When using sampling for tests of controls, which of the following audit consequences may follow?

If sample results indicate that the control is not operating effectively, but in fact it is operating effectively, the audit is likely to be faulty because

of reduced substantive tests.

If sample results indicate that the control is operating effectively, but in fact it is not, control risk will be assessed too low.

If sample results indicate that the control is operating effectively, but in fact it is not, control risk will be assessed too high.

If sample results indicate that the control is not operating effectively, but in fact it is operating effectively, control risk will be assessed too low.