Question 420
An AFC owner is assigned to remediate this finding: A regional payments company deploys one global sanctions rule without checking local territorial and ownership rules. What change best targets the underlying vulnerability?
- Integrate sanctions legal analysis with ownership-aware screening
- Define controlled information-sharing protocols and access governance
- Build a sanctions legal inventory and regime-specific escalation paths
- Build typology-focused collaboration with controlled escalation paths
Explanation
Correct Answer
C:Group controls can be consistent without ignoring country-specific prohibitions. Its scope matches this process, while the alternative would mainly address a US firm assumes every person on an OFAC sanctions list can be screened by exact spelling….
Incorrect Answers
A:Exact name matching alone may miss indirect interests or alternative identifiers; the observed record here instead involves a regional payments company deploys one global sanctions rule without checking local…. Its controls focus on a US firm assumes every person on an OFAC sanctions list can be screened by exact spelling alone, which would leave the observed problem of a regional payments company deploys one global sanctions rule without checking local territorial… unresolved.
B:Against the reported situation in which a regional payments company deploys one global sanctions rule without checking local…, a PPP should provide useful intelligence while respecting legal restrictions. That would be a coherent mitigation for banks and investigators create a public-private forum but share raw customer data without a…, whereas the immediate gap concerns a regional payments company deploys one global sanctions rule without checking local territorial….
D:Compared with the stated facts about a regional payments company deploys one global sanctions rule without checking local…, the design should turn common patterns into actionable internal monitoring updates. That measure could be appropriate where a banking consortium wants to share scam indicators but only discusses names instead of…, but the described weakness is a regional payments company deploys one global sanctions rule without checking local territorial….
Question 421
Following the discovery that a licensed firearms wholesaler ships dual-use components to newly created intermediaries with unclear end users., which risk-based intervention most directly addresses the problem?
- Escalate material trade-document inconsistencies before settlement
- Require ultimate-controller verification and enhanced due diligence
- Conduct a documented risk-based PEP reassessment
- Escalate dual-use transactions for sanctions and end-use checks
Explanation
Correct Answer
D:Specialist review should integrate ownership, goods and destination rather than price alone. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a trading company requests a letter of credit with documents inconsistent on port, cargo,….
Incorrect Answers
A:When testing the contrasting pattern of a licensed firearms wholesaler ships dual-use components to newly created…, remember that control points must address trade substance rather than accepting facially complete papers. The intervention addresses a different exposure: a trading company requests a letter of credit with documents inconsistent on port, cargo, and…; the present case concerns a licensed firearms wholesaler ships dual-use components to newly created intermediaries with….
B:A relationship should not be accepted solely on the nominee's identity where control remains opaque; the observed record here instead involves a licensed firearms wholesaler ships dual-use components to newly created…. Its controls focus on a high-risk client uses a nominee shareholder whose instructions come from an unidentified…, which would leave the observed problem of a licensed firearms wholesaler ships dual-use components to newly created intermediaries with… unresolved.
C:Against the reported situation in which a licensed firearms wholesaler ships dual-use components to newly created…, the institution should adjust due diligence using credible evidence of remaining influence. That would be a coherent mitigation for a former senior politician retains influence over a state-owned enterprise through close associates, whereas the immediate gap concerns a licensed firearms wholesaler ships dual-use components to newly created intermediaries with….
Question 422
A business unit asks compliance for an actionable response to the following: A motor-insurance intermediary sends claim payments to accounts not linked to insured persons or repairers. Which control is most suitable?
- Require name-matched deposits and risk-screened withdrawals
- Introduce payee-change verification and claim-beneficiary screening
- Apply blockchain analytics and source-of-funds review for high-risk deposits
- Monitor high-value buy-in and low-play cash-out combinations
Explanation
Correct Answer
B:The safeguard prevents claims settlement from becoming an unverified payment channel. The control is aligned with the actual failure in a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or…; safeguards designed for an online betting account is funded by several payment cards and withdraws winnings to a… would not close that gap.
Incorrect Answers
A:Against the reported situation in which a motor-insurance intermediary sends claim payments to accounts not linked to insured…, payment controls should challenge unexplained funding and cash-out patterns. That would be a coherent mitigation for an online betting account is funded by several payment cards and withdraws winnings to a different…, whereas the immediate gap concerns a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or….
C:Compared with the stated facts about a motor-insurance intermediary sends claim payments to accounts not linked to insured…, risk-based controls should combine on-chain findings with customer information before disposition. That measure could be appropriate where a virtual-asset exchange receives coins from a mixer shortly before conversion into fiat and…, but the described weakness is a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or….
D:This is not the central mechanism when a motor-insurance intermediary sends claim payments to accounts not linked to insured…; a targeted scenario should connect acquisition and redemption rather than separate counters. The intervention addresses a different exposure: a casino patron exchanges large cash amounts for chips and redeems them shortly afterward without…; the present case concerns a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or….
Question 423
A control owner seeks implementation and independent assurance after this finding: A shipping broker uses frequent last-minute vessel name and flag changes during sanctioned-region voyages. Choose TWO measures that directly meet these separate objectives.
- Trace redemption counterparties and funds entering bank accounts
- Use vessel-behavior screening with ownership and route checks
- Test known linked-account scenarios against anti-collusion alerts
- Test alerts for identity changes and inconsistent shipping histories
- Require name-matched deposits and risk-screened withdrawals
- Test claims for undocumented beneficiary changes and related parties
Explanation
Correct Answers
B:Controls should assess deceptive shipping practices beyond the vessel's reported name. It addresses the live exposure in a shipping broker uses frequent last-minute vessel name and flag changes during sanctioned-region voyages; corrective action is not a substitute for verifying its operation.
D:Detection should preserve links across renamed vessels and suspicious route deviations. It produces control-performance evidence about a shipping broker uses frequent last-minute vessel name and flag changes during sanctioned-region voyages; a documented plan alone would not prove operation.
Incorrect Answers
A:When testing the contrasting pattern of a shipping broker uses frequent last-minute vessel name and flag changes during…, remember that the off-chain settlement path is needed alongside blockchain history to understand beneficiaries. That review would be useful if a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak…, but it would not resolve the central uncertainty in a shipping broker uses frequent last-minute vessel name and flag changes during sanctioned-region…. For the alternative option of trace redemption counterparties and funds entering bank accounts in this risk mitigation review involving a shipping broker uses frequent last-minute vessel name and flag changes during…, a two-part remediation plan for a shipping broker uses frequent last-minute vessel name and flag changes during… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
C:Against the reported situation in which a shipping broker uses frequent last-minute vessel name and flag changes during…, assurance requires identifying coordinated groups, not just high stake amounts. The test exercises an adjacent pathway, several esports betting accounts trade bets against each other and cash out through the same device…, without directly challenging a shipping broker uses frequent last-minute vessel name and flag changes during sanctioned-region…. For the alternative option of test known linked-account scenarios against anti-collusion alerts in this risk mitigation review involving a shipping broker uses frequent last-minute vessel name and flag changes during…, a two-part remediation plan for a shipping broker uses frequent last-minute vessel name and flag changes during… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
E:Compared with the stated facts about a shipping broker uses frequent last-minute vessel name and flag changes during…, payment controls should challenge unexplained funding and cash-out patterns. That would be a coherent mitigation for an online betting account is funded by several payment cards and withdraws winnings to a different…, whereas the immediate gap concerns a shipping broker uses frequent last-minute vessel name and flag changes during sanctioned-region…. For the alternative option of require name-matched deposits and risk-screened withdrawals in this risk mitigation review involving a shipping broker uses frequent last-minute vessel name and flag changes during…, a two-part remediation plan for a shipping broker uses frequent last-minute vessel name and flag changes during… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
F:This is not the central mechanism when a shipping broker uses frequent last-minute vessel name and flag changes during…; reviewing actual disbursement files detects bypasses that approval-rate dashboards conceal. Testing this would validate controls for a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or…, not the effectiveness of remediation for a shipping broker uses frequent last-minute vessel name and flag changes during sanctioned-region…. For the alternative option of test claims for undocumented beneficiary changes and related parties in this risk mitigation review involving a shipping broker uses frequent last-minute vessel name and flag changes during…, a two-part remediation plan for a shipping broker uses frequent last-minute vessel name and flag changes during… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
Question 424
A financial-crime team is determining corrective action: An automated KYC tool increases a customer's risk score on every adverse-media mention without assessing identity. What should be implemented?
- Use explainable event screening with review and escalation safeguards
- Preserve and screen relevant payment data with validated parsing limits
- Use attribute-based whitelisting with revalidation on material changes
- Configure tested fuzzy and alias-aware screening rules
Explanation
Correct Answer
A:Automation should prioritize changes while preserving evidence-based decisions. The control is aligned with the actual failure in an automated KYC tool increases a customer's risk score on every adverse-media mention without assessing…; safeguards designed for a bank's cross-border screening system truncates long payment free-text fields before names… would not close that gap.
Incorrect Answers
B:When testing the contrasting pattern of an automated KYC tool increases a customer's risk score on every adverse-media…, remember that control design should avoid silent loss of legally meaningful identifiers. Its controls focus on a bank's cross-border screening system truncates long payment free-text fields before names are…, which would leave the observed problem of an automated KYC tool increases a customer's risk score on every adverse-media mention without… unresolved.
C:Controlled suppression reduces noise without allowing new genuine matches to bypass review; the observed record here instead involves an automated KYC tool increases a customer's risk score on every adverse-media…. That would be a coherent mitigation for a screening platform suppresses repeat matches based solely on a previously cleared customer name, whereas the immediate gap concerns an automated KYC tool increases a customer's risk score on every adverse-media mention without….
D:Against the reported situation in which an automated KYC tool increases a customer's risk score on every adverse-media…, matching should be sensitive enough to surface credible variants with reviewable alerts. This safeguard targets a sanctions screening tool uses exact spelling only and misses a listed person whose name has two…; it does not directly remediate the process failure in an automated KYC tool increases a customer's risk score on every adverse-media mention without….
Question 425
A business unit asks compliance for an actionable response to the following: A client's brother becomes a senior procurement official and a related company receives government contracts. Which control is most suitable?
- Escalate dual-use transactions for sanctions and end-use checks
- Require source-of-wealth analysis for opaque collateral structures
- Refresh PEP connections and investigate contract-linked flows
- Apply partner due diligence and proportionate grant monitoring
Explanation
Correct Answer
C:Ongoing review should detect changes in public office and business activity, not just onboarding status. For the supported action of refresh pep connections and investigate contract-linked flows in this risk mitigation review involving a client's brother becomes a senior procurement official and a related company receives…, its scope matches this process, while the alternative would mainly address a licensed firearms wholesaler ships dual-use components to newly created intermediaries….
Incorrect Answers
A:Against the reported situation in which a client's brother becomes a senior procurement official and a related company…, specialist review should integrate ownership, goods and destination rather than price alone. Its controls focus on a licensed firearms wholesaler ships dual-use components to newly created intermediaries with…, which would leave the observed problem of a client's brother becomes a senior procurement official and a related company receives government… unresolved.
B:The relevant alternative mechanism is different from a client's brother becomes a senior procurement official and a related company…: EDD should challenge ownership and accumulation claims before facilities are granted. That would be a coherent mitigation for a private-banking client pledges opaque offshore holdings as collateral for unusually large credit…, whereas the immediate gap concerns a client's brother becomes a senior procurement official and a related company receives government….
D:This is not the central mechanism when a client's brother becomes a senior procurement official and a related company…; a risk-sensitive arrangement can preserve assistance while managing diversion and TF risk. That measure could be appropriate where a relief organization routes grants to an unverified local partner in an active conflict area, but the described weakness is a client's brother becomes a senior procurement official and a related company receives government….
Question 426
After a risk-assessment update notes that a charity receives small lawful donations and a trustee secretly diverts the proceeds to a prohibited militant network., which safeguard most closely responds to the root cause?
- Use risk intelligence to prioritize exposed sectors and businesses
- Apply end-user and dual-use goods due diligence to trade flows
- Introduce capacity-based triage and statutory-deadline controls
- Screen beneficiaries and review end-use controls for grants
Explanation
Correct Answer
D:A risk-based charity program should assess recipients, geography, and diversion vulnerabilities rather than rely on donor amounts. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as an illicit trade network infiltrates local payment channels and distorts competition with….
Incorrect Answers
A:Compared with the stated facts about a charity receives small lawful donations and a trustee secretly diverts the proceeds…, sectoral typologies should inform enhanced review and proportionate control placement. The intervention addresses a different exposure: an illicit trade network infiltrates local payment channels and distorts competition with…; the present case concerns a charity receives small lawful donations and a trustee secretly diverts the proceeds to a….
B:This is not the central mechanism when a charity receives small lawful donations and a trustee secretly diverts the proceeds…; a focus on consignees and controlled items addresses more than name-only screening. Its controls focus on a commodity broker ships industrial valves through successive intermediaries to obscure a…, which would leave the observed problem of a charity receives small lawful donations and a trustee secretly diverts the proceeds to a… unresolved.
C:When testing the contrasting pattern of a charity receives small lawful donations and a trustee secretly diverts the proceeds…, remember that escalation owners and exception tracking help prevent queues from exceeding legal reporting windows. That would be a coherent mitigation for a suspicious-activity backlog grows until analysts miss required reporting deadlines, whereas the immediate gap concerns a charity receives small lawful donations and a trustee secretly diverts the proceeds to a….
Question 427
A business unit asks compliance for an actionable response to the following: A case system auto-generates suspicious-activity narratives using AI that sometimes invents account relationships. Which control is most suitable?
- Weight graph edges by discriminative evidence and analyst context
- Use explainable network analytics with investigator verification
- Design risk-based scenarios and thresholds by customer segment
- Require source-linked review and sign-off for AI-assisted narratives
Explanation
Correct Answer
D:Automation can improve drafting speed but responsibility for factual accuracy remains human. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a graph model flags every customer sharing a common public IP address as a criminal network.
Incorrect Answers
A:Against the reported situation in which a case system auto-generates suspicious-activity narratives using AI that sometimes…, network controls should not equate a single common attribute with criminal association. The intervention addresses a different exposure: a graph model flags every customer sharing a common public IP address as a criminal network; the present case concerns a case system auto-generates suspicious-activity narratives using AI that sometimes invents account….
B:The relevant alternative mechanism is different from a case system auto-generates suspicious-activity narratives using AI that sometimes…: Graph alerts should prioritize related accounts without treating every shared attribute as proof. Its controls focus on several mule accounts appear independent until network software links them to a single device and…, which would leave the observed problem of a case system auto-generates suspicious-activity narratives using AI that sometimes invents account… unresolved.
C:Compared with the stated facts about a case system auto-generates suspicious-activity narratives using AI that sometimes…, monitoring should distinguish low-activity firms from cash-intensive or wholesale customers. That would be a coherent mitigation for a small-business monitoring scenario uses the same cash threshold as a multinational…, whereas the immediate gap concerns a case system auto-generates suspicious-activity narratives using AI that sometimes invents account….
Question 428
This fact pattern is being incorporated into the AFC control inventory: A nonprofit training group claims authority to impose national AML penalties because it publishes research. Which measure directly addresses it?
- Translate official high-risk country notices into proportionate controls
- Maintain independent suspicious-activity decisions and timely FIU reporting
- Use NGO typology research as intelligence, not as binding regulation
- Integrate regional findings into jurisdiction and sector risk assessments
Explanation
Correct Answer
C:AFC teams should triangulate third-party insights with official obligations. Targeting the exposed workflow is more effective than deploying a measure intended for a compliance officer assumes a FATF public-listing announcement requires identical account….
Incorrect Answers
A:Risk response should reflect specific measures rather than automatic blanket exits; the observed record here instead involves a nonprofit training group claims authority to impose national AML penalties because…. That would be a coherent mitigation for a compliance officer assumes a FATF public-listing announcement requires identical account…, whereas the immediate gap concerns a nonprofit training group claims authority to impose national AML penalties because it publishes….
B:Against the reported situation in which a nonprofit training group claims authority to impose national AML penalties because…, the institution must follow its own duty to evaluate, document, and file when required. This safeguard targets a bank asks its financial intelligence unit to approve every suspicious-activity decision in advance; it does not directly remediate the process failure in a nonprofit training group claims authority to impose national AML penalties because it publishes….
D:Compared with the stated facts about a nonprofit training group claims authority to impose national AML penalties because…, policies should reflect local implementation weaknesses and emerging typologies. The intervention addresses a different exposure: a bank ignores guidance from the regional FATF-style body serving one of its markets; the present case concerns a nonprofit training group claims authority to impose national AML penalties because it publishes….
Question 429
A risk owner seeks a focused response rather than blanket customer exclusion: Operational risk owns vendor outages but never shares payment-data disruptions with AML monitoring. Which option is best?
- Create cross-risk escalation for data and control outages
- Approve a clear charter with authority, membership, quorum, and reporting
- Maintain local filing instructions and escalation responsibilities
- Restrict SAR information and use approved neutral customer messaging
Explanation
Correct Answer
A:Coordination ensures operational incidents trigger compensating AFC safeguards. Its scope matches this process, while the alternative would mainly address a risk committee meets quarterly but has no formal mandate or named decision powers.
Incorrect Answers
B:The relevant alternative mechanism is different from operational risk owns vendor outages but never shares payment-data disruptions with…: Defined terms let the committee make and escalate properly authorized decisions. This safeguard targets a risk committee meets quarterly but has no formal mandate or named decision powers; it does not directly remediate the process failure in operational risk owns vendor outages but never shares payment-data disruptions with AML monitoring.
C:Compared with the stated facts about operational risk owns vendor outages but never shares payment-data disruptions with…, a global process needs legally accurate jurisdictional implementation. That measure could be appropriate where a compliance analyst assumes suspicious activity always must be reported to the same global office, but the described weakness is operational risk owns vendor outages but never shares payment-data disruptions with AML monitoring.
D:This is not the central mechanism when operational risk owns vendor outages but never shares payment-data disruptions with…; communication protocols should avoid revealing confidential investigations. The intervention addresses a different exposure: an institution sends a suspicious-activity report directly to a customer to explain a payment delay; the present case concerns operational risk owns vendor outages but never shares payment-data disruptions with AML monitoring.
Question 430
This fact pattern is being incorporated into the AFC control inventory: An insurance broker proposes many single-premium policies purchased by entities with the same hidden controller. Which measure directly addresses it?
- Require linked-party checks for unusually clustered policy sales
- Perform merchant underwriting and beneficiary-of-settlement checks
- Build interoperable counterparty-information exchange and exception handling
- Implement customer-network velocity monitoring across agents
Explanation
Correct Answer
A:Monitoring should recognize shared controllers and intermediaries across multiple contracts. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a payment processor onboards merchants whose websites sell one product but settlement….
Incorrect Answers
B:Against the reported situation in which an insurance broker proposes many single-premium policies purchased by entities with…, monitoring should detect undeclared business models and unexplained third-party flows. The intervention addresses a different exposure: a payment processor onboards merchants whose websites sell one product but settlement refunds go to…; the present case concerns an insurance broker proposes many single-premium policies purchased by entities with the same….
C:The relevant alternative mechanism is different from an insurance broker proposes many single-premium policies purchased by entities with…: A process should obtain and transmit required data where local rules apply, with controlled failures. Its controls focus on a virtual-asset provider fails to exchange required originator and beneficiary information with…, which would leave the observed problem of an insurance broker proposes many single-premium policies purchased by entities with the same… unresolved.
D:Compared with the stated facts about an insurance broker proposes many single-premium policies purchased by entities with…, controls must aggregate activity instead of assessing each transfer in isolation. That would be a coherent mitigation for a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions, whereas the immediate gap concerns an insurance broker proposes many single-premium policies purchased by entities with the same….