CPA Isc Quiz: Evaluate Input Processing And Output Controls

What this quiz covers

This quiz focuses on Evaluate Input Processing And Output Controls, giving you a quick way to practice the rules, question types, and explanations that matter most for CPA Isc.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

Question 1

1. A field validation that rejects entries exceeding a maximum dollar amount.
2. A batch control total that compares the sum of transaction amounts before and after processing to verify completeness. (correct answer)
3. A report that lists all transactions processed during the period for management review.
4. A system prompt that requires users to confirm their identity before entering data.

Explanation: A batch control total that reconciles pre- and post-processing totals is a processing control - it verifies that all transactions were processed correctly and completely. Answer B is correct. Field validation (A) is an input control. Management reports (C) are output controls. Identity confirmation (D) is an access control.

Question 2

1. Reasonableness or limit check - flagging entries that exceed a defined threshold as potentially implausible. (correct answer)
2. Format check - verifying the salary is entered in the correct numeric format.
3. Completeness check - ensuring all required payroll fields are populated.
4. Duplicate check - preventing the same employee from being entered twice.

Explanation: A limit check flags values above or below defined thresholds as potentially unreasonable - salaries over $500,000 may be valid but warrant additional scrutiny. Answer A is correct. Format checks (B) validate structure. Completeness (C) ensures fields are filled. Duplicate checks (D) prevent repeated entries.

Question 3

1. Encryption of the batch file before processing begins.
2. Access controls limiting who can initiate batch processing runs.
3. A run-to-run control total that compares the number of records and total amounts processed against expected totals established before the run. (correct answer)
4. A format check validating the structure of each transaction record.

Explanation: Run-to-run control totals compare expected counts and amounts to actual processed results, directly detecting incomplete processing - the 20 missing transactions would cause a discrepancy. Answer C is correct. Encryption (A) addresses confidentiality. Access controls (B) address authorization. Format checks (D) validate data structure, not completeness of processing.

Question 4

1. A check that verifies a numeric field falls within an acceptable range.
2. A check that verifies the data matches an authorized reference table value.
3. A check that verifies the data is in the correct format (e.g., date format MM/DD/YYYY).
4. A check that verifies all required fields in a record are populated before the record can be saved. (correct answer)

Explanation: A completeness check ensures no mandatory fields are left blank - preventing records with missing critical data from entering the system. Answer D is correct. Range checks (A), validity checks (B), and format checks (C) address different data quality dimensions.

Question 5

1. Input validation - preventing entries in incorrect date formats.
2. Processing control - enforcing period-end cutoff by preventing transactions from being processed to a closed accounting period. (correct answer)
3. Output control - ensuring reports reflect only transactions in the current period.
4. Access control - restricting which users can post journal entries.

Explanation: Period locking is a processing control that enforces accounting cutoff - ensuring no transactions are processed to periods that have already been closed. Answer B is correct. Date format validation (A) is an input control. Report filtering (C) is an output function. User restrictions (D) are access controls.

Question 6

1. To create a unique numeric fingerprint of batch data (e.g., sum of account numbers) that can be compared before and after processing to detect any changes or losses. (correct answer)
2. To encrypt batch data before transmission to prevent unauthorized access.
3. To assign a unique transaction identifier to each record in the batch.
4. To compress batch data to reduce processing time and storage requirements.

Explanation: A hash total (e.g., sum of transaction numbers or account numbers) has no business meaning but serves as a control - if the total changes between input and output, records were added, removed, or altered. Answer A is correct. Encryption (B), unique IDs (C), and compression (D) serve different purposes.

Question 7

1. Input control - validating journal entries before posting.
2. Processing control - ensuring journal entries are calculated correctly.
3. Access control - restricting who can view journal entries.
4. Output control - using system-generated reports as a detective control to identify unusual or unauthorized transactions after posting. (correct answer)

Explanation: Reviewing system-generated output reports to detect unusual items after processing is a detective output control. Answer D is correct. The review occurs after posting (not input A or processing B), and is a detective control, not an access restriction (C).

Question 8

1. An input control verifying payroll data at entry.
2. A processing control ensuring the payroll calculations are correct.
3. An output control reconciling system-generated totals to the general ledger to verify completeness and accuracy of the payroll processing. (correct answer)
4. An access control limiting who can approve payroll disbursements.

Explanation: Reconciling the system's output control report to the GL after processing is an output control - using the system's own totals as evidence of complete, accurate processing. Answer C is correct. Payroll entry validation (A) is input. Calculation verification (B) is processing. Access restrictions (D) are separate.

Question 9

1. Encrypting all billing data and storing it in a secure database.
2. Input: validating customer IDs and amounts at entry; Processing: run-to-run control totals verifying all invoices are processed; Output: reconciling billed amounts to the accounts receivable ledger. (correct answer)
3. Restricting billing system access to accounts receivable staff only.
4. Generating daily billing reports and distributing them to the finance team.

Explanation: A complete application control suite covers all three layers: input validation catches data errors at entry; processing controls verify completeness during the run; output reconciliation confirms the results are accurately reflected downstream. Answer B is correct. Encryption (A) and access controls (C) are IT general controls. Report distribution (D) is only one output control.

Question 10

1. Attempting to enter transactions with invalid customer IDs, missing required fields, or out-of-range amounts, and verifying that the system rejects or flags them. (correct answer)
2. Reviewing the system's access control log to identify who has made entries.
3. Reconciling the total revenue recognized to the general ledger balance.
4. Reviewing the disaster recovery plan for the revenue recognition system.

