Question 440
A control-design team faces this gap: A company-service provider registers dozens of firms sharing directors, addresses, and inactive websites. Which tailored safeguard should it prioritize?
- Apply proportionate crowdfunding organizer and beneficiary due diligence
- Apply risk-based gatekeeper due diligence and escalation
- Apply enhanced revenue plausibility checks for inconsistent statements
- Apply property-buyer EDD and source-of-funds verification
- Apply related-entity network due diligence before onboarding
Explanation
Correct Answer
E:Identification of common control helps prevent fragmented risk treatment across customers. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a nonprofit fundraiser channels emergency donations through an opaque crowdfunding account….
Incorrect Answers
A:This is not the central mechanism when a company-service provider registers dozens of firms sharing directors, addresses,…; controls should identify who receives the funds while preserving legitimate fundraising. That would be a coherent mitigation for a nonprofit fundraiser channels emergency donations through an opaque crowdfunding account and…, whereas the immediate gap concerns a company-service provider registers dozens of firms sharing directors, addresses, and inactive….
B:When testing the contrasting pattern of a company-service provider registers dozens of firms sharing directors, addresses,…, remember that a bank should seek sufficient transparency before accepting transactions for newly formed entities. This safeguard targets a legal adviser forms companies for a client while refusing to disclose the person providing…; it does not directly remediate the process failure in a company-service provider registers dozens of firms sharing directors, addresses, and inactive….
C:The review should reconcile actual operations to declared income before granting services; the observed record here instead involves a company-service provider registers dozens of firms sharing directors, addresses,…. That measure could be appropriate where an accountant certifies revenue for a client despite bank receipts that sharply diverge from tax…, but the described weakness is a company-service provider registers dozens of firms sharing directors, addresses, and inactive….
D:Against the reported situation in which a company-service provider registers dozens of firms sharing directors, addresses,…, controls should reconcile economic capacity, ownership structures, and transfer origin. The intervention addresses a different exposure: a buyer purchases apartments through a chain of companies and pays above market value with…; the present case concerns a company-service provider registers dozens of firms sharing directors, addresses, and inactive….
Question 441
An AFC remediation plan must both address this gap and demonstrate effectiveness: A money remitter's agent repeatedly breaks large customer transfers into many nearby transactions. Choose TWO actions that together accomplish that.
- Establish source of wealth and identify trust controllers
- Implement customer-network velocity monitoring across agents
- Refresh PEP connections and investigate contract-linked flows
- Replay fragmented remittance patterns across multiple agent identifiers
- Audit nominee files for documented control and escalation decisions
Explanation
Correct Answers
B:Controls must aggregate activity instead of assessing each transfer in isolation. It addresses the live exposure in a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions; corrective action is not a substitute for verifying its operation.
D:Detection tests should identify linked small transfers despite distribution across outlets. It produces control-performance evidence about a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions; a documented plan alone would not prove operation.
Incorrect Answers
A:Against the reported situation in which a money remitter's agent repeatedly breaks large customer transfers into many nearby…, asset accumulation and control relationships are essential before accepting the proposed activity. The inquiry is suited to a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained…; the requested evidence must instead address a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions. For the alternative option of establish source of wealth and identify trust controllers in this risk mitigation review involving a money remitter's agent repeatedly breaks large customer transfers into many nearby…, a two-part remediation plan for a money remitter's agent repeatedly breaks large customer transfers into many nearby… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
C:Compared with the stated facts about a money remitter's agent repeatedly breaks large customer transfers into many nearby…, ongoing review should detect changes in public office and business activity, not just onboarding status. Its controls focus on a client's brother becomes a senior procurement official and a related company receives government…, which would leave the observed problem of a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions unresolved. For the alternative option of refresh pep connections and investigate contract-linked flows in this risk mitigation review involving a money remitter's agent repeatedly breaks large customer transfers into many nearby…, a two-part remediation plan for a money remitter's agent repeatedly breaks large customer transfers into many nearby… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
E:When testing the contrasting pattern of a money remitter's agent repeatedly breaks large customer transfers into many nearby…, remember that the test focuses on who actually directs the entity, not just the shareholder register. Testing this would validate controls for a high-risk client uses a nominee shareholder whose instructions come from an unidentified…, not the effectiveness of remediation for a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions. For the alternative option of audit nominee files for documented control and escalation decisions in this risk mitigation review involving a money remitter's agent repeatedly breaks large customer transfers into many nearby…, a two-part remediation plan for a money remitter's agent repeatedly breaks large customer transfers into many nearby… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
Question 442
A financial-crime team is determining corrective action: An AFC policy remains unchanged despite a regulator's new guidance on high-risk digital payments. What should be implemented?
- Use competency-based measures in AFC reporting
- Require decision rationales, dissent recording, and action tracking
- Operate a formal horizon-scanning and policy-update process
- Report detection effectiveness alongside productivity KPIs
- Add quality, timeliness, and residual-risk measures to reporting
Explanation
Correct Answer
C:Governance should translate new obligations and material guidance into approved actions. This intervention operates at the point where the reported weakness arises; management counts completed training modules without checking repeated analyst errors presents a different failure mode.
Incorrect Answers
A:This is not the central mechanism when an AFC policy remains unchanged despite a regulator's new guidance on high-risk…; decision-makers should know whether training reduces actual control failures. The intervention addresses a different exposure: management counts completed training modules without checking repeated analyst errors; the present case concerns an AFC policy remains unchanged despite a regulator's new guidance on high-risk digital payments.
B:When testing the contrasting pattern of an AFC policy remains unchanged despite a regulator's new guidance on high-risk…, remember that accountability improves when high-risk exceptions are explicitly evaluated. Its controls focus on a board committee receives repeated high-risk onboarding exceptions without documented challenge or…, which would leave the observed problem of an AFC policy remains unchanged despite a regulator's new guidance on high-risk digital payments unresolved.
D:Against the reported situation in which an AFC policy remains unchanged despite a regulator's new guidance on high-risk…, management should see match quality and missed-risk indicators before accepting a volume reduction. This safeguard targets a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity; it does not directly remediate the process failure in an AFC policy remains unchanged despite a regulator's new guidance on high-risk digital payments.
E:The relevant alternative mechanism is different from an AFC policy remains unchanged despite a regulator's new guidance on high-risk…: Boards need information that supports challenge and resource decisions. That measure could be appropriate where a board pack reports alert volumes but omits false positives, overdue cases, and filing timeliness, but the described weakness is an AFC policy remains unchanged despite a regulator's new guidance on high-risk digital payments.
Question 443
An AFC owner is assigned to remediate this finding: A nominee director signs transactions on instruction from an undisclosed offshore client. What change best targets the underlying vulnerability?
- Verify underlying principals where nominee arrangements are present
- Escalate sham-entity indicators and analyze beneficiary spending
- Monitor unexplained escrow inflows and beneficiary changes
- Require transaction-level client allocation and ownership evidence
Explanation
Correct Answer
A:EDD should trace effective control rather than accept the nominee's identification alone. Targeting the exposed workflow is more effective than deploying a measure intended for a tax adviser creates repeated artificial loss-making entities whose transfers fund….
Incorrect Answers
B:Against the reported situation in which a nominee director signs transactions on instruction from an undisclosed offshore…, risk-based scrutiny should connect the tax scheme to subsequent movements of value. That measure could be appropriate where a tax adviser creates repeated artificial loss-making entities whose transfers fund personal luxury…, but the described weakness is a nominee director signs transactions on instruction from an undisclosed offshore client.
C:The relevant alternative mechanism is different from a nominee director signs transactions on instruction from an undisclosed offshore…: Controls should challenge third-party funding unrelated to the underlying agreement. The intervention addresses a different exposure: a notary receives large third-party escrow deposits with no connection to the declared asset…; the present case concerns a nominee director signs transactions on instruction from an undisclosed offshore client.
D:Compared with the stated facts about a nominee director signs transactions on instruction from an undisclosed offshore…, controls should prevent professional accounts from masking multiple unrelated beneficiaries. Its controls focus on a bookkeeping firm pools client receipts in its own account and remits them without customer-level…, which would leave the observed problem of a nominee director signs transactions on instruction from an undisclosed offshore client unresolved.
Question 444
A business unit asks compliance for an actionable response to the following: A financial crime team has investigators but no ownership of data quality, training, or sanctions policy updates. Which control is most suitable?
- Provide role-specific training with realistic referral scenarios
- Define accountable owners for each preventive, detective, and reporting process
- Train the front office to submit timely confidential internal referrals
- Deliver focused board training on controls, risk and accountability
Explanation
Correct Answer
B:Clear functions support timely operation and effective escalation. The control is aligned with the actual failure in a financial crime team has investigators but no ownership of data quality, training, or sanctions policy…; safeguards designed for tellers attend generic AML training but cannot identify an emerging local romance-scam mule… would not close that gap.
Incorrect Answers
A:Against the reported situation in which a financial crime team has investigators but no ownership of data quality, training,…, programs should turn emerging threats into actions staff can recognize and report. That would be a coherent mitigation for tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern, whereas the immediate gap concerns a financial crime team has investigators but no ownership of data quality, training, or sanctions….
C:Compared with the stated facts about a financial crime team has investigators but no ownership of data quality, training,…, human observations should reach investigators without the employee deciding the final SAR outcome. That measure could be appropriate where a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can…, but the described weakness is a financial crime team has investigators but no ownership of data quality, training, or sanctions….
D:This is not the central mechanism when a financial crime team has investigators but no ownership of data quality, training,…; appropriate education enables informed challenge and resourcing decisions. The intervention addresses a different exposure: a board receives annual compliance training identical to the material used for new customer-service…; the present case concerns a financial crime team has investigators but no ownership of data quality, training, or sanctions….
Question 445
Following the discovery that a bank adopts a vendor's proposed policy wording without review of local reporting law., which risk-based intervention most directly addresses the problem?
- Use competency-based measures in AFC reporting
- Require decision rationales, dissent recording, and action tracking
- Report detection effectiveness alongside productivity KPIs
- Require legal and AFC approval of external policy changes
Explanation
Correct Answer
D:Review ensures policies remain aligned with binding law and operational context. Its scope matches this process, while the alternative would mainly address management counts completed training modules without checking repeated analyst errors.
Incorrect Answers
A:When testing the contrasting pattern of a bank adopts a vendor's proposed policy wording without review of local reporting law, remember that decision-makers should know whether training reduces actual control failures. This safeguard targets management counts completed training modules without checking repeated analyst errors; it does not directly remediate the process failure in a bank adopts a vendor's proposed policy wording without review of local reporting law.
B:Accountability improves when high-risk exceptions are explicitly evaluated; the observed record here instead involves a bank adopts a vendor's proposed policy wording without review of local reporting law. That measure could be appropriate where a board committee receives repeated high-risk onboarding exceptions without documented challenge or…, but the described weakness is a bank adopts a vendor's proposed policy wording without review of local reporting law.
C:Against the reported situation in which a bank adopts a vendor's proposed policy wording without review of local reporting law, management should see match quality and missed-risk indicators before accepting a volume reduction. The intervention addresses a different exposure: a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity; the present case concerns a bank adopts a vendor's proposed policy wording without review of local reporting law.
Question 446
A control-design team faces this gap: An EU financial group assumes a policy written before the 2024 AML regulatory package will remain sufficient unchanged. Which tailored safeguard should it prioritize?
- Broaden lawful partnership participation or structured engagement
- Design lawful data-sharing architecture with purpose and access limits
- Build a sanctions legal inventory and regime-specific escalation paths
- Implement a jurisdiction-specific records lifecycle schedule
- Maintain a jurisdiction-and-date-specific EU regulatory change register
Explanation
Correct Answer
E:Horizon scanning should translate legislative milestones into approved policy updates. For the supported action of maintain a jurisdiction-and-date-specific eu regulatory change register in this risk mitigation review involving an EU financial group assumes a policy written before the 2024 AML regulatory package will…, its scope matches this process, while the alternative would mainly address a bank's public-private partnership excludes smaller payment firms that experience the same….
Incorrect Answers
A:This is not the central mechanism when an EU financial group assumes a policy written before the 2024 AML regulatory package…; wider sector input can improve typology visibility without indiscriminate data access. The intervention addresses a different exposure: a bank's public-private partnership excludes smaller payment firms that experience the same scam…; the present case concerns an EU financial group assumes a policy written before the 2024 AML regulatory package will remain….
B:When testing the contrasting pattern of an EU financial group assumes a policy written before the 2024 AML regulatory package…, remember that technical solutions should support AML work without overriding binding privacy requirements. Its controls focus on a bank centralizes all customer data in one country despite incompatible transfer restrictions in…, which would leave the observed problem of an EU financial group assumes a policy written before the 2024 AML regulatory package will remain… unresolved.
C:Group controls can be consistent without ignoring country-specific prohibitions; the observed record here instead involves an EU financial group assumes a policy written before the 2024 AML regulatory package…. That would be a coherent mitigation for a regional payments company deploys one global sanctions rule without checking local territorial…, whereas the immediate gap concerns an EU financial group assumes a policy written before the 2024 AML regulatory package will remain….
D:Against the reported situation in which an EU financial group assumes a policy written before the 2024 AML regulatory package…, retention schedules should satisfy mandatory periods while limiting unnecessary persistence. This safeguard targets a cross-border institution applies domestic data retention periods to client records governed by a…; it does not directly remediate the process failure in an EU financial group assumes a policy written before the 2024 AML regulatory package will remain….
Question 447
A financial-crime team is determining corrective action: An employee reports a customer attempting to suppress questions about repeated third-party cash deposits. What should be implemented?
- Require evidence-based case narratives and supervisory review
- Use monitored clocks and defined decision owners for reportable cases
- Design proportionate alternative verification and product limits
- Escalate the employee referral under the internal suspicious-activity process
Explanation
Correct Answer
D:A timely, confidential investigation should decide whether a report is warranted. This intervention operates at the point where the reported weakness arises; an investigator closes a case as not suspicious without recording why multiple cash… presents a different failure mode.
Incorrect Answers
A:This is not the central mechanism when an employee reports a customer attempting to suppress questions about repeated…; a reviewable record should explain the decision and unresolved uncertainties. That would be a coherent mitigation for an investigator closes a case as not suspicious without recording why multiple cash transfers were…, whereas the immediate gap concerns an employee reports a customer attempting to suppress questions about repeated third-party cash….
B:When testing the contrasting pattern of an employee reports a customer attempting to suppress questions about repeated…, remember that procedures should prevent internal debate from creating missed legal deadlines. This safeguard targets a transaction monitoring alert is escalated after the legal deadline because investigators dispute…; it does not directly remediate the process failure in an employee reports a customer attempting to suppress questions about repeated third-party cash….
C:Appropriate safeguards can preserve access while satisfying identification obligations; the observed record here instead involves an employee reports a customer attempting to suppress questions about repeated…. That measure could be appropriate where a bank terminates all accounts belonging to refugees because identity documents differ from its…, but the described weakness is an employee reports a customer attempting to suppress questions about repeated third-party cash….
Question 448
This fact pattern is being incorporated into the AFC control inventory: A risk committee meets quarterly but has no formal mandate or named decision powers. Which measure directly addresses it?
- Require legal and AFC approval of external policy changes
- Approve a clear charter with authority, membership, quorum, and reporting
- Add quality, timeliness, and residual-risk measures to reporting
- Report detection effectiveness alongside productivity KPIs
Explanation
Correct Answer
B:Defined terms let the committee make and escalate properly authorized decisions. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a bank adopts a vendor's proposed policy wording without review of local reporting law.
Incorrect Answers
A:Review ensures policies remain aligned with binding law and operational context; the observed record here instead involves a risk committee meets quarterly but has no formal mandate or named decision powers. Its controls focus on a bank adopts a vendor's proposed policy wording without review of local reporting law, which would leave the observed problem of a risk committee meets quarterly but has no formal mandate or named decision powers unresolved.
C:The relevant alternative mechanism is different from a risk committee meets quarterly but has no formal mandate or named decision powers: Boards need information that supports challenge and resource decisions. This safeguard targets a board pack reports alert volumes but omits false positives, overdue cases, and filing timeliness; it does not directly remediate the process failure in a risk committee meets quarterly but has no formal mandate or named decision powers.
D:Compared with the stated facts about a risk committee meets quarterly but has no formal mandate or named decision powers, management should see match quality and missed-risk indicators before accepting a volume reduction. That measure could be appropriate where a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity, but the described weakness is a risk committee meets quarterly but has no formal mandate or named decision powers.
Question 449
A control-design team faces this gap: A bank ignores guidance from the regional FATF-style body serving one of its markets. Which tailored safeguard should it prioritize?
- Integrate regional findings into jurisdiction and sector risk assessments
- Map UN measures into the applicable sanctions-screening rulebook
- Integrate goods, destination, and end-use controls with name screening
- Route supervisory requests through authorized legal and compliance teams
Explanation
Correct Answer
A:Policies should reflect local implementation weaknesses and emerging typologies. Targeting the exposed workflow is more effective than deploying a measure intended for a payments team assumes every UN Security Council sanctions resolution becomes locally….
Incorrect Answers
B:When testing the contrasting pattern of a bank ignores guidance from the regional FATF-style body serving one of its markets, remember that institutions should implement binding local restrictions and escalation procedures. That measure could be appropriate where a payments team assumes every UN Security Council sanctions resolution becomes locally enforceable…, but the described weakness is a bank ignores guidance from the regional FATF-style body serving one of its markets.
C:Trade due diligence should reflect the measures applicable to the underlying goods; the observed record here instead involves a bank ignores guidance from the regional FATF-style body serving one of its markets. The intervention addresses a different exposure: a branch screens sanctioned party names but overlooks a UN embargo relating to a category of…; the present case concerns a bank ignores guidance from the regional FATF-style body serving one of its markets.
D:Against the reported situation in which a bank ignores guidance from the regional FATF-style body serving one of its markets, controlled disclosure protects confidentiality while meeting valid regulatory obligations. Its controls focus on a bank treats a regulatory examination request as a criminal search warrant, which would leave the observed problem of a bank ignores guidance from the regional FATF-style body serving one of its markets unresolved.
Question 450
Staff have identified a repeatable risk pattern: A fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within payment deadlines. What would most directly improve control?
- Configure field-complete payment screening with message-specific mappings
- Preserve and screen relevant payment data with validated parsing limits
- Apply contextual entity resolution and analyst review to media alerts
- Calibrate fuzzy rules with documented false-negative safeguards
Explanation
Correct Answer
D:Optimization should improve usable signal without ignoring legally relevant variants. This intervention operates at the point where the reported weakness arises; a payments engine screens only the recipient name while ignoring originator and… presents a different failure mode.
Incorrect Answers
A:The relevant alternative mechanism is different from a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear…: Sanctions controls should cover relevant originator, intermediary, and beneficiary attributes. That would be a coherent mitigation for a payments engine screens only the recipient name while ignoring originator and intermediary…, whereas the immediate gap concerns a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within….
B:Compared with the stated facts about a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear…, control design should avoid silent loss of legally meaningful identifiers. This safeguard targets a bank's cross-border screening system truncates long payment free-text fields before names are…; it does not directly remediate the process failure in a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within….
C:This is not the central mechanism when a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear…; the process reduces unjustified risk changes caused by superficial matches. That measure could be appropriate where adverse media software flags a person because another individual with the same common name was…, but the described weakness is a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within….