Question 7 Which of the following is not a responsibility that should be assigned to a company's internal audit department? O A. Evaluating internal control. O B. Approving disbursements. O C. Reporting on the effectiveness of operating segments. O D. Investigating potential merger candidates. Question 8 Which of the following is most likely to be considered a risk assessment procedure relating to internal control? O A. Confirm accounts receivable. O B. Perform a test of a control relating to payroll. O C. Take test counts of the year-end inventory. O D.Trace a transaction through the information system relevant to financial reporting. Question 9 Which of the following is a password security problem? O A. Users are assigned passwords when accounts are created, but do not change them. B. Users have accounts on several systems with different passwords. O C. Users copy their passwords on note paper, which is kept in their wallets. O D. Users select passwords that are not listed in any online dictionary