federal Acquisition Regulation (FAR) (Correct answer)
Correct answer: Federal Acquisition Regulation (FAR)
The Federal Acquisition Regulation (FAR) is the primary set of rules governing the acquisition process for executive branch federal agencies.
Question 92: Which risk is defined as the probability that a material misstatement exists in a financial statement before considering internal controls?
- Inherent risk (Correct answer)
- Audit risk
- Detection risk
- Control risk
Correct answer: Inherent risk
Inherent risk is the susceptibility of an assertion to material misstatement assuming no related internal controls.
Question 93: A government agency uses a heat map to display risks. What two dimensions are typically plotted on a risk heat map?
- Detectability and controllability
- Likelihood and impact (Correct answer)
- Cost and time
- Frequency and velocity
Correct answer: Likelihood and impact
Risk heat maps plot likelihood (probability) on one axis and impact (consequence) on the other to visually prioritize risks.
Question 94: When auditing governmental financial statements, which analytical procedure is most useful for evaluating the reasonableness of property tax revenues?
- Comparing current-year salaries to the prior year for unusual increases
- Multiplying the tax rate by assessed values and applying the expected collection rate (Correct answer)
- Reviewing the debt service coverage ratio for outstanding revenue bonds
- Recalculating depreciation on infrastructure assets using the modified approach
Correct answer: Multiplying the tax rate by assessed values and applying the expected collection rate
Multiplying the millage rate by the assessed tax base and applying the historical collection rate provides an independent estimate of expected property tax revenue to compare against the recorded amount.
Question 95: Which of the following best distinguishes 'outputs' from 'outcomes' in performance auditing?
- Outputs require external validation; outcomes do not
- Outputs are the direct products of program activities; outcomes are the results or changes attributable to those products (Correct answer)
- Outputs measure long-term impact; outcomes measure immediate products
- Outputs are financial results; outcomes are non-financial results
Correct answer: Outputs are the direct products of program activities; outcomes are the results or changes attributable to those products
Outputs are the direct, tangible products of program activities (e.g., number of inspections conducted), while outcomes are the broader results or changes in conditions that the program aims to achieve.
Question 96: What is 'interperiod equity' in government financial reporting?
- Equal treatment of all fund types in financial statements
- Consistent application of accounting policies across periods
- Fair distribution of tax burdens among citizens
- The concept that current-year revenues should finance current-year services (Correct answer)
Correct answer: The concept that current-year revenues should finance current-year services
Interperiod equity means that today's taxpayers pay for today's services rather than deferring costs to future generations.
Question 97: What is a 'finding' in a government performance audit report?
- A structured presentation of criteria, condition, cause, and effect identifying a deficiency or noteworthy achievement (Correct answer)
- A disclosure of auditor qualifications
- Any observation the auditor makes about program operations
- A summary of recommendations for management action
Correct answer: A structured presentation of criteria, condition, cause, and effect identifying a deficiency or noteworthy achievement
A finding in a performance audit presents the criteria (what should be), condition (what is), cause (why), and effect (so what) to explain the significance of an issue.
Question 98: Regular auditing is also known as .
- Interim audit.
- Final audit.
- Balance sheet audit. (Correct answer)
- Income statement audit.
Correct answer: Balance sheet audit.
Regular auditing, often referred to as a final audit, typically culminates in the examination of the company's financial statements, including the balance sheet and income statement. A balance sheet audit specifically focuses on verifying the assets, liabilities, and equity presented in the balance sheet. In many contexts, a 'regular audit' implies a comprehensive review leading to an opinion on the full set of financial statements, with the balance sheet being a core component.
Question 99: Which of the following is referenced by the term "ESG" in the context of corporate governance?
- environmental, social, and goals
- earnings, social, and general profit
- environmental, social, and governance (Correct answer)
- earnings, shareholders, and governance
Correct answer: environmental, social, and governance
In the context of corporate governance and investment, ESG stands for Environmental, Social, and Governance. These three factors are increasingly used to evaluate a company's sustainability, ethical practices, and overall impact beyond traditional financial metrics, influencing investment decisions and corporate strategy.
Question 100: What is 'pass-through entity' responsibility under federal grant management?
- The pass-through entity must monitor sub-recipients and ensure federal requirements flow down (Correct answer)
- The pass-through entity assumes all liability for sub-recipient fraud
- The pass-through entity must perform audits of sub-recipients
- The pass-through entity must approve all sub-recipient expenditures in advance
Correct answer: The pass-through entity must monitor sub-recipients and ensure federal requirements flow down
Pass-through entities are responsible for monitoring sub-recipients, ensuring that federal compliance requirements are passed down, and reviewing sub-recipient audit findings.
Question 101: Which of the five components of internal control in the Green Book focuses on management's attitudes and commitment to integrity?
- Control Environment (Correct answer)
- Risk Assessment
- Control Activities
- Monitoring
Correct answer: Control Environment
The Control Environment sets the tone of an organization through management's integrity, ethical values, and commitment to competence and accountability.
Question 102: Which of the following better ensures that shareholders are aware of corporate policies and financial results?
- conducting well-organized shareholder meetings and conference calls with the investment community (Correct answer)
- hiring a prestigious independent public accounting firm
- self-evaluation and training for members of the board of directors
- ensuring cultural diversity and public speaking eloquence of the senior management team
Correct answer: conducting well-organized shareholder meetings and conference calls with the investment community
Conducting well-organized shareholder meetings and conference calls with the investment community better ensures that shareholders are aware of corporate policies and financial results. These direct communication channels foster transparency, allow for questions and answers, and provide a structured way for the company to disseminate important information to its investors and the public.
Question 103: A government auditor reviews payroll records, interviews employees, and analyzes timekeeping systems to determine whether the agency is overpaying for labor. This is primarily an example of:
- Financial audit
- Investigative audit
- Compliance audit
- Economy and efficiency audit (Correct answer)
Correct answer: Economy and efficiency audit
Analyzing labor costs and whether the agency is overpaying examines the economy of resource use, a key objective of economy audits.
Question 104: Which GAGAS principle requires auditors to communicate all significant deficiencies and material weaknesses identified during the audit?
- Continuing professional education
- Independence standards
- Reporting requirements for internal control findings (Correct answer)
- Professional skepticism
Correct answer: Reporting requirements for internal control findings
GAGAS reporting requirements mandate that auditors communicate significant deficiencies and material weaknesses in internal control identified during the audit.
Question 105: What is the primary purpose of a government's Comprehensive Annual Financial Report (CAFR), now called Annual Comprehensive Financial Report (ACFR)?
- To present the approved operating budget
- To provide a complete audited picture of a government's financial position and results (Correct answer)
- To summarize federal grant expenditures only
- To report on program performance outcomes
Correct answer: To provide a complete audited picture of a government's financial position and results
The ACFR provides a complete, audited financial overview of a state or local government, including financial statements, notes, and statistical data.
Question 106: The audit that a statute makes required is known as __________ .
- Complete audit.
- Continuous audit.
- Statutory audit. (Correct answer)
- Partial audit.
Correct answer: Statutory audit.
A statutory audit is an audit that is mandated by a specific law or statute, such as company law or banking regulations. Its purpose is to ensure that the financial statements comply with legal requirements and present a true and fair view, thereby protecting the interests of various stakeholders.
Question 107: Which principle requires government auditors to be free from personal, external, and organizational impairments to independence?
- Objectivity and impartiality
- Professional skepticism
- Due professional care
- Independence in fact and appearance (Correct answer)
Correct answer: Independence in fact and appearance
GAGAS requires auditors to maintain independence in both fact (actual state of mind) and appearance (perception by others) throughout the audit.
Question 108: Which reporting element is unique to government audit reports under GAGAS compared to private sector audit reports?
- Statement on compliance with laws and regulations (Correct answer)
- Auditor's signature
- Description of audit scope
- Management's response to findings
Correct answer: Statement on compliance with laws and regulations
GAGAS requires auditors to report on compliance with laws, regulations, and provisions of contracts or grant agreements, which is not standard in private sector audits.
