During a review of a customer master file, an IS auditor discovered numerous customer name
duplications arising from variations in customer first names. To determine the extent of the
duplication, the IS auditor would use:

A.
test data to validate data input.

B.
test data to determine system sort capabilities.

C.
generalized audit software to search for address field duplications.

D.
generalized audit software to search for account field duplications.

Explanation:
Since the name is not the same {due to name variations), one method to detect duplications would
be to compare other common fields, such as addresses. A subsequent review to determine
common customer names at these addresses could then be conducted. Searching for duplicate
account numbers would not likely find duplications, since customers would most likely have
different account numbers for each variation. Test data would not be useful to detect the extent of
any data characteristic, but simply to determine how the data were processed.