Positive confirmation requests is not used when:

Group of answer choices

A large number of small balances are involved.

The entity's information systems and internal controls are unreliable or ineffective

The information available to corroborate management's assertion(s) is only available outside the entity

Specific fraud risk factors, such as risk of management override of internal controls, prevent the auditor from relying on evidence from the entity.