8. An auditor correctly performed attribute sampling. Nonetheless, Control Risk was higher (worse) than he thought. What could have caused this? a. The deviation rates of both the auditor's sample and the population exceed the tolerable deviation rate. b. The deviation rates of both the auditor's sample and the population are lower than the tolerable deviation rate. C. The deviation rate in the auditor's sample is lower than the tolerable deviation rate, but the deviation rate in the population is higher than the tolerable deviation rate. d. The deviation rate in the auditor's sample is higher than the tolerable deviation rate, but the deviation rate in the population is lower than the tolerable deviation rate