CPA Auditing and Attestation (AUD)

AUD is the only section of the Uniform CPA Examination that tests candidates at the Evaluation skill level — the top tier of the AICPA's cognitive framework. That single fact explains why candidates who breeze through FAR's calculations often stall on AUD: the exam isn't asking you to recall a standard, it's asking you to judge what an auditor should conclude given a messy set of facts. These practice questions are built around that judgment, not around flashcard-style recall.

What to Expect on Test Day

AUD runs four hours across five testlets: two MCQ testlets of 39 questions each (78 total, with a portion of unscored pretest items mixed in you can't identify), followed by three TBS testlets containing 7 simulations split 2-3-2. A standardized 15-minute break falls after the third testlet and doesn't count against your time. MCQs and TBSs are each worth exactly 50 percent of your final scaled score, so rushing the simulations to bank extra MCQ time is gambling with half your grade. Passing requires a scaled score of 75 out of 99 — not 75 percent correct, since the AICPA weights questions by difficulty using item response theory.

The most common pacing mistake is over-reading MCQ wording. AUD questions are frequently built around a single qualifier — "most likely," "least likely," "best describes" — and candidates who scan the answer choices before fully parsing the call of the question tend to talk themselves into wrong ones. The TBSs bring different pressure: document review simulations require reading client emails, engagement letters, or internal control flowcharts to extract the correct standard or conclusion, which takes longer than a self-contained question if you haven't practiced the exhibit format beforehand.

Domain Breakdown

The AICPA Blueprint effective January 2026 organizes AUD into four content areas, and the exam does not weight them evenly.

Area III alone typically carries 30 to 40 percent of the exam's weight, which means a candidate who has memorized reporting language but hasn't drilled evidence-gathering scenarios is studying backward.

The Topics Candidates Consistently Underestimate

A large share of AUD misses trace back to confusing issuer and nonissuer requirements. PCAOB standards govern audits of issuers (public companies); AICPA Statements on Auditing Standards govern nonissuers. The exam tests this distinction constantly across every content area, not just one topic, and candidates who don't fix it early lose points everywhere.

Sampling is the second consistent blind spot. Attribute and variable sampling show up in both MCQs and simulations, and because most candidates study it once and move on, it's disproportionately missed relative to how often it appears. SSARS engagements — preparation, compilation, and review — are a third trap: each carries a different level of assurance and different required procedures, and the exam expects you to identify which engagement type applies before you can answer correctly, not just recite the differences in the abstract. Candidates preparing for the Certified Government Financial Manager (CGFM) exam can also benefit from strengthening their understanding of sampling methods, assurance levels, and engagement procedures.

Candidates also underestimate how much professional skepticism language matters in written communication tasks. The exam checks whether your conclusion reflects appropriate skepticism, not just whether it's technically correct — two answers can cover the same facts and only one demonstrates the reasoning AUD is graded on.

How to Use Practice Questions Effectively for AUD

Work MCQs by content area first, not randomly. Because Area III carries the most weight, run enough repetitions there that PCAOB-versus-AICPA distinctions become automatic rather than something you're still calculating under time pressure. Once you're consistently accurate on isolated questions, switch to timed 39-question testlets to build the stamina AUD actually requires — the exam rewards candidates who haven't burned their focus by testlet two Ready to practice another certification? Start the Certified Treasury Professional (CTP) practice exam. 

Don't leave TBS practice until the end of your prep. The document review simulations on this platform mirror the AICPA's format, where you pull information out of a simulated email thread or workpaper rather than answering a self-contained question. Extracting the relevant fact from a cluttered exhibit is a skill MCQ drilling alone won't build, and candidates who first encounter that format on test day routinely run out of time on the later testlets.

Common Mistakes That Cause Retakes

Treating SSARS engagement types as interchangeable is one of the most common retake causes — the exam presents a scenario and expects you to identify the engagement type before you can answer correctly, and guessing wrong at that step usually means the whole question is lost. Conflating issuer and nonissuer reporting requirements is the second. A third is memorizing audit opinion types (qualified, adverse, disclaimer) as a list rather than as outcomes of a decision process, which falls apart the moment the exam changes the scenario's details slightly.

Underestimating AUD generally is a quieter cause of retakes. It's the lightest core section by raw content volume compared to FAR, and candidates who treat it as "the easy one to finish quickly" are often the ones who end up sitting for it twice — the difficulty isn't volume, it's precision.

AUD Study Timeline by Starting Point

New to audit (recent graduate, no audit-adjacent work). Budget roughly 8 to 10 weeks at 10–15 hours a week. Spend the first third on Areas I and II as foundation, since Area III's evidence concepts won't stick without understanding the risk model first.

Has related audit experience (associate or senior at a firm). Often 5 to 7 weeks is AUD, but don't skip Area I. Practical experience covers the "how" of fieldwork well but frequently misses the precise terminology and the issuer/nonissuer distinctions the exam tests explicitly.

Retaking the section. Diagnose the miss pattern from your score report before re-studying broadly. A score in the low-to-mid 60s with uneven area performance usually means a content gap and calls for 4 to 6 weeks of targeted review; a score close to 75 with even performance across areas often points to pacing or TBS unfamiliarity, which a shorter, simulation-heavy 2 to 3 week push tends to fix.

What Changed Most Recently

The Blueprint effective January 2026 updated Area I's ethics references to the AICPA's Quality Management Standards (SQMS No. 1 and No. 2), replacing the older Statements on Quality Control Standards (SQCS) framework — candidates using older prep resources should confirm they're studying SQMS, not SQCS. Area II also shifted more emphasis toward entity-level controls, and Area III's external confirmation guidance was refined. None of this changes the overall four-area structure or the 78-MCQ/7-TBS format, but it does mean prep resources published before 2026 may still reference retired standard names.