Question 460
This fact pattern is being incorporated into the AFC control inventory: A newly appointed foreign minister wants accounts funded by an offshore trust with unexplained wealth. Which measure directly addresses it?
- Set relationship-level cash aggregation and courier review controls
- Apply partner due diligence and proportionate grant monitoring
- Enhance correspondent due diligence and contractual transparency
- Obtain senior management approval and enhanced ongoing monitoring
Explanation
Correct Answer
D:Foreign PEP relationships call for elevated governance and reasonable wealth/source-of-funds checks. Its scope matches this process, while the alternative would mainly address a regional bank sees sudden cash deposits at several branches by couriers working for one….
Incorrect Answers
A:Monitoring should associate deposits with the underlying merchant, not only the counter location; the observed record here instead involves a newly appointed foreign minister wants accounts funded by an offshore trust with…. This safeguard targets a regional bank sees sudden cash deposits at several branches by couriers working for one merchant; it does not directly remediate the process failure in a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained….
B:Against the reported situation in which a newly appointed foreign minister wants accounts funded by an offshore trust with…, a risk-sensitive arrangement can preserve assistance while managing diversion and TF risk. That measure could be appropriate where a relief organization routes grants to an unverified local partner in an active conflict area, but the described weakness is a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained….
C:The relevant alternative mechanism is different from a newly appointed foreign minister wants accounts funded by an offshore trust with…: Understanding respondent customers and nested services informs risk appetite and monitoring. The intervention addresses a different exposure: a bank opens a payable-through correspondent arrangement but cannot identify the foreign bank's…; the present case concerns a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained….
Question 461
A risk owner seeks a focused response rather than blanket customer exclusion: A monitoring system change goes live with no fallback when its external API becomes unavailable. Which option is best?
- Use controlled federated or aggregated analysis where lawful and effective
- Prioritize data completeness and essential coverage before optional analytics
- Allocate capacity by risk and introduce high-severity service levels
- Introduce fail-safe escalation and monitored resilience procedures
Explanation
Correct Answer
D:The design should respond to outages according to legal and operational risk. Its scope matches this process, while the alternative would mainly address a cross-border analytics team seeks risk insights without moving identifiable customer….
Incorrect Answers
A:Against the reported situation in which a monitoring system change goes live with no fallback when its external API becomes…, data can sometimes be analyzed locally while sharing limited insights rather than raw records. This safeguard targets a cross-border analytics team seeks risk insights without moving identifiable customer files…; it does not directly remediate the process failure in a monitoring system change goes live with no fallback when its external API becomes unavailable.
B:The relevant alternative mechanism is different from a monitoring system change goes live with no fallback when its external API becomes…: Resource allocation should first close material surveillance blind spots. That measure could be appropriate where a bank invests in a complex AI tool while high-risk payment streams still bypass basic transaction…, but the described weakness is a monitoring system change goes live with no fallback when its external API becomes unavailable.
C:Compared with the stated facts about a monitoring system change goes live with no fallback when its external API becomes…, operational governance should align resources to potential harm rather than headline throughput. The intervention addresses a different exposure: an AML analytics unit reports record throughput but growing unresolved high-risk alerts remain…; the present case concerns a monitoring system change goes live with no fallback when its external API becomes unavailable.
Question 462
Staff have identified a repeatable risk pattern: A US branch relies on European transaction reporting rules to set its US suspicious-activity filing triggers. What would most directly improve control?
- Broaden lawful partnership participation or structured engagement
- Maintain entity-specific reporting procedures and legal mappings
- Build a sanctions legal inventory and regime-specific escalation paths
- Apply targeted enhanced due diligence within stated risk appetite
Explanation
Correct Answer
B:Controls should distinguish US duties from EU member-state implementations. For the supported action of maintain entity-specific reporting procedures and legal mappings in this risk mitigation review involving a US branch relies on European transaction reporting rules to set its US suspicious-activity…, its scope matches this process, while the alternative would mainly address a bank's public-private partnership excludes smaller payment firms that experience the same….
Incorrect Answers
A:The relevant alternative mechanism is different from a US branch relies on European transaction reporting rules to set its US…: Wider sector input can improve typology visibility without indiscriminate data access. That measure could be appropriate where a bank's public-private partnership excludes smaller payment firms that experience the same scam…, but the described weakness is a US branch relies on European transaction reporting rules to set its US suspicious-activity filing….
C:This is not the central mechanism when a US branch relies on European transaction reporting rules to set its US…; group controls can be consistent without ignoring country-specific prohibitions. Its controls focus on a regional payments company deploys one global sanctions rule without checking local territorial…, which would leave the observed problem of a US branch relies on European transaction reporting rules to set its US suspicious-activity filing… unresolved.
D:When testing the contrasting pattern of a US branch relies on European transaction reporting rules to set its US…, remember that a proportionate approach balances financial-crime exposure with legitimate economic access. That would be a coherent mitigation for an international bank rejects all payments from a high-risk country without assessing customer or…, whereas the immediate gap concerns a US branch relies on European transaction reporting rules to set its US suspicious-activity filing….
Question 463
A control-design team faces this gap: A bank buys adverse-media data but cannot explain which persons its records actually match. Which tailored safeguard should it prioritize?
- Use trusted identity-source checks and document authenticity testing
- Apply documented quality and identity checks to external data feeds
- Use risk-based step-up verification for higher exposure cases
- Combine biometric matching with liveness and identity-document validation
Explanation
Correct Answer
B:Automated enrichment should not turn name similarity into an unsupported adverse conclusion. The control is aligned with the actual failure in a bank buys adverse-media data but cannot explain which persons its records actually match; safeguards designed for an e-KYC provider verifies an image of an identity document but never validates its issuer… would not close that gap.
Incorrect Answers
A:This is not the central mechanism when a bank buys adverse-media data but cannot explain which persons its records actually…; verification should establish both the document's legitimacy and its link to the applicant. That would be a coherent mitigation for an e-KYC provider verifies an image of an identity document but never validates its issuer or…, whereas the immediate gap concerns a bank buys adverse-media data but cannot explain which persons its records actually match.
C:A proportionate journey can preserve mandatory identification while adjusting additional checks; the observed record here instead involves a bank buys adverse-media data but cannot explain which persons its records actually…. That measure could be appropriate where digital onboarding requests identical extensive checks from simple low-risk applicants and…, but the described weakness is a bank buys adverse-media data but cannot explain which persons its records actually match.
D:Against the reported situation in which a bank buys adverse-media data but cannot explain which persons its records actually…, a layered approach reduces spoofing risk without assuming biometrics prove identity on their own. The intervention addresses a different exposure: a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie…; the present case concerns a bank buys adverse-media data but cannot explain which persons its records actually match.
Question 464
This fact pattern is being incorporated into the AFC control inventory: A bank's public-private partnership excludes smaller payment firms that experience the same scam corridors. Which measure directly addresses it?
- Use a documented permitted sharing mechanism with data minimization
- Broaden lawful partnership participation or structured engagement
- Create peer-referral validation and documented escalation rules
- Build typology-focused collaboration with controlled escalation paths
- Maintain a jurisdiction-and-date-specific EU regulatory change register
Explanation
Correct Answer
B:Wider sector input can improve typology visibility without indiscriminate data access. Its scope matches this process, while the alternative would mainly address two private banks exchange a customer's full personal file without verifying a recognized….
Incorrect Answers
A:The institution should share only relevant information under authorized procedures; the observed record here instead involves a bank's public-private partnership excludes smaller payment firms that experience…. That measure could be appropriate where two private banks exchange a customer's full personal file without verifying a recognized sharing…, but the described weakness is a bank's public-private partnership excludes smaller payment firms that experience the same scam….
