CPA Bar Quiz: Information Systems And Reporting

What this quiz covers

This quiz focuses on Information Systems And Reporting, giving you a quick way to practice the rules, question types, and explanations that matter most for CPA Bar.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

Question 1

1. A spreadsheet workbook with linked tabs for each data category
2. A data warehouse that stores historical data in a structured format optimized for analytical queries (correct answer)
3. An online transaction processing (OLTP) system designed for real-time transaction entry and retrieval
4. A document management system that stores scanned images of paper sales records

Explanation: A data warehouse is specifically designed to support analytical and reporting workloads over large historical datasets. Its denormalized structure and indexing optimize it for complex queries that join multiple data sources across long time periods. Option A is unsuitable for large-volume, multi-source data requiring relational queries. Option C (OLTP) is optimized for fast, individual transaction processing - not historical analysis or ad hoc queries across large datasets. Option D stores unstructured document images, not structured queryable data.

Question 2

1. UPDATE customers SET balance > 10000
2. DELETE FROM customers WHERE balance > 10000
3. SELECT * FROM customers WHERE balance > 10000 (correct answer)
4. INSERT INTO customers VALUES balance > 10000

Explanation: SELECT is the SQL command for retrieving data. The * retrieves all columns, FROM specifies the table, and WHERE applies the filter condition. This query returns all rows from the customers table where the balance column exceeds 10,000. Option A uses UPDATE, which modifies existing records - it would change data, not retrieve it. Option B uses DELETE, which removes records - a destructive operation. Option D uses INSERT, which adds new records to a table.

Question 3

1. Revenue, which is $400,000 below target
2. Customer satisfaction, which is 6 points below target
3. On-time delivery, which is 7 percentage points below target
4. Gross margin, which is 10 percentage points below target (correct answer)

Explanation: Percentage-point variances: Gross margin = 32% - 42% = -10pp; On-time delivery = 88% - 95% = -7pp; Customer satisfaction = 79 - 85 = -6 points; Revenue = -$400,000 (not a percentage-point measure). Gross margin shows the largest negative percentage-point gap at -10 points. Option A measures revenue in dollars, not percentage points. Options B and C correctly calculate their gaps but both are smaller than gross margin's -10pp.

Question 4

1. 4 business days (correct answer)
2. 10 business days
3. 60 calendar days
4. 90 calendar days

Explanation: The SEC requires Form 8-K to be filed within 4 business days of most triggering events, including material agreements, executive officer changes, and other significant corporate events. The 4-business-day rule ensures that material information is promptly disclosed to investors. Option B (10 days) was the prior rule before the SEC tightened 8-K requirements. Options C and D describe deadlines for annual and quarterly reports, not 8-K filings.

Question 5

1. Names and compensation of each segment's senior management team
2. Customer-level revenue detail for the top 10 customers in each segment
3. Specific risks and uncertainties unique to each reportable segment
4. Revenues and a measure of profit or loss for each reportable segment, with total assets disclosed when that amount is regularly provided to the CODM (correct answer)

Explanation: ASC 280 requires disclosure of revenues and a measure of profit or loss for each reportable segment. Total assets must also be disclosed, but only when that amount is included in the measure of segment profit or loss reviewed by the chief operating decision maker (CODM) or is otherwise regularly provided to and used by the CODM to assess segment performance. Additional items - such as depreciation, interest, equity method investments, and capital expenditures - are required when included in segment profit or regularly provided to the CODM. Option A (management compensation) is not a segment disclosure requirement. Option B (customer-level detail) is not required; only entity-wide major customer information for customers exceeding 10% of total revenue is required. Option C (segment-specific risks) is not an ASC 280 requirement.

Question 6

1. Operational dashboard reporting that provides timely data to support short-cycle management decisions (correct answer)
2. External financial reporting prepared in accordance with GAAP
3. Statutory compliance reporting required by regulatory authorities
4. Annual Management Discussion and Analysis (MD&A) reporting

Explanation: An internal weekly flash report is a form of operational management reporting, designed to give managers timely performance data so they can make quick operational decisions - adjusting staffing, expediting orders, or addressing margin issues. Option B is incorrect; internal flash reports are not GAAP-compliant external reports. Option C describes regulatory filings, which are formal compliance documents. Option D describes the annual MD&A, which is a narrative section of the annual report prepared far less frequently.

Question 7

1. Encrypting all company data before it is stored in the primary database
2. Writing SQL queries to extract data from operational systems for reporting purposes
3. Ensuring data quality, accuracy, completeness, and consistency within the assigned domain (correct answer)
4. Performing independent external audits of the company's financial information systems

Explanation: A data steward is responsible for the quality and integrity of data within a specific domain. This includes defining data standards, resolving data quality issues, enforcing consistent definitions, and ensuring data meets the needs of users. Option A describes data security responsibilities, typically managed by IT security. Option B describes an analyst or data engineer role. Option D describes an external auditor function, which is independent of the organization's data stewardship structure.

