in the context of "filling the bucket" with audit evidence, which of the following statements is true? the concept only applies to high risk areas, qualitative factors are not considered in determining sufficiency, the required level of assurance varies based on risk and materiality, the auditor should always obtain 100% certainty