Question 109: Which element of the COSO internal control framework addresses the organization's ethical values and commitment to competence?
- Control environment (Correct answer)
- Control activities
- Monitoring activities
- Risk assessment
Correct answer: Control environment
The control environment is the foundation of internal control, encompassing tone at the top, ethical values, and competence.
Question 110: A government CAE (Chief Audit Executive) receives instructions from management to exclude a high-risk area from the annual audit plan. The appropriate response is to:
- Audit the area secretly without informing management
- Document the exclusion and communicate the resulting risk gap to the governing body (Correct answer)
- Comply immediately to maintain the relationship with management
- Resign from the position to avoid the conflict
Correct answer: Document the exclusion and communicate the resulting risk gap to the governing body
The CAE must document scope limitations and communicate the risk implications to the governing body to maintain transparency and independence.
Question 111: Which of the following best describes 'inherent risk' in a government audit context?
- Risk that internal controls will fail to detect errors
- Risk that the auditor will issue an incorrect opinion
- Risk of material misstatement absent any controls (Correct answer)
- Risk arising from the audit sampling method
Correct answer: Risk of material misstatement absent any controls
Inherent risk is the susceptibility of an assertion to misstatement before considering any related internal controls.
Question 112: During a CGAP audit, an auditor identifies a transaction that is legal but appears to conflict with the entity's code of ethics. The auditor should:
- Immediately notify law enforcement
- Include it only in internal working papers with no further action
- Document and report it as a governance concern to appropriate oversight (Correct answer)
- Ignore it since it is not illegal
Correct answer: Document and report it as a governance concern to appropriate oversight
Ethical violations, even when not illegal, are governance concerns that should be documented and communicated to the appropriate level of oversight.
Question 113: A government company's auditor must be chosen by .
- the debenture holders.
- the share holders.
- the government company itself.
- the central government. (Correct answer)
Correct answer: the central government.
For government companies, the appointment of auditors is typically handled by the Comptroller and Auditor General of India (CAG), who acts on behalf of the Central Government. This ensures government oversight and accountability for entities where the government has a significant stake. Therefore, the central government, through the CAG, is responsible for choosing the auditor.
Question 114: What does the Antideficiency Act prohibit U.S. federal agencies from doing?
- Transferring appropriations between fiscal years
- Hiring contractors without competition
- Obligating funds in excess of amounts appropriated (Correct answer)
- Investing surplus funds in securities
Correct answer: Obligating funds in excess of amounts appropriated
The Antideficiency Act prohibits federal agencies from obligating or expending funds beyond what Congress has appropriated.
Question 115: Which type of government audit evaluates whether a program is achieving its intended results?
- Compliance audit
- Attestation engagement
- Financial audit
- Performance audit (Correct answer)
Correct answer: Performance audit
Performance audits assess effectiveness by examining whether programs are achieving stated objectives and desired outcomes.
Question 116: Under the Yellow Book (GAGAS), which type of audit opinion is issued when financial statements are fairly presented in all material respects?
- Disclaimer of opinion
- Unmodified (unqualified) opinion (Correct answer)
- Qualified opinion
- Adverse opinion
Correct answer: Unmodified (unqualified) opinion
An unmodified opinion means auditors found no material misstatements and the financial statements conform to applicable accounting standards.
Question 117: Which of the following engagement types provides the LOWEST level of assurance under Government Auditing Standards?
- Agreed-upon procedures engagement (Correct answer)
- Attestation examination
- Financial statement audit
- Performance audit
Correct answer: Agreed-upon procedures engagement
Agreed-upon procedures engagements provide no assurance level expressed by the auditor; the auditor only reports findings based on procedures agreed to by specified parties.
Question 118: In OMB Circular A-123, what is the primary purpose of management's assessment of internal control over financial reporting (ICFR)?
