Guide (New 2025) Actual AGA GFMC Exam Questions [Q36-Q55]

* Business Process Re-Engineering (BPR):
* BPR focuses onredesigning key processesto achieve dramatic improvements in efficiency, effectiveness, and performance.
* It typically involves addressing technical systems, human factors, and process workflows, but it does not involve redefining the organization’s mission, which is a strategic activity outside the scope of BPR.
* Explanation of Answer Choices:
* A. Key processes: Incorrect. Key processes are the primary focus of BPR.
* B. Human environment: Incorrect. BPR often addresses human factors, such as roles and responsibilities.
* C. Organizational mission: Correct. The mission is a strategic element and not typically redefined as part of process re-engineering.
* D. Technical environment: Incorrect. BPR often involves rethinking technical systems and workflows.
:
Hammer & Champy,Reengineering the Corporation: A Manifesto for Business Revolution.
GAO,Business Process Re-Engineering for Government Efficiency.

* Response to Weaknesses in Shared Service Providers:
* Shared service providers often issue reports on internal controls (e.g., SOC 1 or SOC 2 reports).
* When a weakness is identified, the recipient agency must evaluate whether compensating or mitigating controls exist to address the risk, ensuring continued reliability.
* Explanation of Answer Choices:
* A. Consider the existence of compensating or mitigating controls: Correct. This is a standard response to internal control weaknesses, as outlined in auditing and risk management best practices.
* B. Ask the service provider to correct the weakness: Incorrect. While this may be appropriate, the recipient agency is ultimately responsible for evaluating and addressing the risk.
* C. Dismiss the weakness: Incorrect. Ignoring a weakness can expose the agency to risk.
* D. Refer the weakness to the Contracting Officer: Incorrect. This may be part of the process, but the agency must first assess the impact and controls.
:
American Institute of Certified Public Accountants (AICPA),SOC Reports Guidance.
Government Accountability Office (GAO),Internal Control Standards for Federal Agencies.

Role of Management in Internal Control Evaluation:
* Responsibility for Risk Identification:Management has the primary responsibility for designing, implementing, and maintaining an effective system of internal controls. As part of this process, management identifies the risks related to fraud, waste, and abuse that could impact financial reporting or operational efficiency.
* Mitigating Risks:Once risks are identified, management is responsible for mitigating them by developing appropriate policies, procedures, and controls.
Role of the Auditor in Internal Control Evaluation:
* Assessing Control Effectiveness:Auditors are not responsible for designing or implementing controls; rather, their role is to evaluate whether the controls put in place by management are effective. They do this through testing, observation, and other audit procedures.
* Fraud Risk Assessment:As part of their duties under Generally Accepted Government Auditing Standards (GAGAS), auditors must assess the risk of material misstatement due to fraud and evaluate how management’s controls address those risks.
Why Other Options Are Incorrect:
* B.Auditors do not identify risks-this is management’s job. Auditors evaluate and assess the controls already in place.
* C.Determining risk tolerance is a governance and management responsibility, not the joint responsibility of auditors and management.
* D.Management mitigates risks, but auditors don’t monitor compliance with controls-they test and evaluate the controls as part of their audit procedures.
References and Documents:
* GAGAS (Yellow Book) by GAO:Emphasizes management’s responsibility for risk identification and the auditor’s responsibility for assessing control effectiveness.
* COSO Internal Control Framework (2013):Highlights management’s responsibility for risk assessment and control design, while auditors provide independent assurance.

What Is Consistency in Performance Measurement?
Aconsistentperformance measure is one that is calculated and reported in the same way over several periods. Consistency allows for meaningful comparisons and trend analysis, making it easier to evaluate performance over time.
Why Consistency Is the Correct answer:
Performance metrics must remain consistent in methodology, definitions, and scope to ensure the results are comparable across time periods. Without consistency, the reliability and usefulness of the data are diminished.
Why Other Options Are Incorrect:
B). Timely:Timeliness refers to how quickly the information is reported, not whether it is measured consistently.
C). Relevant:Relevance ensures the measure is meaningful to the decision-making process, but it does not address consistency.
D). Reliable:Reliability refers to the accuracy and trustworthiness of the data, not its consistency over time.
References and Documents:
GAO Performance Measurement Guide:Stresses the importance of consistency in tracking and reporting metrics over time.

* Understanding the Scenario:The table compares the costs of four printing jobs performed by an
“Internal Print Shop” versus three external vendors (Ace Printing, ABC Printing, and Printing, Inc.).
Each vendor’s pricing varies by print job type. The task is to evaluate whether outsourcing (hiring external vendors) is a reasonable alternative to keeping the work in-house.
* Key Considerations in Outsourcing:According to governmental accounting principles and budgeting practices outlined by theAssociation of Government Accountants (AGA), the decision to outsource should consider:
* Cost-effectiveness: Does outsourcing reduce costs without compromising quality or service delivery?
* Operational efficiency: Can outsourcing free up internal resources for other priorities?
* Comparative pricing: How do external vendor rates compare to internal costs for identical services?
* Analysis of the Print Jobs:Let’s break down the cost comparison for each print job:
* Zone Map:Internal cost = $4.23.Cheapest vendor = Printing, Inc., at $4.00.Outsourcing is cheaper for this job.
* Agenda Packet:Internal cost = $23.18.Cheapest vendor = Printing, Inc., at $22.00.Outsourcing is cheaper for this job.
* Budget Cover:Internal cost = $840.00.Cheapest vendor = ABC Printing, at $624.30.Outsourcing is significantly cheaper for this job.
* Employee Benefit Brochure:Internal cost = $6.14.Cheapest vendor = ABC Printing, at $4.90.
Outsourcing is cheaper for this job.
* Conclusion Based on Analysis:
* Across all four print jobs, the lowest-cost external vendor always beats the Internal Print Shop’s costs.
* From abudgetary perspective, outsourcing is feasible as it offers cost savings across all jobs.
* Why Not A, C, or D?:
* Option A(Keep printing in-house): Incorrect, as in-house costs are consistently higher than the cheapest external vendor.
* Option C(Outsourcing is necessary): Incorrect, as feasibility doesn’t mean necessity; internal printing is still an option if other factors (like quality or control) outweigh costs.
* Option D(Award contract to ABC Printing): Incorrect, since the best vendor depends on the job (e.g., Printing, Inc. is cheaper for Zone Map and Agenda Packet).
:
Association of Government Accountants (AGA),Government Financial Manager Certification Study Guide:
Budgeting, Cost Accounting, and Auditing Principles.
Government Finance Officers Association (GFOA),Best Practices in Outsourcing and Procurement.
Federal Accounting Standards Advisory Board (FASAB),Cost Accounting Standards for Governmental Operations.

What Is the Current Ratio?
* Thecurrent ratiomeasures an entity’s ability to cover its short-term liabilities with its short-term assets.
The formula is: Current Ratio=Total Current AssetsTotal Current Liabilities\text{Current Ratio} = \frac
{\text{Total Current Assets}}{\text{Total Current Liabilities}}
Current Ratio=Total Current LiabilitiesTotal Current Assets
Calculation:
* Total Current Assets = $1,320
* Total Current Liabilities = $810
Current Ratio=1,320810\text{Current Ratio} = \frac{1,320}{810}Current Ratio=8101,320 Current Ratio#1.
63\text{Current Ratio} # 1.63Current Ratio#1.63
Why the Current Ratio Matters:
* A current ratio above 1 indicates that the entity has more current assets than current liabilities, suggesting good short-term liquidity.
Why Other Options Are Incorrect:
* A. 0.61, B. 0.98, C. 1.14:These values result from incorrect calculations or misinterpretations of the formula.
References and Documents:
* GAO Financial Analysis Guide:Provides guidance on using the current ratio to assess liquidity.
* GASB Financial Reporting Requirements:Highlights the importance of liquidity measures in government financial statements.

* Service Efforts and Accomplishments (SEA) Reporting:
* SEA reporting is designed to providenon-financial performance informationabout the efficiency and effectiveness of government programs.
* It evaluates how well resources are being used to achieve desired outcomes, helping stakeholders assess program performance and accountability.
* Explanation of Answer Choices:
* A. Evaluation of the effects of changes in public policy: Incorrect. SEA reporting does not focus on policy changes but on program performance.
* B. Assessment of financial condition and results of operations: Incorrect. This is the role of financial statements, not SEA reports.
* C. Assessment of the accountability of the public administrators: Incorrect. While SEA reports indirectly support accountability, their main purpose is to assess program efficiency and effectiveness.
* D. Evaluation of the efficiency and effectiveness of governmental programs: Correct. This is the primary focus of SEA reporting.
:
GASB,Concepts Statement No. 2: Service Efforts and Accomplishments Reporting.
GFOA,Performance Reporting in Government.

* Responsibility for Internal Controls:
* Managementholds the primary responsibility for establishing, implementing, and maintaining an organization’s internal control system.
* This responsibility is outlined in frameworks such as COSO’sInternal Control – Integrated Frameworkand the GAO’sGreen Book.
* Roles of Other Parties:
* A. Accountants: While accountants may assist in designing or assessing controls, they are not primarily responsible.
* B. Internal auditors: Their role is to evaluate the effectiveness of controls, not establish them.
* D. Audit committee: Provides oversight but does not implement or design controls.
:
COSO,Internal Control – Integrated Framework.
GAO,Standards for Internal Control in the Federal Government (Green Book).

* Assumptions in Disaster Planning:
* Financial continuity planning for natural disasters must account for scenarios where the event occurs suddenly and without warning.
* This assumption ensures that governments are prepared to quickly resume critical financial operations even under challenging and unpredictable circumstances.
* Explanation of Answer Choices:
* A. Leadership and staff will reconvene at an alternate location: While this is part of disaster planning, it is not the primary assumption.
* B. A fully redundant infrastructure will be available to staff at an alternate location: This may not always be realistic or feasible.
* C. There may be no warning of the potential emergency: Correct. Disaster planning assumes that emergencies can occur without prior notice.
* D. Government agencies will need to operate as standalone organizations: This is not a standard assumption in disaster planning.
:
FEMA,Continuity Guidance Circular.
GAO,Disaster Resilience and Continuity Planning.

Definition of Inherent Risk:
Inherent risk refers to the risk of material misstatement in financial statements or other reports due to the nature of the subject matter, without considering any controls in place. It arises from the complexity, judgment, or uncertainty involved in the underlying transactions or calculations.
Why This Is Inherent Risk:
* TheFederal Credit Reform Actrequires complex calculations to estimate loan subsidies, interest rates, and cash flows. These calculations inherently involve significant judgment and estimation, making them prone to errors. This is a classic example of inherent risk because the complexity exists regardless of controls.
Why Other Options Are Incorrect:
* A. Audit Risk:This refers to the overall risk that the auditor may issue an incorrect opinion. In this case, the issue is about the inherent complexity of the calculations, not the auditor’s procedures.
* B. Control Risk:This is the risk that errors will not be prevented or detected due to weak internal controls. While control risk could contribute to misstatements, it is not the primary issue in this example.
* C. Detection Risk:This is the risk that auditors will not detect a misstatement. This risk relates to audit procedures, not the inherent complexity of the calculations.
References and Documents:
* GAO Yellow Book on Risk Assessment:Explains inherent risk in the context of government financial reporting.
* AICPA Standards on Audit Risk (AU-C 315):Highlights inherent risk as arising from the nature of transactions or subject matter.

* Definition of Cloud Computing:
* Cloud computing refers to the delivery of computing services (e.g., servers, storage, databases, networking, software) over the internet.
* A common feature of cloud computing is the “hosted” service model, where applications, storage, or infrastructure are hosted and managed by a cloud service provider.
* Explanation of Answer Choices:
* A. Satellite-to-satellite: This involves communication between satellites, unrelated to cloud computing.
* B. Hosted: Correct. Hosted services are a fundamental aspect of cloud computing, where applications or data are stored and accessed on remote servers.
* C. Gateway transmission: Refers to communication gateways, unrelated to cloud computing services.
* D. Mainframe computing: Mainframes are large on-premises computers, not part of the cloud model.
:
National Institute of Standards and Technology (NIST),Cloud Computing Reference Architecture.
Federal Risk and Authorization Management Program (FedRAMP),Cloud Service Providers Guidance.

* Governmental Attestation Engagements:
* These engagements involve providing assurance on specific elements of financial or non- financial information, such as compliance with laws, contracts, or bond covenants.
* Reviewing revenue coverage requirements for outstanding bonds fits the scope of attestation engagements, which focus on confirming adherence to specific requirements.
* Explanation of Answer Choices:
* A. Monitor a subgrantee for compliance to the grant restrictions: Monitoring is a management responsibility, not typically part of an attestation engagement.
* B. Establish a policy concerning fraud prevention: Establishing policies is a management duty, not a task for auditors.
* C. Monitor purchasing card charges for compliance with travel policies: Monitoring is operational, not attestation-related.
* D. Review the revenue coverage requirements on outstanding bonds: Correct. This falls within the scope of attestation engagements.
:
GAO,Government Auditing Standards (Yellow Book).
AICPA,Attestation Standards for Government Engagements.

* Performance Audit Objectives:
* Performance audits evaluate whether government entities are operating efficiently, effectively, and in compliance with applicable laws.
* A critical aspect is assessing whether the entity has implementedcorrective actionsin response to prior audit findings and recommendations, as this demonstrates accountability and progress.
* Explanation of Answer Choices:
* A. Updated its vision and strategic mission statements: Incorrect. While strategic planning is important, it is not the primary focus of performance audit objectives.
* B. Corrective actions to address prior findings and recommendations: Correct. Addressing prior findings is a key objective to ensure identified issues have been resolved.
* C. Updated its financial reports’ MD&A: Incorrect. MD&A (Management’s Discussion and Analysis) is related to financial reporting, not performance audits.
* D. Internal controls in place: Incorrect. While internal controls are reviewed, the focus here is on corrective actions to past findings.
:
GAO,Government Auditing Standards (Yellow Book).
GAO,Performance Auditing Guidance.

* Understanding Resource Allocation in Street Maintenance:When additional resources are provided for street maintenance, their allocation should address the most pressing infrastructure needs to maximize impact and public benefit.
* Key Indicator (Pavement Rating Scores):Pavement rating scores are used to evaluate the condition of roads. Areas with the lowest scores (representing unmet needs) require prioritized funding to bring the infrastructure to acceptable levels.
* Explanation of Answer Choices:
* A. Number of intersections: The number of intersections is not directly related to road conditions or pavement scores.
* B. Historical budgeted amounts: Allocating based on past budgets does not address current infrastructure conditions or unmet needs.
* C. Lane miles rated as acceptable by citizens: Roads already rated as “acceptable” do not require immediate attention.
* D. Lane miles with unmet needs: Correct, as this aligns with addressing the most critical deficiencies based on the pavement scores.
:
Government Finance Officers Association (GFOA),Best Practices in Capital Asset Management.
Federal Highway Administration (FHWA),Performance-Based Planning and Programming Guidebook.

National Performance Management Advisory Commission Framework:
* TheNational Performance Management Advisory Commissiondeveloped a comprehensive framework to integrateperformance measurementinto government operations.
* One of its primary goals was to incorporate performance metrics into thebudget processto align resource allocation with program outcomes.
* This ensures that budgeting decisions are informed by program performance, improving efficiency and accountability.
Why the Budget Process?
* By linking performance to budgeting, governments can prioritize funding for programs that demonstrate effectiveness and reduce funding for underperforming initiatives.
Why Other Options Are Incorrect:
* A. Internal control plan:Internal controls focus on risk management, not incorporating performance measurement.
* B. Financial statements:Performance metrics are not reported in financial statements, which focus on financial position and results.
* C. Audit procedures:Audits verify financial accuracy and compliance but do not incorporate performance measurement.
References and Documents:
* National Performance Management Advisory Commission Report (2010):Recommends integrating performance measurement into the budget process.
* GAO Guide on Performance Budgeting:Explains how performance metrics inform budget decisions.

Materiality in Auditing:
* Materiality refers to the significance of misstatements or omissions in financial statements that could influence the decisions of users relying on those statements.
* During theplanning phaseof a financial audit, the auditor determines the dollar threshold for materiality based on professional judgment, considering the size and nature of the auditee’s operations and the needs of financial statement users.
Why the Auditor Determines Materiality:
* Theauditorhas the responsibility to form an independent opinion on the financial statements and must determine materiality thresholds to design audit procedures effectively.
* Materiality thresholds guide the extent of testing and ensure the audit focuses on areas most likely to impact decision-making.
Why Other Options Are Incorrect:
* B. Auditee:The auditee provides the information, but it does not decide the materiality threshold.
* C. Auditor in consultation with the auditee:The auditor may consult with the auditee for context, but the final determination is solely the auditor’s responsibility.
* D. Audit committee:While the audit committee oversees the audit, it does not set materiality thresholds.
References and Documents:
* GAAS (Generally Accepted Auditing Standards):States that materiality is determined by the auditor’ s judgment.
* AICPA AU-C Section 320:Provides guidance on materiality in planning and performing audits.

* Responsibilities in Resolving Single Audit Findings:
* Single audits assess compliance with federal program requirements.
* Findings often highlight deficiencies or noncompliance issues that must be resolved by the entity receiving the federal funds.
* Explanation of Answer Choices:
* A. Awarding agency: The agency provides oversight and guidance but does not directly resolve findings.
* B. Recipient agency: Correct. The entity receiving the funds is responsible for addressing and resolving findings to comply with federal regulations.
* C. Audit committee: May oversee the process but doesn’t take direct responsibility for resolving findings.
* D. External auditors: Identify the findings but do not resolve them.
:
Uniform Guidance (2 CFR Part 200),Single Audit Requirements.
Association of Government Accountants (AGA),Government Auditing Standards.

Why Is This the Best Measure for Performance?
* Comparing thecost per acre maintainedto that of another jurisdiction provides a meaningful benchmark for performance evaluation. It allows the director to assess how efficiently the department is operating relative to similar organizations.
* This comparison ensures that the department is managing resources effectively and identifies potential areas for improvement.
Why Other Options Are Incorrect:
* A. Use a single measure of citizen satisfaction:While citizen satisfaction is important, it is subjective and does not provide insight into operational efficiency.
* B. Evaluate funds spent on grounds maintenance:Total spending does not measure efficiency or productivity; it merely reflects the amount allocated.
* C. Analyze staffing levels:Staffing levels do not directly measure performance; they are only one factor in determining efficiency.
References and Documents:
* Governmental Performance Reporting (AGA):Recommends using comparative benchmarks for evaluating efficiency in service delivery.
* Performance Management Framework by GAO:Highlights cost-effectiveness metrics such as cost per acre maintained.

What Is an Attestation Engagement?
An attestation engagement is a type of professional service where an independent practitioner (typically an auditor or CPA) evaluates and provides a report on assertions made by another party about a specific subject matter. These engagements follow standards set by organizations like the AICPA or GAO.
Who Makes the Assertion?
* Management’s Role:Management is the party responsible for making an assertion about the subject matter under review. For example, management might assert that internal controls are effective or that financial statements are fairly presented.
* Auditor/Practitioner’s Role:The auditor or practitioner examines the evidence related to the assertion and provides an opinion or conclusion based on that examination.
* User’s Role:The users are the stakeholders (e.g., investors, regulators) who rely on the practitioner’s report, but they do not make assertions.
Why Other Options Are Incorrect:
* B. Auditor/Practitioner:The auditor or practitioner evaluates the assertion made by management, not the other way around.
* C. Practitioner:See above-practitioners don’t make assertions.
* D. User:Users are the intended audience of the attestation report, not the party making assertions.
References and Documents:
* AICPA Attestation Standards (SSAEs):Clarifies the role of management in making assertions during attestation engagements.
* GAO’s Government Auditing Standards (Yellow Book):Provides additional guidance on the roles of parties in attestation engagements.

* Compliance Reporting Under Government Auditing Standards (GAS):
* GAS requires auditors to assess compliance with applicable laws, regulations, contracts, and grant agreements during audits.
* Compliance reporting typically includes:
* Identifying areas of noncompliance.
* Describing the auditor’s responsibility for compliance testing.
* Outlining the scope of compliance testing.
* Explanation of Answer Choices:
* A. Areas of noncompliance: Included in compliance reporting to highlight where the entity failed to meet requirements.
* B. The auditor’s responsibility for tests of compliance: GAS requires auditors to clarify their role in compliance testing.
* C. Review of major internal control cycles: Correct. While internal controls may be assessed, reviewing “major internal control cycles” is not a direct component of compliance reporting.
* D. The scope of the compliance testing: GAS mandates that the scope of testing be disclosed in the compliance report.
:
GAO,Government Auditing Standards (Yellow Book).
AICPA,Compliance Reporting Guidance for Government Audits.