Choice "A" is correct. Assessing control risk and obtaining an understanding of an entity's internal control may be performed concurrently.
Choices "b" and "d" are incorrect. Substantive testing can never be entirely eliminated for significant transaction classes.
Choice "c" is incorrect. A standard procedure in assessing control risk is to consider evidence obtained in prior audits about the operation of control activities.