Question 8

1. Disclosures of the CEO's personal investment portfolio
2. Detailed customer contracts and pricing terms for all material customers
3. Performance evaluations for key employees
4. Results of operations including discussion of liquidity, capital resources, and known trends or uncertainties affecting future performance (correct answer)

Explanation: MD&A under Regulation S-K requires companies to discuss: results of operations comparing periods; liquidity and capital resources; known trends, demands, commitments, or uncertainties material to future performance; and critical accounting estimates. Option A (personal investment portfolios) is not an MD&A requirement; it may appear in proxy statement disclosures under different rules. Options B and C describe disclosures not required in MD&A.

Question 9

1. Predictions about future outcomes based on patterns identified in historical data
2. Summaries and visualizations of historical data that explain what has already occurred (correct answer)
3. Optimization recommendations for the actions management should take
4. Real-time alerts when key performance indicators deviate from defined thresholds

Explanation: Descriptive analytics summarizes historical data to answer the question 'What happened?' through reports, dashboards, and visualizations. Option A describes predictive analytics, which forecasts future outcomes. Option C describes prescriptive analytics, which recommends specific actions. Option D describes a monitoring or alerting function that sits within operational reporting systems, not a type of analytics per se.

Question 10

1. The favorable variance is material and requires immediate external auditor notification
2. Management reporting is not subject to accuracy requirements
3. Presenting data from a system with known quality issues without investigating its reliability undermines the report's value and could drive incorrect business decisions (correct answer)
4. The favorable variance confirms data accuracy because errors typically produce unfavorable results

Explanation: Data quality is a prerequisite for reliable decision-making. Presenting results from a system with documented double-counting issues without verification means the board cannot trust whether the favorable variance is real or an artifact of the data error. If intercompany transactions were double-counted, the actual revenue performance may be below budget rather than above it. Option A overstates the disclosure requirement. Option B incorrectly dismisses accuracy requirements. Option D is logically flawed - data errors can produce either favorable or unfavorable-appearing results.

Question 11

1. RPA systems eliminate the need for any controls within an automated AP process
2. The 5% exception rate is immaterial and does not warrant a control framework
3. The manual exception process may represent the highest-risk portion of the AP cycle; without controls, the automated efficiency of RPA can be circumvented through the uncontrolled manual channel (correct answer)
4. Exception handling is the responsibility of the RPA vendor and is outside the company's internal control scope

Explanation: In automated environments, manual exceptions often represent the highest-risk transactions precisely because they fall outside the automated control framework. Fraudsters and bad actors specifically target exception processes because they know automated controls do not apply there. An uncontrolled manual channel for 5% of AP transactions can expose the company to the same risks the automation was designed to prevent. Option A is incorrect; automation requires its own controls. Option B underweights the risk of exception handling by citing a percentage. Option D is incorrect; the company owns its internal controls regardless of which systems it uses.

Question 12

1. 60 days (correct answer)
2. 75 days
3. 90 days
4. 120 days

Explanation: Large accelerated filers (public float of $700 million or more) must file Form 10-K within 60 days of fiscal year-end. Accelerated filers (public float of$75 million to under $700 million) have 75 days, and non-accelerated filers have 90 days. Option B is the deadline for accelerated filers. Option C is the deadline for non-accelerated filers. Option D is not a standard Form 10-K filing deadline.

Question 13

1. Hiring additional accountants to process the manual data more quickly
2. Switching from a monthly to a quarterly close to reduce the frequency of the process
3. Implementing XBRL tagging for external reports to speed up regulatory filings
4. Integrating departmental data sources into the ERP or a shared data platform so that data flows automatically without manual collection and consolidation (correct answer)

Explanation: The root cause of the delay is manual data collection from fragmented sources. The most direct and scalable solution is to eliminate manual collection by connecting departmental systems to a centralized platform where data updates automatically. This directly addresses the 60% of delay caused by the collection bottleneck. Option A adds headcount to process inefficiency rather than eliminating the inefficiency. Option B reduces frequency but does not address the root cause - each close would still take 12 days. Option C addresses external reporting speed, not internal close efficiency.

Question 14

1. Integrating core business processes - such as finance, HR, supply chain, and operations - into a single unified system with a shared database (correct answer)
2. Automatically generating audited financial statements for submission to external regulatory bodies
3. Replacing internal controls by automating all transaction processing without human intervention
4. Managing only accounting and financial functions while keeping all other business systems separate

Explanation: An ERP system provides a unified platform that integrates previously siloed business processes and data. By using a single shared database, transactions entered in one module (such as sales) automatically flow into related modules (such as accounts receivable and inventory) in real time. Option B overstates ERP's role; ERP generates financial data but audited statements still require human review and professional judgment. Option C is incorrect; ERP systems require robust internal controls, they do not replace them. Option D describes a standalone accounting system, which is a legacy approach that ERP replaced.

