General questions without using the lab as it is not working being an auditor what would your responses be to these?

*1. What concerns would you have about vendor addresses? What types of addresses would be the most suspicious? This I have addresses being similiar to employee addresses, or addresses left blank.

*2. How could a vendor be added to an enterprise system with a suspicious address?

*3. After reviewing the PO Box addresses, what concerns do you have? Should you follow-up on PO Box addresses? Explain.

*4. Are there any limitations in your evaluation process? Are there other data values that may indicate fictitious supplies in the system?