Question 470
A business unit asks compliance for an actionable response to the following: A transaction monitoring alert is escalated after the legal deadline because investigators dispute which event starts the reporting clock. Which control is most suitable?
- Open a documented relationship-level unusual-activity investigation
- Escalate the employee referral under the internal suspicious-activity process
- Route material exits through approved multidisciplinary governance
- Use monitored clocks and defined decision owners for reportable cases
Explanation
Correct Answer
D:Procedures should prevent internal debate from creating missed legal deadlines. The control is aligned with the actual failure in a transaction monitoring alert is escalated after the legal deadline because investigators dispute which…; safeguards designed for a retail customer receives a series of unrelated inbound transfers and sends almost all… would not close that gap.
Incorrect Answers
A:Against the reported situation in which a transaction monitoring alert is escalated after the legal deadline because…, a holistic review should compare the pattern to expected behavior and reporting thresholds. Its controls focus on a retail customer receives a series of unrelated inbound transfers and sends almost all funds…, which would leave the observed problem of a transaction monitoring alert is escalated after the legal deadline because investigators dispute… unresolved.
B:The relevant alternative mechanism is different from a transaction monitoring alert is escalated after the legal deadline because…: A timely, confidential investigation should decide whether a report is warranted. That would be a coherent mitigation for an employee reports a customer attempting to suppress questions about repeated third-party cash…, whereas the immediate gap concerns a transaction monitoring alert is escalated after the legal deadline because investigators dispute….
C:Compared with the stated facts about a transaction monitoring alert is escalated after the legal deadline because…, compliance, legal, and business functions should make accountable and appropriately timed decisions. This safeguard targets a bank decides to exit a high-risk customer while two divisions disagree about who has approval…; it does not directly remediate the process failure in a transaction monitoring alert is escalated after the legal deadline because investigators dispute….
Question 471
After a risk-assessment update notes that a commodity broker ships industrial valves through successive intermediaries to obscure a restricted end user., which safeguard most closely responds to the root cause?
- Apply end-user and dual-use goods due diligence to trade flows
- Apply cash-intensive-business due diligence and tailored cash monitoring
- Escalate remediation with board-owned milestones and evidence
- Introduce capacity-based triage and statutory-deadline controls
Explanation
Correct Answer
A:A focus on consignees and controlled items addresses more than name-only screening. This intervention operates at the point where the reported weakness arises; a warehouse operator routes illicit cash proceeds into retail deposits while claiming… presents a different failure mode.
Incorrect Answers
B:This is not the central mechanism when a commodity broker ships industrial valves through successive intermediaries to…; expected turnover, seasonality, and cash volumes should define targeted triggers for deviations. That would be a coherent mitigation for a warehouse operator routes illicit cash proceeds into retail deposits while claiming ordinary shop…, whereas the immediate gap concerns a commodity broker ships industrial valves through successive intermediaries to obscure a….
C:When testing the contrasting pattern of a commodity broker ships industrial valves through successive intermediaries to…, remember that documented accountability and credible control improvements are needed to restore counterparty confidence. This safeguard targets a bank loses correspondent relationships after repeated failures to remediate reported AML…; it does not directly remediate the process failure in a commodity broker ships industrial valves through successive intermediaries to obscure a….
D:Escalation owners and exception tracking help prevent queues from exceeding legal reporting windows; the observed record here instead involves a commodity broker ships industrial valves through successive intermediaries to…. That measure could be appropriate where a suspicious-activity backlog grows until analysts miss required reporting deadlines, but the described weakness is a commodity broker ships industrial valves through successive intermediaries to obscure a….
Question 472
A financial-crime team is determining corrective action: Tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern. What should be implemented?
- Provide role-specific training with realistic referral scenarios
- Define accountable owners for each preventive, detective, and reporting process
- Set distinct AFC accountability and independent senior escalation
- Require complete CDD and AFC approval before risk-sensitive onboarding
- Train the front office to submit timely confidential internal referrals
Explanation
Correct Answer
A:Programs should turn emerging threats into actions staff can recognize and report. Targeting the exposed workflow is more effective than deploying a measure intended for a financial crime team has investigators but no ownership of data quality, training, or….
