CPA Quiz: Engagement Terms And Engagement Letters
20 questions · exam conditions
0:00
Engagement Terms And Engagement LettersQuestion 1 of 20

A CPA is asked to perform an issuer integrated audit (financial statements and internal control over financial reporting) under PCAOB standards. Management wants the engagement letter to state that management is responsible only for providing access to records, while the auditor will be responsible for internal control. What is required to be included in the engagement letter for an issuer audit under PCAOB standards?

A statement that management is responsible for the financial statements and for establishing and maintaining effective internal control over financial reporting.
A statement that the auditor will design, implement, and operate the company's internal controls during the audit.
A statement that the auditor will provide assurance that the company will remain a going concern for at least 12 months.
A statement that the audit will be conducted in accordance with International Standards on Auditing (ISA) without reference to PCAOB standards.
← Back to quizzes

CPA Quiz

CPA Quiz: Engagement Terms And Engagement Letters

Practice Engagement Terms And Engagement Letters in CPA with focused quiz questions that help you check what you know, review explanations, and build confidence with test-style prompts.

What this quiz covers

This quiz focuses on Engagement Terms And Engagement Letters, giving you a quick way to practice the rules, question types, and explanations that matter most for CPA.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

All questions

Question 1

A CPA is asked to perform an issuer integrated audit (financial statements and internal control over financial reporting) under PCAOB standards. Management wants the engagement letter to state that management is responsible only for providing access to records, while the auditor will be responsible for internal control. What is required to be included in the engagement letter for an issuer audit under PCAOB standards?

  1. A statement that management is responsible for the financial statements and for establishing and maintaining effective internal control over financial reporting. (correct answer)
  2. A statement that the auditor will design, implement, and operate the company's internal controls during the audit.
  3. A statement that the auditor will provide assurance that the company will remain a going concern for at least 12 months.
  4. A statement that the audit will be conducted in accordance with International Standards on Auditing (ISA) without reference to PCAOB standards.
Explanation: PCAOB AS 2101 requires the engagement letter for an issuer integrated audit to state management's responsibilities for the financial statements and for establishing and maintaining effective internal control over financial reporting. Management's desire to shift internal control responsibility to the auditor contradicts standards, as the auditor does not assume this role. Choice A aligns with AS 2101 by correctly stating management's responsibilities. Choice B is incorrect as the auditor does not design or operate controls per AS 2101; choice C is incorrect because auditors do not provide going concern assurance in the engagement letter under AS 2415. Choice D is incorrect as PCAOB audits must reference PCAOB standards, not solely ISA, per AS 2101. Auditors should confirm responsibilities in writing to establish clear terms. This framework prevents misunderstandings and ensures compliance with regulatory requirements.

Question 2

In a nonissuer financial statement audit, the audit documentation includes extensive copies of client invoices and contracts, but it does not clearly document the auditor's conclusions on key assertions for revenue and the linkage to the procedures performed. The engagement partner is evaluating documentation sufficiency. Which documentation is necessary to support audit conclusions under AICPA standards?

  1. Documentation that clearly shows the objectives of the procedures, the work performed, the results, and the auditor's conclusions, including significant judgments. (correct answer)
  2. Copies of all client source documents, because quantity of documents alone demonstrates sufficient documentation.
  3. Only a final sign-off checklist, because checklists replace the need to document conclusions.
  4. A separate memo for each transaction tested, because standards require one memo per item selected.
Explanation: AICPA AU-C Section 230 requires documentation that shows procedure objectives, work performed, results, and conclusions, including significant judgments, to support audit opinions. The extensive copies without conclusion linkages fail to meet sufficiency for revenue assertions. Choice A aligns with AU-C 230 by requiring clear documentation of objectives, work, results, and judgments. Choice B is incorrect as quantity does not ensure sufficiency; choice C is incorrect because checklists do not replace conclusions. Choice D is incorrect as standards do not mandate per-transaction memos. Auditors should link documentation to assertions and judgments. This rule ensures comprehensive and defensible audit files.

Question 3

An audit firm has completed the audit of a nonissuer entity. According to AICPA professional standards, for how long must the firm retain the audit engagement documentation from the report release date?

  1. Three years.
  2. Five years. (correct answer)
  3. Seven years.
  4. Ten years.
Explanation: For audits of nonissuers, AICPA Statement on Auditing Standards (AU-C 230) requires audit documentation to be retained for a period of not less than five years from the report release date.

Question 4

During the audit of a client's inventory, a staff auditor found evidence that contradicted management's assertion about inventory valuation. Initially, management provided a persuasive explanation for the discrepancy. However, the auditor subsequently uncovered information that was inconsistent with management's explanation and suggested a material misstatement.

Regarding the situation described, which of the following is the most appropriate way to document this matter?

  1. The documentation should include both the contradictory evidence and the final resolution of the matter. (correct answer)
  2. Only the final conclusion should be documented to avoid creating a record of a resolved issue.
  3. The initial finding and management's explanation should be documented, but not the subsequent contradictory information.
  4. The workpapers should be revised to remove the initial finding, as it was subsequently clarified.
Explanation: Auditing standards require the auditor to document significant findings or issues, actions taken to address them, and the basis for the conclusions reached. This includes documenting information the auditor has identified that is inconsistent with or contradicts the auditor's final conclusion. Discarding or ignoring such evidence is improper.

Question 5

An engagement quality reviewer is examining the audit documentation for a significant and complex accounting estimate related to a contingent liability. Which of the following would represent the most significant deficiency in the documentation?

  1. The workpapers do not include a copy of the prior year's workpaper for the same estimate.
  2. The documentation fails to describe how the auditor evaluated the reasonableness of management's key assumptions. (correct answer)
  3. The preparer's name is included, but the specific date of preparation is missing from the workpaper header.
  4. The workpapers do not contain a detailed biography of the external legal counsel used by management.
Explanation: For significant accounting estimates, the most critical aspect of the audit is evaluating the reasonableness of the data and assumptions used by management. A failure to document this evaluation means there is no evidence of the primary audit procedure performed, which is a significant deficiency in the documentation.

Question 6

An auditor auditing a nonissuer decides not to use external confirmations for a material accounts receivable balance, which is a departure from a presumptively mandatory requirement in GAAS. To be considered sufficient, the audit documentation for this decision must include the:

  1. alternative procedures performed to obtain sufficient appropriate evidence and the justification for the departure. (correct answer)
  2. results of confirmations from the prior year's audit, which showed no exceptions.
  3. waiver signed by the entity's chief executive officer and chief financial officer.
  4. statement that management requested the omission of confirmations to reduce audit fees.
Explanation: When an auditor departs from a presumptively mandatory requirement (indicated by 'should' in the standards), the auditor must document the justification for the departure and how the alternative audit procedures performed were sufficient to achieve the intent of that requirement. Management's request or a waiver cannot override GAAS.

Question 7

An audit manager reviews a staff accountant's workpaper and leaves a review note identifying a procedural error. Which of the following best demonstrates sufficient documentation related to the clearance of this review note?

  1. The staff accountant verbally informs the manager that the error has been corrected.
  2. The manager corrects the workpaper directly and deletes the review note without any further notation.
  3. The original workpaper with the error is discarded and replaced with a corrected version.
  4. The staff accountant documents the corrective action taken, and the manager documents that the review note has been satisfactorily resolved. (correct answer)
Explanation: Sufficient documentation requires evidence of supervision and review. This includes documenting the review process itself. The review note, the action taken to resolve it, and the reviewer's sign-off on the resolution should all be part of the final audit documentation to demonstrate proper supervision and quality control.

Question 8

Sixty-five days after the audit report release date for a nonissuer, an auditor discovers that a key workpaper was inadvertently omitted during the final assembly of the audit file. The documentation completion date was 60 days after the report release date. The auditor should:

  1. not add the workpaper to the file because the documentation completion date has passed.
  2. add the workpaper to the file and backdate it to the date of fieldwork completion.
  3. add the workpaper to the file but document the specific reason for the addition, and when and by whom it was added and reviewed. (correct answer)
  4. create a new, separate file for the omitted workpaper and any other information discovered after the documentation completion date.
Explanation: After the documentation completion date, the auditor must not delete or discard documentation but may add to it. If new information is added, the auditor must document the circumstances, including the reason for the addition, the date it was added, and the individuals who prepared and reviewed it.

Question 9

An auditor is reviewing the documentation related to the test of controls over cash disbursements. The documentation would be considered insufficient if it failed to include the:

  1. names of all employees authorized to approve disbursements.
  2. criteria used to select the disbursements for testing. (correct answer)
  3. year-end balance of the cash account being audited.
  4. flowchart of the entire cash disbursement process.
Explanation: To enable an experienced auditor to understand the work performed, the documentation must describe the nature, timing, and extent of procedures. For a test of controls, this includes documenting how the items were selected for testing (e.g., criteria for selection, population, sampling method). Without this, the extent of the test cannot be determined.

Question 10

An auditor's workpaper for testing the existence assertion for new equipment additions includes a list of assets selected from the fixed asset register, a notation of 'Vouched to physical asset,' and the initials of the auditor who performed the procedure.

To be considered sufficient documentation under professional standards, what additional information is most critical?

  1. The depreciation expense and method for each selected asset.
  2. A photocopy of the purchase invoice for each selected asset.
  3. The unique serial number or other specific identification of each physical asset that was inspected. (correct answer)
  4. The estimated useful life of each selected asset.
Explanation: Sufficient documentation requires recording the identifying characteristics of the items tested. For the physical inspection of assets, this means documenting the unique serial number, asset tag number, or other specific description that ties the physical asset inspected back to the client's accounting records. This allows for reperformance and review of the work.

Question 11

A senior auditor is reviewing a junior auditor's documentation of a test of a control that requires a manager's signature for approval on all purchase orders over $10,000. The workpaper states, 'Selected 30 POs over $10,000 and verified manager approval.' The senior auditor determines this documentation is insufficient primarily because it:

  1. does not include a photocopy of each approved purchase order.
  2. fails to identify the specific 30 purchase orders that were selected for the test. (correct answer)
  3. does not conclude on the control's effectiveness for the entire fiscal year.
  4. fails to cross-reference to the audit program step being performed.
Explanation: A fundamental requirement of audit documentation is to record the identifying characteristics of the specific items tested. Simply stating '30 POs' is insufficient because it does not allow a reviewer or successor auditor to understand exactly which items were tested. The documentation must list the specific purchase order numbers or other identifiers.

Question 12

An auditor held a significant discussion with the client's Chief Financial Officer regarding the potential impairment of a major asset group. What is the auditor's primary responsibility for documenting this conversation?

  1. No documentation is needed as oral evidence is not considered reliable.
  2. The auditor should request the CFO to provide a signed summary for the audit file.
  3. The auditor must prepare a memorandum summarizing the key points of the discussion and include it in the audit file. (correct answer)
  4. A brief, one-sentence note in the margin of the related lead schedule is sufficient.
Explanation: Auditing standards require the documentation of significant findings or issues, and discussions with management regarding these issues are a key part of that. The auditor is responsible for documenting these discussions, typically through a memo to the file, to record the nature of the matter discussed and the conclusions reached.

Question 13

A CPA is considering accepting a nonissuer financial statement audit engagement. The client had a predecessor auditor who resigned after disputes over proposed adjustments. The prospective auditor has obtained permission from management to contact the predecessor auditor. Under AICPA standards, under what circumstances should the auditor communicate with the predecessor auditor before acceptance?

  1. Only after the prospective auditor has issued the first audit report, because communications are part of the subsequent events review.
  2. Before acceptance, to inquire about management integrity, disagreements, and reasons for the change in auditors. (correct answer)
  3. Only if the client is an issuer, because predecessor communications are required only under PCAOB standards.
  4. Only if the predecessor auditor agrees to reperform the audit procedures for the successor auditor.
Explanation: AICPA AU-C Section 210 requires the prospective auditor to communicate with the predecessor auditor before accepting the engagement to obtain information on management integrity, disagreements, and reasons for the change. The predecessor resigned due to disputes over adjustments, which raises potential integrity or scope issues that must be inquired about prior to acceptance. Choice B aligns with AU-C 210 by specifying communication before acceptance to gather this critical information. Choice A is incorrect as communications must occur before acceptance, not after the first report, per AU-C 210; choice C is incorrect because predecessor communications are required for nonissuers under AICPA standards, not just PCAOB. Choice D is incorrect as the predecessor is not required to reperform procedures under AU-C 210. Auditors should assess predecessor information to inform acceptance decisions and plan accordingly. This judgment framework helps identify risks early and ensures ethical engagement acceptance.

Question 14

A PCAOB-registered firm is performing an issuer financial statement audit. The engagement team performed walkthroughs and identified a control deficiency but did not document the basis for concluding it was not a material weakness. The engagement partner is evaluating documentation sufficiency under PCAOB standards. Which documentation is necessary to support the conclusion?

  1. Documentation of the severity evaluation, including likelihood and magnitude considerations, and the evidence supporting the conclusion. (correct answer)
  2. A statement in the audit report that the deficiency is not material, because the report itself is sufficient documentation.
  3. Only the client's remediation plan, because management's plan determines severity.
  4. A legal letter from the company's counsel opining on control deficiency severity.
Explanation: PCAOB AS 2201 requires documentation of the evaluation of control deficiency severity, including likelihood and magnitude, to support conclusions on material weaknesses in issuer audits. The lack of basis for the non-material conclusion necessitates documented evidence and rationale. Choice A aligns with AS 2201 and AS 1215 by requiring severity evaluation documentation. Choice B is incorrect as the audit report does not substitute for internal documentation per AS 1215; choice C is incorrect because severity is auditor-determined, not solely by remediation. Choice D is incorrect as legal opinions are not required for severity per AS 2201. Auditors should document evidence-based conclusions on deficiencies. This framework ensures defensible ICFR opinions.

Question 15

An auditor is drafting an engagement letter for a nonissuer financial statement audit of a manufacturing company. Management requests that the letter state the auditor will "detect all fraud" and "certify the accuracy" of the financial statements. Which engagement letter term is most appropriate under AICPA standards?

  1. State that the auditor will provide absolute assurance and certify that the financial statements are accurate in all respects.
  2. State that the auditor's responsibility is to express an opinion and that the audit provides reasonable assurance, not a guarantee, regarding material misstatement due to fraud or error. (correct answer)
  3. State that management is not responsible for internal control because the auditor will design and maintain controls during the audit.
  4. Omit any discussion of fraud because fraud responsibilities are implied by the issuance of an audit report.
Explanation: AICPA AU-C Section 210 requires engagement letters to clearly state the auditor's responsibility to express an opinion based on reasonable assurance, not absolute assurance or a guarantee against misstatements. Management's request for statements on detecting all fraud and certifying accuracy misaligns with standards, as audits provide reasonable but not absolute assurance. Choice B correctly reflects AU-C 210 and AU-C 240 by stating the auditor's responsibility for an opinion with reasonable assurance regarding material misstatements due to fraud or error. Choice A is incorrect as auditors do not provide absolute assurance or certification under AU-C 200; choice C is incorrect because management retains responsibility for internal control per AU-C 210. Choice D is incorrect as fraud responsibilities must be explicitly addressed in the engagement letter per AU-C 210, not omitted. Auditors should use professional judgment to draft letters that accurately reflect responsibilities and manage client expectations. This framework ensures mutual understanding and reduces engagement risks.

Question 16

In an issuer financial statement audit under PCAOB standards, the engagement team documents significant findings in separate memos but does not include cross-references to the underlying evidence in the workpapers. The engagement partner is evaluating whether documentation is sufficient to enable an experienced auditor to understand the work performed. Which documentation approach best meets PCAOB documentation sufficiency expectations?

  1. Maintain memos without cross-references, because experienced auditors can infer the evidence from the conclusion.
  2. Include cross-references or other clear links from significant findings and conclusions to the supporting evidence and procedures in the workpapers. (correct answer)
  3. Rely on oral explanations from team members during inspection rather than written cross-references.
  4. Document only review notes resolution, because that demonstrates sufficient engagement quality.
Explanation: PCAOB AS 1215 requires audit documentation to include clear links from findings and conclusions to supporting evidence via cross-references, enabling an experienced auditor to understand the work. The separate memos without references fail to meet this linkage requirement. Choice B is correct as it emphasizes cross-references to evidence, aligning with AS 1215. Choice A is incorrect because lack of references hinders understanding; choice C is incorrect as written links are required over oral. Choice D is incorrect as review notes alone do not suffice. Auditors should use cross-references for traceability. This framework facilitates inspections and quality control.

Question 17

A CPA is drafting an engagement letter for a nonissuer financial statement audit of a private equity fund. The fund administrator will prepare the financial statements, and management requests that the auditor accept responsibility for drafting the statements and related disclosures. Which engagement letter term is most appropriate under AICPA standards?

  1. State that the auditor is responsible for preparing the financial statements and disclosures as part of the audit.
  2. State that management is responsible for the preparation and fair presentation of the financial statements in accordance with the applicable framework. (correct answer)
  3. State that responsibility for the financial statements is shared equally by management and the auditor.
  4. Omit responsibility language because it is understood in practice and not required in an engagement letter.
Explanation: AICPA AU-C Section 210 requires the engagement letter to state management's responsibility for the preparation and fair presentation of financial statements in accordance with the applicable framework. The request to shift drafting responsibility to the auditor contradicts standards, as management retains this duty. Choice B is correct as it accurately states management's responsibility per AU-C 210. Choice A is incorrect because auditors do not prepare statements as part of the audit; choice C is incorrect as responsibilities are not shared equally. Choice D is incorrect as responsibility language is required in letters per AU-C 210. Auditors should clarify roles to avoid conflicts. This framework establishes accountability and reduces risks.

Question 18

In a nonissuer financial statement audit, the auditor performed sampling for accounts payable and concluded completeness was fairly stated. The documentation lists the sample size but does not identify the specific items selected or how they were selected. The partner is deciding whether documentation is sufficient. Which documentation is necessary to support this audit conclusion under AICPA standards?

  1. Identification of the population, sampling method, and the specific items selected (or other means to identify the items tested), along with results. (correct answer)
  2. Only the sample size and a statement that sampling risk was considered, because item identification is not required.
  3. A list of all vendor invoices for the year, because including the entire population replaces the need to document the sample.
  4. A memo stating that the auditor used professional judgment, without describing the items tested, because judgment is sufficient support.
Explanation: AICPA AU-C Section 230 requires documentation for sampling to identify the population, method, specific items selected, and results to support conclusions. The lack of item identification and selection details undermines sufficiency for the completeness conclusion. Choice A aligns with AU-C 230 and AU-C 530 by specifying required sampling documentation. Choice B is incorrect as item identification is required per AU-C 530; choice C is incorrect because full populations do not replace sample documentation. Choice D is incorrect as judgment alone without details is insufficient. Auditors should ensure sampling documentation allows procedure replication. This rule supports reliable testing conclusions.

Question 19

A CPA is preparing an engagement letter for a nonissuer financial statement review under AICPA SSARS. Management asks the accountant to describe the engagement as providing "audit-level assurance." Which engagement letter language is most appropriate?

  1. State that a review provides reasonable assurance and includes obtaining an understanding of internal control and tests of details.
  2. State that a review provides limited assurance primarily through inquiry and analytical procedures and does not express an audit opinion. (correct answer)
  3. State that the accountant will express an opinion on the financial statements and will confirm receivables.
  4. Omit a description of the level of assurance to avoid confusing users.
Explanation: AICPA AR-C Section 90 requires review engagement letters to describe the limited assurance provided through inquiry and analytical procedures, without expressing an audit opinion. Management's request for 'audit-level assurance' misrepresents the review's scope, which is less than an audit. Choice B aligns with AR-C 90 by correctly stating the limited assurance and procedures. Choice A is incorrect as reviews do not provide reasonable assurance or include internal control understanding per AR-C 90; choice C is incorrect because reviews do not express opinions or require confirmations. Choice D is incorrect as the level of assurance must be described per AR-C 90. Accountants should clarify service scope in letters to manage expectations. This framework aids in distinguishing assurance levels and avoiding liability.

Question 20

In which of the following situations would an auditor most likely be required to prepare the most extensive documentation related to professional judgment?

  1. Determining the sample size for testing controls over payroll processing in a highly automated system with low control risk.
  2. Evaluating the reasonableness of a Level 3 fair value measurement for a material, unique financial instrument. (correct answer)
  3. Concluding on the adequacy of the allowance for doubtful accounts for a client with a long history of predictable credit losses.
  4. Verifying the year-end cash balance by reconciling the bank confirmation to the client's books.
Explanation: The extent of documentation for significant professional judgments depends on the complexity and subjectivity of the matter. A Level 3 fair value measurement relies on unobservable inputs and significant management assumptions, requiring complex and subjective auditor judgment. This necessitates extensive documentation of the auditor's procedures, evidence, and conclusion on reasonableness.