Question 15

1. Increase the number of KPIs to 50 to ensure all performance dimensions are represented
2. Remove all KPIs and rely exclusively on exception-based email notifications
3. Replace the dashboard with a detailed weekly spreadsheet report
4. Redesign the dashboard with a smaller set of strategically significant KPIs, using visual hierarchy to distinguish those requiring action from those within acceptable ranges (correct answer)

Explanation: Effective dashboard design prioritizes the signal-to-noise ratio. A dashboard with 35 metrics makes it cognitively difficult to identify the few that genuinely require action. Best practice is to focus on a small number (typically 8-12) of the most strategically important KPIs, using color coding, alert thresholds, and visual hierarchy to draw attention to out-of-range items. Option A compounds the problem by adding more metrics. Option B eliminates the proactive monitoring function entirely. Option C substitutes a time-delayed report for a real-time tool without addressing the usability problem.

Question 16

1. The $1,300,000 gap should be fully reconciled and explained - it likely reflects non-cash charges or non-recurring items excluded in the management view, and understanding these is critical for evaluating sustainable operational performance (correct answer)
2. The GAAP figure should always be used exclusively and management reports should be disregarded
3. A gap between GAAP and management reporting always indicates financial manipulation
4. Management reports reflect economic reality more accurately than GAAP and should be given more weight

Explanation: The $1,300,000 gap between GAAP and management operating income is significant. Understanding the specific items excluded in the management view - such as depreciation, amortization, restructuring charges, or stock-based compensation - determines whether the management figure is a meaningful measure of ongoing operational performance or a flattering presentation that obscures real costs. Neither the GAAP nor management figure is automatically superior; both provide useful but different information when properly reconciled. Option B dismisses a legitimate and widely used analytical tool. Option C confuses a common reporting practice with manipulation. Option D overstates the management figure's superiority.

Question 17

1. The CFO should not consolidate reports from business units with different systems
2. The absence of a consistent enterprise-wide revenue definition is a data governance failure that creates reporting inconsistency, comparability problems, and risk of error in consolidated financial reporting (correct answer)
3. Each business unit should maintain its own revenue definition because their business models differ
4. ERP consolidation modules automatically resolve definitional inconsistencies during the consolidation process

Explanation: Data governance establishes the standards, definitions, and rules that ensure data is used consistently across an organization. When two business units use materially different definitions of the same metric (cash vs. accrual revenue), any consolidated figure is methodologically inconsistent and potentially misleading. This is a fundamental data governance failure - the organization lacks a common data dictionary enforcing consistent definitions. Option A avoids the problem rather than solving it. Option C perpetuates the inconsistency. Option D is incorrect; ERP consolidation modules aggregate data but do not resolve definitional inconsistencies between source systems.

Question 18

1. A threshold that is being deliberately exploited by structuring purchase orders just below the approval trigger to systematically bypass the VP approval requirement (correct answer)
2. An ERP configuration error because the $500,000 threshold was set too high for this vendor relationship
3. An appropriate use of the purchasing system because each individual order is legitimately below the approval threshold
4. A data integrity issue caused by duplicate purchase order entries in the ERP system

Explanation: Eight purchase orders from the same vendor, all clustering between $480,000 and$499,000 within a single month, is a clear pattern consistent with intentional structuring - deliberately sizing or splitting transactions to remain just below the $500,000 approval threshold and bypass VP oversight. Structuring of control thresholds is a well-documented fraud and circumvention technique. The appropriate response is to escalate the pattern for investigation and review whether the combined economic substance of these transactions constitutes a single arrangement requiring higher-level approval. Option B misidentifies the threshold level as the issue rather than the vendor's transaction pattern. Option C evaluates each order in isolation and misses the systematic pattern that signals circumvention. Option D mischaracterizes a behavioral pattern as a data entry problem.

Question 19

1. Line chart
2. Pie chart or stacked bar chart (correct answer)
3. Scatter plot
4. Waterfall chart

Explanation: A pie chart or stacked bar chart is designed to show part-to-whole relationships - how individual components (product categories) contribute to a total (revenue). Both display proportions effectively. Option A (line chart) is suited for showing trends over time. Option C (scatter plot) is suited for showing the relationship between two continuous variables. Option D (waterfall chart) is suited for showing how a starting value builds up or breaks down through a series of additions and subtractions.

Question 20

1. Compliance risk only, because cloud providers are regulated differently from on-premises systems
2. Data security, availability, and vendor dependency risk, because the company now relies on a third party to protect, maintain, and provide access to its financial data (correct answer)
3. Operational risk only, because cloud systems are statistically more reliable than on-premises systems
4. No additional risk is created because cloud providers are inherently more secure than company-managed infrastructure

Explanation: Migrating to a third-party cloud introduces several interconnected risks: the provider now controls access to critical data (vendor dependency risk), data security depends on the provider's controls rather than the company's own (security risk), and service availability is subject to the provider's uptime guarantees rather than the company's own infrastructure (availability risk). Additionally, regulatory requirements for data residency and privacy may create compliance implications. Options A, C, and D each narrowly characterize the risk or incorrectly dismiss it, when in reality the transition creates a multi-dimensional risk profile that requires assessment.