- To provide reasonable assurance that financial reporting is reliable and assets are safeguarded (Correct answer)
- To eliminate the need for agency risk assessments
- To replace the external auditor's opinion on financial statements
- To comply solely with FISMA cybersecurity requirements
Correct answer: To provide reasonable assurance that financial reporting is reliable and assets are safeguarded
OMB Circular A-123 requires agencies to assess ICFR to provide reasonable assurance of reliable financial reporting and proper stewardship of public assets.
Question 119: International businesses are ____________ .
- larger and more complex than their domestic counterparts
- based in the United States but operate through the use of heavy investments outside the country via multinational profit centers
- headquartered in a non-US country but have homogeneous profit centers with little differentiation in product or service (Correct answer)
- more likely to be formed as partnerships or sole proprietorships than as corporations
Correct answer: headquartered in a non-US country but have homogeneous profit centers with little differentiation in product or service
While the term 'international business' can encompass various structures, one specific type refers to companies headquartered in one country (often non-US in a global context) that expand their operations abroad while maintaining a relatively homogeneous product or service offering with little differentiation across markets. This strategy emphasizes standardization over extensive local adaptation.
Question 120: What is a 'compensating control'?
- A control that rewards employees for good performance
- A secondary control that mitigates risk when a primary control cannot be implemented (Correct answer)
- A detective control that compensates for preventive control failures
- A financial control that calculates employee compensation
Correct answer: A secondary control that mitigates risk when a primary control cannot be implemented
A compensating control is an alternative control that reduces the risk of error or fraud when the ideal primary control (such as segregation of duties) is impractical.
Question 121: Which federal law requires annual single audits for non-federal entities expending $750,000 or more in federal awards?
- Single Audit Act as amended, implemented via 2 CFR Part 200 (Correct answer)
- Federal Acquisition Regulation
- Inspector General Act
- Government Management Reform Act
Correct answer: Single Audit Act as amended, implemented via 2 CFR Part 200
The Single Audit Act, as amended and implemented through 2 CFR Part 200, requires a single organization-wide audit when federal expenditures meet the threshold.
Question 122: Which ethical principle requires a CGAP auditor to avoid situations where personal relationships could compromise audit judgment?
- Confidentiality
- Due professional care
- Competence
- Independence (Correct answer)
Correct answer: Independence
Independence requires auditors to be free from personal, external, and organizational impairments that could compromise their objectivity.
Question 123: What is the auditor's responsibility regarding the agency's response to performance audit findings?
- The auditor must obtain legal counsel before including agency responses
- The auditor is not required to consider management responses
- The auditor must include the agency's written comments in the report and evaluate their validity (Correct answer)
- The auditor must accept all management responses and revise findings accordingly
Correct answer: The auditor must include the agency's written comments in the report and evaluate their validity
GAGAS requires auditors to include the agency's written comments in the report and to evaluate and address them, noting areas of agreement or disagreement with the agency's position.
Question 124: What is the purpose of a 'risk assessment' component in an internal control framework?
- To identify and analyze risks that could prevent the entity from achieving its objectives, informing how controls should be designed (Correct answer)
- To determine the appropriate level of insurance coverage for the agency
- To assess the risk of external audit findings becoming public
- To identify which employees have the highest fraud risk profiles
Correct answer: To identify and analyze risks that could prevent the entity from achieving its objectives, informing how controls should be designed
Risk assessment involves identifying and analyzing relevant risks to achieving objectives so that management can design appropriate controls to address those risks.
Question 125: A government auditor identifies abuse during a performance audit. Abuse is best described as:
- A violation of federal statutes only
- Behavior that is deficient or improper compared to reasonable practice, even if not illegal (Correct answer)
- A material weakness in internal control
- Any criminal act by a government employee
Correct answer: Behavior that is deficient or improper compared to reasonable practice, even if not illegal
Abuse involves behavior that is unreasonable, improper, or wasteful compared to sound management practices, even if not technically illegal.
Certified Government Auditing Professional (CGAP) Exam
The CGAP certification is designed for auditors working in the public sector, validating their proficiency in government auditing standards, practices, and ethics.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds