As a result of sampling procedures applied as tests of controls, an auditor incorrectly assesses control risk lower than appropriate. The most likely explanation for this situation is that 

a. The deviation rates of both the auditor’s sample and the population exceed the tolerable deviation rate. 

b. The deviation rates of both the auditor’s sample and the population are less than the tolerable deviation rate. 

c. The deviation rate in the auditor’s sample is less than the tolerable deviation rate, but the deviation rate in the population exceeds the tolerable deviation rate. 

d. The deviation rate in the auditor’s sample exceeds the tolerable deviation rate, but the deviation rate in the population is less than the tolerable deviation rate.