21) 21) Before making the final assessment of internal control at the end of an audit, the auditor must Perform substantive tests Yes A) Test controls Yes Test controls Yes Perform substantive tests No B) Perform substantive tests Yes C) Test controls No D) Test controls No Perform substantive tests No 22) When assessing control risk, A) all controls, including key controls, should be considered. B) many auditors use actuarial tables to assist in the control risk assessment process C) each control can be used to satisfy only one audit objective. D) many auditors use a control risk matrix to assist in the control risk assessment process. 23) 23) The employee in charge of authorizing credit to the company's customers does not fully understand the concept of credit risk. This lack of knowledge would A) constitute a deficiency in operation of internal controls B) not constitute a deficiency C) constitute a deficiency of management. D) constitute a deficiency in design of internal controls 24) An auditor is likely to use four types of procedures to support the operating effectiveness of 24) internal controls. Which of the following would generally not be used? A) reperform client procedures B) make inquiries of appropriate client personnel C) inspect design documents D) examine documents, records, and reports