After obtaining an understanding of an entity's internal controls, an auditor may assess control risk at the maximum for some assertions because the auditor:

a. Believes internal control activities are unlikely to be effective.

b. Determines that internal control is not well-documented.

c. Performs tests of controls to restrict detection risk to an acceptable level.

d. Identifies control activities that are likely to prevent material misstatements.

Choose the correct answer.