Explanation: Testing input controls requires attempting to enter invalid data and confirming the system properly rejects or flags the exceptions - directly evaluating whether validation rules operate as designed. Answer A is correct. Access logs (B) test access controls. Reconciliation (C) tests output controls. DR plans (D) are not application control tests.

Question 11

1. A processing control that recalculates debits and credits after posting.
2. An output control that generates a trial balance report.
3. An input control that enforces the fundamental accounting equation at the point of data entry. (correct answer)
4. An access control requiring two users to approve each journal entry.

Explanation: Requiring balanced debits and credits before saving is an input validation - it enforces a fundamental accounting rule at the moment of data entry, preventing unbalanced entries from ever being recorded. Answer C is correct. This occurs at entry, not during post-entry processing (A) or reporting (B). It's a data rule, not an authorization control (D).

Question 12

1. To encrypt input data fields for security before database storage.
2. To generate output reports summarizing all input transactions for management review.
3. To restrict which users are authorized to enter data into the application.
4. To automatically validate data at the point of entry using rules such as format, range, completeness, and validity checks - rejecting or flagging entries that fail validation. (correct answer)

Explanation: Edit checks are automated input validation rules that enforce data quality standards at entry time, preventing invalid data from entering the system. Answer D is correct. Encryption (A), reporting (B), and access restriction (C) are separate control types.

Question 13

1. A range check input control enforcing reasonable boundaries for useful life values. (correct answer)
2. A validity check verifying the useful life against an authorized list.
3. A completeness check ensuring the useful life field is not blank.
4. A processing control applied during the depreciation calculation run.

Explanation: Enforcing minimum and maximum acceptable values for a field is a range check - one of the fundamental input validation types. Answer A is correct. Validity checks reference a list (B). Completeness checks prevent blanks (C). The control occurs at entry, not during processing (D).

Question 14

1. A range check validating transaction amounts.
2. A completeness check ensuring all required fields are populated.
3. An output reconciliation comparing processed totals to source documents.
4. A duplicate transaction check that compares new entries to previously processed transactions on key fields such as vendor, invoice number, amount, and date. (correct answer)

Explanation: Duplicate transaction detection specifically compares new transactions to historical records on key identifying fields, preventing the same transaction from being processed more than once. Answer D is correct. Range checks (A) and completeness checks (B) validate data characteristics. Output reconciliation (C) detects discrepancies after processing.

Question 15

1. Reviewing the application's access control list to confirm only authorized users can access the system.
2. Re-performing a sample of interest calculations manually using known inputs and comparing the results to system outputs to verify calculation accuracy. (correct answer)
3. Reviewing the system's backup logs to confirm data is protected.
4. Confirming that the application was tested before its initial deployment.

Explanation: Re-performing calculations with known inputs and comparing to system outputs directly tests whether the application's processing logic produces accurate results - the most direct test of processing control effectiveness. Answer B is correct. Access lists (A) test access controls. Backup logs (C) test recovery controls. Initial testing documentation (D) is historical evidence, not a current control test.

Question 16

1. A checklist or automated template that validates the financial statement package against required components (all statements, notes, supplementary schedules) before distribution. (correct answer)
2. Encrypting the financial statements before sending them to external parties.
3. Requiring that financial statements be printed on company letterhead.
4. Storing a copy of all financial statements in an archive system.

Explanation: A completeness checklist or automated validation against required components ensures all required elements of the financial statement package are present before distribution - directly addressing output completeness. Answer A is correct. Encryption (B) and letterhead (C) are presentation/security concerns. Archiving (D) addresses retention, not completeness.

Question 17

1. Ensure that data entered into a system is accurate, complete, and authorized before it is processed. (correct answer)
2. Encrypt all data as it is entered to protect confidentiality.
3. Prevent unauthorized users from logging into the application.
4. Generate output reports that management uses for decision-making.

Explanation: Input controls are the first line of application control - validating data at the point of entry to prevent inaccurate, incomplete, or unauthorized data from entering the system. Answer A is correct. Encryption (B) is a security control. Authentication (C) is an access control. Report generation (D) is an output function.

Question 18

1. Requiring the report to be printed on secure paper.
2. Restricting electronic access to the report to finance managers only.
3. Reconciling the prior period figures in the report to the prior period's audited financial statements or general ledger balances. (correct answer)
4. Applying a date stamp to all report pages when printed.

Explanation: Reconciling comparative period figures to audited or agreed-upon prior period balances is the most effective control for verifying accuracy of prior period output data. Answer C is correct. Secure paper (A) and date stamps (D) are physical controls with limited value. Access restriction (B) is an authorization control.

Question 19

1. An output control that verifies payment reports after disbursements are made.
2. An access control that restricts payment processing to authorized staff.
3. A processing control that validates transactions against multiple authorization records before allowing them to proceed. (correct answer)
4. An input control that validates invoice data format at the time of entry.

Explanation: The three-way match occurs during the payment processing stage - verifying the transaction against source documents (PO and receipt) before allowing processing to continue. It is a processing control. Answer C is correct. Output controls (A) operate after processing. Access controls (B) restrict users. Input controls (D) validate at entry.

Question 20

1. Applying range checks to all numeric fields in the report.
2. Requiring a second approver to review all report calculations.
3. Encrypting report data before it is processed by the system.
4. Implementing distribution controls that restrict report delivery to authorized users and require logging of report access. (correct answer)

Explanation: Output controls over distribution ensure reports are delivered to and accessed only by authorized individuals - preventing sensitive financial or operational data from reaching unauthorized parties. Answer D is correct. Range checks (A) are input controls. Secondary approval (B) is an authorization control. Encrypting during processing (C) is a security control, not an output distribution control.