C:The relevant alternative mechanism is different from a bank's public-private partnership excludes smaller payment firms that experience…: Review should weigh reliability and context before a proportionate decision. Its controls focus on an institution receives a peer alert about a suspicious account and immediately exits the client…, which would leave the observed problem of a bank's public-private partnership excludes smaller payment firms that experience the same scam… unresolved.
D:Compared with the stated facts about a bank's public-private partnership excludes smaller payment firms that experience…, the design should turn common patterns into actionable internal monitoring updates. That would be a coherent mitigation for a banking consortium wants to share scam indicators but only discusses names instead of…, whereas the immediate gap concerns a bank's public-private partnership excludes smaller payment firms that experience the same scam….
E:This is not the central mechanism when a bank's public-private partnership excludes smaller payment firms that experience…; horizon scanning should translate legislative milestones into approved policy updates. This safeguard targets an EU financial group assumes a policy written before the 2024 AML regulatory package will remain…; it does not directly remediate the process failure in a bank's public-private partnership excludes smaller payment firms that experience the same scam….
Question 465
A control-design team faces this gap: A parts distributor attempts a payment to a company controlled by a designated person but uses a changed trading name. Which tailored safeguard should it prioritize?
- Introduce capacity-based triage and statutory-deadline controls
- Escalate remediation with board-owned milestones and evidence
- Use risk intelligence to prioritize exposed sectors and businesses
- Apply ownership-aware sanctions due diligence before release
Explanation
Correct Answer
D:Screening the company name alone does not address designated-party interests hidden behind an intermediary. Its scope matches this process, while the alternative would mainly address a suspicious-activity backlog grows until analysts miss required reporting deadlines.
Incorrect Answers
A:This is not the central mechanism when a parts distributor attempts a payment to a company controlled by a designated person…; escalation owners and exception tracking help prevent queues from exceeding legal reporting windows. This safeguard targets a suspicious-activity backlog grows until analysts miss required reporting deadlines; it does not directly remediate the process failure in a parts distributor attempts a payment to a company controlled by a designated person but uses a….
B:When testing the contrasting pattern of a parts distributor attempts a payment to a company controlled by a designated person…, remember that documented accountability and credible control improvements are needed to restore counterparty confidence. That measure could be appropriate where a bank loses correspondent relationships after repeated failures to remediate reported AML…, but the described weakness is a parts distributor attempts a payment to a company controlled by a designated person but uses a….
C:Sectoral typologies should inform enhanced review and proportionate control placement; the observed record here instead involves a parts distributor attempts a payment to a company controlled by a designated person…. The intervention addresses a different exposure: an illicit trade network infiltrates local payment channels and distorts competition with…; the present case concerns a parts distributor attempts a payment to a company controlled by a designated person but uses a….
Question 466
Following the discovery that an institution uses AI to prioritize sanctions cases but lets the system permanently clear high-risk matches without review., which risk-based intervention most directly addresses the problem?
- Require source-linked review and sign-off for AI-assisted narratives
- Use rolling-window aggregation and relationship-level monitoring scenarios
- Keep human escalation for consequential or uncertain sanctions matches
- Use explainable network analytics with investigator verification
Explanation
Correct Answer
C:Appropriate governance prevents unsupported algorithmic decisions from becoming final legal dispositions. The control is aligned with the actual failure in an institution uses AI to prioritize sanctions cases but lets the system permanently clear high-risk…; safeguards designed for a case system auto-generates suspicious-activity narratives using AI that sometimes invents… would not close that gap.
Incorrect Answers
A:When testing the contrasting pattern of an institution uses AI to prioritize sanctions cases but lets the system permanently…, remember that automation can improve drafting speed but responsibility for factual accuracy remains human. That measure could be appropriate where a case system auto-generates suspicious-activity narratives using AI that sometimes invents account…, but the described weakness is an institution uses AI to prioritize sanctions cases but lets the system permanently clear….
B:The rule should evaluate connected payments over time instead of single values; the observed record here instead involves an institution uses AI to prioritize sanctions cases but lets the system permanently…. The intervention addresses a different exposure: a transaction-monitoring rule detects individual large transfers but misses repeated low-value…; the present case concerns an institution uses AI to prioritize sanctions cases but lets the system permanently clear….
D:The relevant alternative mechanism is different from an institution uses AI to prioritize sanctions cases but lets the system permanently…: Graph alerts should prioritize related accounts without treating every shared attribute as proof. That would be a coherent mitigation for several mule accounts appear independent until network software links them to a single device and…, whereas the immediate gap concerns an institution uses AI to prioritize sanctions cases but lets the system permanently clear….
Question 467
Following the discovery that a board receives annual compliance training identical to the material used for new customer-service employees., which risk-based intervention most directly addresses the problem?
- Train the front office to submit timely confidential internal referrals
- Require complete CDD and AFC approval before risk-sensitive onboarding
- Deliver focused board training on controls, risk and accountability
- Define accountable owners for each preventive, detective, and reporting process
Explanation
Correct Answer
C:Appropriate education enables informed challenge and resourcing decisions. For the supported action of deliver focused board training on controls, risk and accountability in this risk mitigation review involving a board receives annual compliance training identical to the material used for new…, its scope matches this process, while the alternative would mainly address a wealth adviser notices unexpected offshore transfers but believes only the monitoring….
Incorrect Answers
A:When testing the contrasting pattern of a board receives annual compliance training identical to the material used for new…, remember that human observations should reach investigators without the employee deciding the final SAR outcome. Its controls focus on a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can…, which would leave the observed problem of a board receives annual compliance training identical to the material used for new customer-service… unresolved.
B:The front office should gather information while compliance independently challenges unresolved risk; the observed record here instead involves a board receives annual compliance training identical to the material used for new…. That would be a coherent mitigation for a relationship manager promises a high-risk client instant onboarding despite missing beneficial…, whereas the immediate gap concerns a board receives annual compliance training identical to the material used for new customer-service….
D:The relevant alternative mechanism is different from a board receives annual compliance training identical to the material used for new…: Clear functions support timely operation and effective escalation. That measure could be appropriate where a financial crime team has investigators but no ownership of data quality, training, or sanctions…, but the described weakness is a board receives annual compliance training identical to the material used for new customer-service….
Question 468
After a risk-assessment update notes that a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can report unusual activity., which safeguard most closely responds to the root cause?
- Set distinct AFC accountability and independent senior escalation
- Provide role-specific training with realistic referral scenarios
- Train the front office to submit timely confidential internal referrals
- Define accountable owners for each preventive, detective, and reporting process
- Align privacy schedules with statutory AML requirements and legal holds
- Create secure cybersecurity-to-AFC incident referrals
Explanation
Correct Answer
C:Human observations should reach investigators without the employee deciding the final SAR outcome. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a growing bank moves AFC analysts into a sales reporting chain without clear conflict….
Incorrect Answers
A:Compared with the stated facts about a wealth adviser notices unexpected offshore transfers but believes only the…, the organizational design should support risk-based oversight of revenue-generating areas. This safeguard targets a growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards; it does not directly remediate the process failure in a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
B:This is not the central mechanism when a wealth adviser notices unexpected offshore transfers but believes only the…; programs should turn emerging threats into actions staff can recognize and report. That measure could be appropriate where tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern, but the described weakness is a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
D:Clear functions support timely operation and effective escalation; the observed record here instead involves a wealth adviser notices unexpected offshore transfers but believes only the…. Its controls focus on a financial crime team has investigators but no ownership of data quality, training, or sanctions…, which would leave the observed problem of a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can… unresolved.
E:Against the reported situation in which a wealth adviser notices unexpected offshore transfers but believes only the…, joint governance should preserve necessary records while respecting minimization duties. That would be a coherent mitigation for a privacy team deletes records under an automated schedule without considering mandatory AML…, whereas the immediate gap concerns a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
F:The relevant alternative mechanism is different from a wealth adviser notices unexpected offshore transfers but believes only the…: Combined analysis supports fraud controls, AML monitoring, and relevant reporting decisions. This safeguard targets a cybersecurity team detects a compromised customer login but the AFC team never reviews the…; it does not directly remediate the process failure in a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
Question 469
A financial-crime team is determining corrective action: An art dealer receives payment for a sculpture from a different offshore buyer than the invoice names. What should be implemented?
- Screen collectors and demand third-party payment justification
- Escalate sham-entity indicators and analyze beneficiary spending
- Require transaction-level client allocation and ownership evidence
- Verify underlying principals where nominee arrangements are present
Explanation
Correct Answer
A:Controls should address origin, beneficial ownership, and economically defensible pricing. The control is aligned with the actual failure in an art dealer receives payment for a sculpture from a different offshore buyer than the invoice names; safeguards designed for a tax adviser creates repeated artificial loss-making entities whose transfers fund… would not close that gap.
Incorrect Answers
B:When testing the contrasting pattern of an art dealer receives payment for a sculpture from a different offshore buyer than…, remember that risk-based scrutiny should connect the tax scheme to subsequent movements of value. Its controls focus on a tax adviser creates repeated artificial loss-making entities whose transfers fund personal luxury…, which would leave the observed problem of an art dealer receives payment for a sculpture from a different offshore buyer than the invoice… unresolved.
C:Controls should prevent professional accounts from masking multiple unrelated beneficiaries; the observed record here instead involves an art dealer receives payment for a sculpture from a different offshore buyer than…. That would be a coherent mitigation for a bookkeeping firm pools client receipts in its own account and remits them without customer-level…, whereas the immediate gap concerns an art dealer receives payment for a sculpture from a different offshore buyer than the invoice….
D:Against the reported situation in which an art dealer receives payment for a sculpture from a different offshore buyer than…, eDD should trace effective control rather than accept the nominee's identification alone. This safeguard targets a nominee director signs transactions on instruction from an undisclosed offshore client; it does not directly remediate the process failure in an art dealer receives payment for a sculpture from a different offshore buyer than the invoice….
Question 470
A business unit asks compliance for an actionable response to the following: A transaction monitoring alert is escalated after the legal deadline because investigators dispute which event starts the reporting clock. Which control is most suitable?
- Open a documented relationship-level unusual-activity investigation
- Escalate the employee referral under the internal suspicious-activity process
- Route material exits through approved multidisciplinary governance
- Use monitored clocks and defined decision owners for reportable cases
Explanation
Correct Answer
D:Procedures should prevent internal debate from creating missed legal deadlines. The control is aligned with the actual failure in a transaction monitoring alert is escalated after the legal deadline because investigators dispute which…; safeguards designed for a retail customer receives a series of unrelated inbound transfers and sends almost all… would not close that gap.
Incorrect Answers
A:Against the reported situation in which a transaction monitoring alert is escalated after the legal deadline because…, a holistic review should compare the pattern to expected behavior and reporting thresholds. Its controls focus on a retail customer receives a series of unrelated inbound transfers and sends almost all funds…, which would leave the observed problem of a transaction monitoring alert is escalated after the legal deadline because investigators dispute… unresolved.
B:The relevant alternative mechanism is different from a transaction monitoring alert is escalated after the legal deadline because…: A timely, confidential investigation should decide whether a report is warranted. That would be a coherent mitigation for an employee reports a customer attempting to suppress questions about repeated third-party cash…, whereas the immediate gap concerns a transaction monitoring alert is escalated after the legal deadline because investigators dispute….
C:Compared with the stated facts about a transaction monitoring alert is escalated after the legal deadline because…, compliance, legal, and business functions should make accountable and appropriately timed decisions. This safeguard targets a bank decides to exit a high-risk customer while two divisions disagree about who has approval…; it does not directly remediate the process failure in a transaction monitoring alert is escalated after the legal deadline because investigators dispute….