Incorrect Answers
B:When testing the contrasting pattern of tellers attend generic AML training but cannot identify an emerging local…, remember that clear functions support timely operation and effective escalation. That measure could be appropriate where a financial crime team has investigators but no ownership of data quality, training, or sanctions…, but the described weakness is tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern.
C:The organizational design should support risk-based oversight of revenue-generating areas; the observed record here instead involves tellers attend generic AML training but cannot identify an emerging local…. The intervention addresses a different exposure: a growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards; the present case concerns tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern.
D:Against the reported situation in which tellers attend generic AML training but cannot identify an emerging local…, the front office should gather information while compliance independently challenges unresolved risk. Its controls focus on a relationship manager promises a high-risk client instant onboarding despite missing beneficial…, which would leave the observed problem of tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern unresolved.
E:The relevant alternative mechanism is different from tellers attend generic AML training but cannot identify an emerging local…: Human observations should reach investigators without the employee deciding the final SAR outcome. That would be a coherent mitigation for a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can…, whereas the immediate gap concerns tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern.
Question 473
An auditor describes an unresolved weakness: An overseas police unit asks a bank employee to preserve client data without a recognized local legal instrument. Which remediation addresses the actual failure?
- Document evidence standards before using private typology research
- Require legal validation of significant vendor-derived sanctions rules
- Update product and country risks using the official assessment
- Update relevant trade-risk scenarios and investigator guidance
- Escalate to legal before imposing a disclosure or evidence hold
Explanation
Correct Answer
E:This avoids ad hoc decisions that may violate law or undermine a valid investigation. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a bank repeats industry research claims about laundering indicators without checking….
Incorrect Answers
A:When testing the contrasting pattern of an overseas police unit asks a bank employee to preserve client data without a…, remember that governance should separate well-supported observations from tentative assertions. That would be a coherent mitigation for a bank repeats industry research claims about laundering indicators without checking methodology or…, whereas the immediate gap concerns an overseas police unit asks a bank employee to preserve client data without a recognized local….
B:Change control should avoid turning vendor opinions into unreviewed legal determinations; the observed record here instead involves an overseas police unit asks a bank employee to preserve client data without a…. This safeguard targets a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation; it does not directly remediate the process failure in an overseas police unit asks a bank employee to preserve client data without a recognized local….
C:Against the reported situation in which an overseas police unit asks a bank employee to preserve client data without a…, a reasoned change documents exposure and any needed specialized controls. That measure could be appropriate where a bank ignores a national proliferation-financing threat assessment because it has little retail…, but the described weakness is an overseas police unit asks a bank employee to preserve client data without a recognized local….
D:The relevant alternative mechanism is different from an overseas police unit asks a bank employee to preserve client data without a…: Controls should evolve with substantiated typologies rather than remain limited to historic cases. The intervention addresses a different exposure: a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade…; the present case concerns an overseas police unit asks a bank employee to preserve client data without a recognized local….
Question 474
The institution wants to reduce this specific exposure: A data scientist deploys a revised monitoring model without documenting validation or independent challenge. What is the most appropriate control design?
- Weight graph edges by discriminative evidence and analyst context
- Require governed model validation before production release
- Keep human escalation for consequential or uncertain sanctions matches
- Use phased AI deployment with validation and human accountability
Explanation
Correct Answer
B:A controlled lifecycle supports reproducibility, ownership, and operational monitoring. Targeting the exposed workflow is more effective than deploying a measure intended for a graph model flags every customer sharing a common public IP address as a criminal network.
Incorrect Answers
A:The relevant alternative mechanism is different from a data scientist deploys a revised monitoring model without documenting validation or…: Network controls should not equate a single common attribute with criminal association. The intervention addresses a different exposure: a graph model flags every customer sharing a common public IP address as a criminal network; the present case concerns a data scientist deploys a revised monitoring model without documenting validation or independent….
