Free MCQ tier

5,000 CPA practice questions are live across all six sections.

AUD topic guide

Internal control for AUD CPA candidates.

Internal control questions ask whether a control addresses the risk, whether it was designed well, and whether there is evidence it operated effectively.

By World of Accountants editorial team. Last reviewed August 23, 2026. World of Accountants is independent and not affiliated with the AICPA, NASBA, Becker, NINJA, UWorld, Gleim, or other CPA review providers.

AUD sample question

Test the rule before you leave this AUD guide.

Read the topic explanation, then use this real AUD question to check whether the controlling fact is sticking.

AUD-000003AUD-IIUnderstanding an entity and its environment

An auditor is planning the audit of a regional bank during a period of rapidly rising interest rates. Which factor is most relevant to understanding the entity and its environment?

  1. A.Audit staffing constraints that could affect timing but do not explain the bank's external business risk
  2. B.Prior-year representation wording about similar financial statement assertions
  3. C.Whether data extraction tools can support planned loan and investment procedures
  4. D.The bank's exposure to changes in market interest rates
Answer: D. The bank's exposure to changes in market interest rates

Industry and economic conditions, such as rising interest rates, can affect the bank's business risks and the risk of material misstatement.

Why the other answers are wrong
  • A. Staffing constraints can affect audit logistics, but the question asks about understanding the bank and its environment. The external interest-rate exposure is the business risk that best fits the facts.
  • B. Prior-year representations may help the auditor understand history, but they do not identify the current economic factor affecting the bank's risk profile.
  • C. Data extraction can matter when designing procedures, but it is not the external condition that most directly affects the bank's business risk.

Core idea

Controls prevent, detect, or correct misstatements. The exam often asks whether the control is properly designed, implemented, or operating effectively.

What AUD likes to test

Expect segregation of duties, authorization, reconciliations, IT general controls, walkthroughs, control testing, significant deficiencies, material weaknesses, and audit response.

Common miss

Candidates often confuse understanding controls with relying on controls. Reliance requires testing operating effectiveness.

How to practice

For each control question, identify the risk, the control activity, the evidence of operation, and what changes in the audit plan.

Practice loop

Use the topic, then answer questions while the idea is fresh.

Short practice sets are enough to expose whether the rule is sticking.

Practice AUD questions