C:This is not the central mechanism when a data scientist deploys a revised monitoring model without documenting validation or…; appropriate governance prevents unsupported algorithmic decisions from becoming final legal dispositions. That would be a coherent mitigation for an institution uses AI to prioritize sanctions cases but lets the system permanently clear…, whereas the immediate gap concerns a data scientist deploys a revised monitoring model without documenting validation or independent….
D:When testing the contrasting pattern of a data scientist deploys a revised monitoring model without documenting validation or…, remember that machine learning can supplement or replace rules only with proven coverage and controls. This safeguard targets a bank replaces every rules-based alert with a machine-learning score without evaluating…; it does not directly remediate the process failure in a data scientist deploys a revised monitoring model without documenting validation or independent….
Question 475
An AFC owner is assigned to remediate this finding: A complex group uses three layers of offshore holdings with trustee powers to redirect profits. What change best targets the underlying vulnerability?
- Require evidence-based case narratives and supervisory review
- Use monitored clocks and defined decision owners for reportable cases
- Open a documented relationship-level unusual-activity investigation
- Require layered ownership mapping and enhanced relationship approval
Explanation
Correct Answer
D:The bank should establish control before treating legal entities as transparent. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as an investigator closes a case as not suspicious without recording why multiple cash….
Incorrect Answers
A:A reviewable record should explain the decision and unresolved uncertainties; the observed record here instead involves a complex group uses three layers of offshore holdings with trustee powers to…. The intervention addresses a different exposure: an investigator closes a case as not suspicious without recording why multiple cash transfers were…; the present case concerns a complex group uses three layers of offshore holdings with trustee powers to redirect profits.
B:Against the reported situation in which a complex group uses three layers of offshore holdings with trustee powers to…, procedures should prevent internal debate from creating missed legal deadlines. Its controls focus on a transaction monitoring alert is escalated after the legal deadline because investigators dispute…, which would leave the observed problem of a complex group uses three layers of offshore holdings with trustee powers to redirect profits unresolved.
C:The relevant alternative mechanism is different from a complex group uses three layers of offshore holdings with trustee powers to…: A holistic review should compare the pattern to expected behavior and reporting thresholds. That would be a coherent mitigation for a retail customer receives a series of unrelated inbound transfers and sends almost all funds…, whereas the immediate gap concerns a complex group uses three layers of offshore holdings with trustee powers to redirect profits.
Question 476
The institution wants to reduce this specific exposure: A bank ignores a national proliferation-financing threat assessment because it has little retail exposure. What is the most appropriate control design?
- Update product and country risks using the official assessment
- Document evidence standards before using private typology research
- Require legal validation of significant vendor-derived sanctions rules
- Calibrate product risk weights to applicable national findings
Explanation
Correct Answer
A:A reasoned change documents exposure and any needed specialized controls. This intervention operates at the point where the reported weakness arises; a bank repeats industry research claims about laundering indicators without checking… presents a different failure mode.
Incorrect Answers
B:Compared with the stated facts about a bank ignores a national proliferation-financing threat assessment because it has…, governance should separate well-supported observations from tentative assertions. That would be a coherent mitigation for a bank repeats industry research claims about laundering indicators without checking methodology or…, whereas the immediate gap concerns a bank ignores a national proliferation-financing threat assessment because it has little retail….
C:This is not the central mechanism when a bank ignores a national proliferation-financing threat assessment because it has…; change control should avoid turning vendor opinions into unreviewed legal determinations. This safeguard targets a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation; it does not directly remediate the process failure in a bank ignores a national proliferation-financing threat assessment because it has little retail….
D:When testing the contrasting pattern of a bank ignores a national proliferation-financing threat assessment because it has…, remember that the model should reflect evidence-based exposures rather than indiscriminate national averages. That measure could be appropriate where a bank scores a low-risk domestic payment product using a national threat assessment for an…, but the described weakness is a bank ignores a national proliferation-financing threat assessment because it has little retail….
Question 477
A business unit asks compliance for an actionable response to the following: A board committee receives repeated high-risk onboarding exceptions without documented challenge or outcomes. Which control is most suitable?
- Require legal and AFC approval of external policy changes
- Require decision rationales, dissent recording, and action tracking
- Establish shared triggers between reputational risk and AFC teams
- Maintain local filing instructions and escalation responsibilities
- Operate a formal horizon-scanning and policy-update process
Explanation
Correct Answer
B:Accountability improves when high-risk exceptions are explicitly evaluated. Its scope matches this process, while the alternative would mainly address a bank adopts a vendor's proposed policy wording without review of local reporting law.
Incorrect Answers
A:Against the reported situation in which a board committee receives repeated high-risk onboarding exceptions without…, review ensures policies remain aligned with binding law and operational context. That measure could be appropriate where a bank adopts a vendor's proposed policy wording without review of local reporting law, but the described weakness is a board committee receives repeated high-risk onboarding exceptions without documented challenge or….
C:Compared with the stated facts about a board committee receives repeated high-risk onboarding exceptions without…, a controlled information flow supports timely and proportionate decisions. Its controls focus on a reputational-risk team discovers adverse media about a major customer but does not inform…, which would leave the observed problem of a board committee receives repeated high-risk onboarding exceptions without documented challenge or… unresolved.
D:This is not the central mechanism when a board committee receives repeated high-risk onboarding exceptions without…; a global process needs legally accurate jurisdictional implementation. That would be a coherent mitigation for a compliance analyst assumes suspicious activity always must be reported to the same global office, whereas the immediate gap concerns a board committee receives repeated high-risk onboarding exceptions without documented challenge or….
E:When testing the contrasting pattern of a board committee receives repeated high-risk onboarding exceptions without…, remember that governance should translate new obligations and material guidance into approved actions. This safeguard targets an AFC policy remains unchanged despite a regulator's new guidance on high-risk digital payments; it does not directly remediate the process failure in a board committee receives repeated high-risk onboarding exceptions without documented challenge or….
Question 478
After a risk-assessment update notes that a high-risk client uses a nominee shareholder whose instructions come from an unidentified political adviser., which safeguard most closely responds to the root cause?
- Apply partner due diligence and proportionate grant monitoring
- Escalate material trade-document inconsistencies before settlement
- Escalate dual-use transactions for sanctions and end-use checks
- Enhance correspondent due diligence and contractual transparency
- Require ultimate-controller verification and enhanced due diligence
- Require third-party payer scrutiny and delivery reconciliation
Explanation
Correct Answer
E:A relationship should not be accepted solely on the nominee's identity where control remains opaque. For the supported action of require ultimate-controller verification and enhanced due diligence in this risk mitigation review involving a high-risk client uses a nominee shareholder whose instructions come from an unidentified…, the mechanism directly mitigates the stated exposure rather than a related but separate problem such as a relief organization routes grants to an unverified local partner in an active conflict….
Incorrect Answers
A:Compared with the stated facts about a high-risk client uses a nominee shareholder whose instructions come from an…, a risk-sensitive arrangement can preserve assistance while managing diversion and TF risk. That would be a coherent mitigation for a relief organization routes grants to an unverified local partner in an active conflict area, whereas the immediate gap concerns a high-risk client uses a nominee shareholder whose instructions come from an unidentified….
B:This is not the central mechanism when a high-risk client uses a nominee shareholder whose instructions come from an…; control points must address trade substance rather than accepting facially complete papers. This safeguard targets a trading company requests a letter of credit with documents inconsistent on port, cargo, and…; it does not directly remediate the process failure in a high-risk client uses a nominee shareholder whose instructions come from an unidentified….
C:When testing the contrasting pattern of a high-risk client uses a nominee shareholder whose instructions come from an…, remember that specialist review should integrate ownership, goods and destination rather than price alone. That measure could be appropriate where a licensed firearms wholesaler ships dual-use components to newly created intermediaries with…, but the described weakness is a high-risk client uses a nominee shareholder whose instructions come from an unidentified….
D:Understanding respondent customers and nested services informs risk appetite and monitoring; the observed record here instead involves a high-risk client uses a nominee shareholder whose instructions come from an…. The intervention addresses a different exposure: a bank opens a payable-through correspondent arrangement but cannot identify the foreign bank's…; the present case concerns a high-risk client uses a nominee shareholder whose instructions come from an unidentified….
F:The relevant alternative mechanism is different from a high-risk client uses a nominee shareholder whose instructions come from an…: Controls should link each payment to a genuine purchaser and documented commodity sale. That would be a coherent mitigation for a precious-metals dealer receives repeated third-party deposits without links to purchased bullion, whereas the immediate gap concerns a high-risk client uses a nominee shareholder whose instructions come from an unidentified….
Question 479
A business unit asks compliance for an actionable response to the following: A bank uses an industry association's voluntary principles as its only legal compliance standard. Which control is most suitable?
- Escalate foreign requests to legal and authorized liaison channels
- Maintain jurisdiction-specific obligations mapped to FATF principles
- Route supervisory requests through authorized legal and compliance teams
- Maintain a legal obligations inventory alongside industry guidance
Explanation
Correct Answer
D:The program can use good practice while ensuring minimum mandatory duties are satisfied. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a fraud analyst sends customer data to overseas police on an informal personal email request.
Incorrect Answers
A:Against the reported situation in which a bank uses an industry association's voluntary principles as its only legal…, formal processes support lawful international assistance and preserve evidence integrity. The intervention addresses a different exposure: a fraud analyst sends customer data to overseas police on an informal personal email request; the present case concerns a bank uses an industry association's voluntary principles as its only legal compliance standard.
B:The relevant alternative mechanism is different from a bank uses an industry association's voluntary principles as its only legal…: Compliance design should use the common standards while applying the actual laws governing each entity. Its controls focus on a multinational bank treats FATF recommendations as directly enforceable statutes in every…, which would leave the observed problem of a bank uses an industry association's voluntary principles as its only legal compliance standard unresolved.
C:Compared with the stated facts about a bank uses an industry association's voluntary principles as its only legal…, controlled disclosure protects confidentiality while meeting valid regulatory obligations. That would be a coherent mitigation for a bank treats a regulatory examination request as a criminal search warrant, whereas the immediate gap concerns a bank uses an industry association's voluntary principles as its only legal compliance standard.
Question 480
An AFC owner is assigned to remediate this finding: A virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak transparency. What change best targets the underlying vulnerability?
- Monitor coordinated betting and linked-account withdrawals
- Monitor high-value buy-in and low-play cash-out combinations
- Require linked-party checks for unusually clustered policy sales
- Due-diligence issuers and redemption counterparties using a risk-based approach
Explanation
Correct Answer
D:Controls should cover fiat rails and reserve-linked payments, not merely token transfers. This intervention operates at the point where the reported weakness arises; several esports betting accounts trade bets against each other and cash out through the… presents a different failure mode.
Incorrect Answers
A:Controls should combine gameplay patterns with identity and payment relationships; the observed record here instead involves a virtual-asset custodian processes large stablecoin redemptions through offshore…. That would be a coherent mitigation for several esports betting accounts trade bets against each other and cash out through the same device…, whereas the immediate gap concerns a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak….
B:Against the reported situation in which a virtual-asset custodian processes large stablecoin redemptions through offshore…, a targeted scenario should connect acquisition and redemption rather than separate counters. This safeguard targets a casino patron exchanges large cash amounts for chips and redeems them shortly afterward without…; it does not directly remediate the process failure in a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak….
C:The relevant alternative mechanism is different from a virtual-asset custodian processes large stablecoin redemptions through offshore…: Monitoring should recognize shared controllers and intermediaries across multiple contracts. That measure could be appropriate where an insurance broker proposes many single-premium policies purchased by entities with the same…, but the described weakness is a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak….