Question 480
An AFC owner is assigned to remediate this finding: A virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak transparency. What change best targets the underlying vulnerability?
- Monitor coordinated betting and linked-account withdrawals
- Monitor high-value buy-in and low-play cash-out combinations
- Require linked-party checks for unusually clustered policy sales
- Due-diligence issuers and redemption counterparties using a risk-based approach
Explanation
Correct Answer
D:Controls should cover fiat rails and reserve-linked payments, not merely token transfers. This intervention operates at the point where the reported weakness arises; several esports betting accounts trade bets against each other and cash out through the… presents a different failure mode.
Incorrect Answers
A:Controls should combine gameplay patterns with identity and payment relationships; the observed record here instead involves a virtual-asset custodian processes large stablecoin redemptions through offshore…. That would be a coherent mitigation for several esports betting accounts trade bets against each other and cash out through the same device…, whereas the immediate gap concerns a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak….
B:Against the reported situation in which a virtual-asset custodian processes large stablecoin redemptions through offshore…, a targeted scenario should connect acquisition and redemption rather than separate counters. This safeguard targets a casino patron exchanges large cash amounts for chips and redeems them shortly afterward without…; it does not directly remediate the process failure in a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak….
C:The relevant alternative mechanism is different from a virtual-asset custodian processes large stablecoin redemptions through offshore…: Monitoring should recognize shared controllers and intermediaries across multiple contracts. That measure could be appropriate where an insurance broker proposes many single-premium policies purchased by entities with the same…, but the described weakness is a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak….
Question 481
An auditor describes an unresolved weakness: A virtual-asset provider screens wallet transfers against sanctions lists but never links addresses to identified service operators. Which remediation addresses the actual failure?
- Include beneficial-owner and ownership-change events in batch screening
- Integrate on-chain risk intelligence with sanctions case review
- Combine scheduled reviews with risk-based perpetual KYC triggers
- Calibrate fuzzy rules with documented false-negative safeguards
Explanation
Correct Answer
B:A layered approach should connect wallet evidence with applicable counterparty prohibitions. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a daily sanctions batch screens active customers but excludes recently changed beneficial….
Incorrect Answers
A:When testing the contrasting pattern of a virtual-asset provider screens wallet transfers against sanctions lists but never…, remember that risk controls should respond when individuals behind a legal person change. Its controls focus on a daily sanctions batch screens active customers but excludes recently changed beneficial owners, which would leave the observed problem of a virtual-asset provider screens wallet transfers against sanctions lists but never links addresses… unresolved.
C:Against the reported situation in which a virtual-asset provider screens wallet transfers against sanctions lists but never…, event-driven refresh better addresses changes in identity, ownership, and behavior. This safeguard targets a bank performs KYC refresh only once every five years for high-risk businesses despite major…; it does not directly remediate the process failure in a virtual-asset provider screens wallet transfers against sanctions lists but never links addresses….
D:The relevant alternative mechanism is different from a virtual-asset provider screens wallet transfers against sanctions lists but never…: Optimization should improve usable signal without ignoring legally relevant variants. That measure could be appropriate where a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within…, but the described weakness is a virtual-asset provider screens wallet transfers against sanctions lists but never links addresses….
Question 482
A financial-crime team is determining corrective action: Different businesses label the same beneficial-owner field as shareholder, controller, or principal without common definitions. What should be implemented?
- Adopt governed common data definitions and lineage rules
- Implement a coordinated customer-lifecycle AFC control architecture
- Use multiple reliable sources and event-driven owner refresh
- Require controlled exits with investigation and records checks
Explanation
Correct Answer
A:Systems must preserve meaning when customer records are combined. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a fintech buys a transaction-monitoring platform without any process for verifying….
Incorrect Answers
B:When testing the contrasting pattern of different businesses label the same beneficial-owner field as shareholder,…, remember that different preventive and detective tools should share reliable identifiers and case outcomes. The intervention addresses a different exposure: a fintech buys a transaction-monitoring platform without any process for verifying customers at…; the present case concerns different businesses label the same beneficial-owner field as shareholder, controller, or principal….
C:A single delayed register should not be the sole evidence for an ownership decision; the observed record here instead involves different businesses label the same beneficial-owner field as shareholder,…. Its controls focus on an onboarding system relies on a beneficial-ownership register that has not been updated following…, which would leave the observed problem of different businesses label the same beneficial-owner field as shareholder, controller, or principal… unresolved.
D:Against the reported situation in which different businesses label the same beneficial-owner field as shareholder,…, a lifecycle safeguard protects evidence while permitting properly authorized termination. That would be a coherent mitigation for an institution introduces an exit-control process that deletes customers before outstanding…, whereas the immediate gap concerns different businesses label the same beneficial-owner field as shareholder, controller, or principal….
Question 483
Staff have identified a repeatable risk pattern: A remote account applicant uses a high-quality printed face photograph to defeat a simple selfie comparison. What would most directly improve control?
- Combine biometric matching with liveness and identity-document validation
- Implement ingestion exception alerts and controlled replay of rejected data
- Apply contextual verification triggers to higher-risk account events
- Standardize event timestamps with validated time-zone handling
- Use multiple reliable sources and event-driven owner refresh
- Use risk-based step-up verification for higher exposure cases
Explanation
Correct Answer
A:For the supported action of combine biometric matching with liveness and identity-document validation in this risk mitigation review involving a remote account applicant uses a high-quality printed face photograph to defeat a simple…, a layered approach reduces spoofing risk without assuming biometrics prove identity on their own. This intervention operates at the point where the reported weakness arises; a data warehouse silently drops payment records that fail a new schema validation rule presents a different failure mode.
Incorrect Answers
B:Compared with the stated facts about a remote account applicant uses a high-quality printed face photograph to defeat a…, a dependable pipeline must surface and recover failed records before exposure persists. That would be a coherent mitigation for a data warehouse silently drops payment records that fail a new schema validation rule, whereas the immediate gap concerns a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie….
C:This is not the central mechanism when a remote account applicant uses a high-quality printed face photograph to defeat a…; controls should be commensurate with exposure and inclusive of users who cannot use biometrics. This safeguard targets a payment app adds facial recognition to every minor account-profile change despite low observed…; it does not directly remediate the process failure in a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie….
D:When testing the contrasting pattern of a remote account applicant uses a high-quality printed face photograph to defeat a…, remember that consistent definitions are essential for reliable cross-border and near-real-time monitoring. That measure could be appropriate where a monitoring engine receives transaction dates as free-form strings and misorders transfers across…, but the described weakness is a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie….
E:A single delayed register should not be the sole evidence for an ownership decision; the observed record here instead involves a remote account applicant uses a high-quality printed face photograph to defeat a…. The intervention addresses a different exposure: an onboarding system relies on a beneficial-ownership register that has not been updated following…; the present case concerns a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie….
F:Against the reported situation in which a remote account applicant uses a high-quality printed face photograph to defeat a…, a proportionate journey can preserve mandatory identification while adjusting additional checks. Its controls focus on digital onboarding requests identical extensive checks from simple low-risk applicants and…, which would leave the observed problem of a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie… unresolved.
Question 484
The institution wants to reduce this specific exposure: A bank invests in a complex AI tool while high-risk payment streams still bypass basic transaction ingestion. What is the most appropriate control design?
- Prioritize data completeness and essential coverage before optional analytics
- Require approved data-minimization and contractual privacy controls
- Use controlled federated or aggregated analysis where lawful and effective
- Conduct scenario-based proof-of-concept and integration assessment
Explanation
Correct Answer
A:Resource allocation should first close material surveillance blind spots. This intervention operates at the point where the reported weakness arises; an investigation platform copies unmasked sensitive customer records into a vendor's… presents a different failure mode.
Incorrect Answers
B:Compared with the stated facts about a bank invests in a complex AI tool while high-risk payment streams still bypass…, privacy-preserving architecture should limit secondary use and protect investigatory records. That would be a coherent mitigation for an investigation platform copies unmasked sensitive customer records into a vendor's…, whereas the immediate gap concerns a bank invests in a complex AI tool while high-risk payment streams still bypass basic transaction….
C:This is not the central mechanism when a bank invests in a complex AI tool while high-risk payment streams still bypass…; data can sometimes be analyzed locally while sharing limited insights rather than raw records. This safeguard targets a cross-border analytics team seeks risk insights without moving identifiable customer files…; it does not directly remediate the process failure in a bank invests in a complex AI tool while high-risk payment streams still bypass basic transaction….
D:When testing the contrasting pattern of a bank invests in a complex AI tool while high-risk payment streams still bypass…, remember that selection should validate detection, operations, data protection, and maintainability before commitment. That measure could be appropriate where a bank selects a screening vendor based on advertised accuracy without checking payment-system…, but the described weakness is a bank invests in a complex AI tool while high-risk payment streams still bypass basic transaction….
Question 485
This fact pattern is being incorporated into the AFC control inventory: A news-screening tool presents a decade-old allegation as breaking information about a current customer. Which measure directly addresses it?
- Calibrate fuzzy rules with documented false-negative safeguards
- Include source age, case outcome, and review controls in adverse-media workflows
- Use explainable event screening with review and escalation safeguards
- Include beneficial-owner and ownership-change events in batch screening
Explanation
Correct Answer
B:Investigators should distinguish allegations from proven conduct and record decisions. For the supported action of include source age, case outcome, and review controls in adverse-media workflows in this risk mitigation review involving a news-screening tool presents a decade-old allegation as breaking information about a current…, the mechanism directly mitigates the stated exposure rather than a related but separate problem such as a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them….
Incorrect Answers
A:Optimization should improve usable signal without ignoring legally relevant variants; the observed record here instead involves a news-screening tool presents a decade-old allegation as breaking information about…. Its controls focus on a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within…, which would leave the observed problem of a news-screening tool presents a decade-old allegation as breaking information about a current… unresolved.
C:The relevant alternative mechanism is different from a news-screening tool presents a decade-old allegation as breaking information about…: Automation should prioritize changes while preserving evidence-based decisions. This safeguard targets an automated KYC tool increases a customer's risk score on every adverse-media mention without…; it does not directly remediate the process failure in a news-screening tool presents a decade-old allegation as breaking information about a current….
D:Compared with the stated facts about a news-screening tool presents a decade-old allegation as breaking information about…, risk controls should respond when individuals behind a legal person change. That measure could be appropriate where a daily sanctions batch screens active customers but excludes recently changed beneficial owners, but the described weakness is a news-screening tool presents a decade-old allegation as breaking information about a current….
Question 486
An AFC owner is assigned to remediate this finding: A bank loses correspondent relationships after repeated failures to remediate reported AML weaknesses. What change best targets the underlying vulnerability?
- Review related-party loan agreements and provenance before completion
- Escalate extortion-linked transfers through financial-crime investigations
- Require conflict-of-interest review and independent approval
- Escalate remediation with board-owned milestones and evidence
Explanation
Correct Answer
D:Documented accountability and credible control improvements are needed to restore counterparty confidence. Targeting the exposed workflow is more effective than deploying a measure intended for a property investor funds down payments with loans from companies that immediately receive….
Incorrect Answers
A:Loan documents alone are insufficient without corroborating economic capacity and beneficial ownership; the observed record here instead involves a bank loses correspondent relationships after repeated failures to remediate…. That measure could be appropriate where a property investor funds down payments with loans from companies that immediately receive matching…, but the described weakness is a bank loses correspondent relationships after repeated failures to remediate reported AML….
B:Against the reported situation in which a bank loses correspondent relationships after repeated failures to remediate…, a targeted case review preserves evidence and considers reporting under the governing jurisdiction. The intervention addresses a different exposure: a technology company pays regular 'recovery fees' to accounts linked to a regional extortion group; the present case concerns a bank loses correspondent relationships after repeated failures to remediate reported AML….
C:The relevant alternative mechanism is different from a bank loses correspondent relationships after repeated failures to remediate…: Controls over third-party intermediaries reduce the risk of disguised inducements and self-dealing. Its controls focus on a procurement officer is offered consultancy fees tied to awarding a government infrastructure…, which would leave the observed problem of a bank loses correspondent relationships after repeated failures to remediate reported AML… unresolved.
Question 487
After a risk-assessment update notes that a professional service provider invoices an offshore entity for vague advisory work followed by cash withdrawals., which safeguard most closely responds to the root cause?
- Flag short-period related-party resales and unexplained price changes
- Require substance testing for high-value professional-fee payments
- Apply related-entity network due diligence before onboarding
- Verify underlying principals where nominee arrangements are present
Explanation
Correct Answer
B:Control teams should assess economic purpose rather than relying on an invoice heading. Its scope matches this process, while the alternative would mainly address a land developer rapidly sells the same parcel among related entities at escalating prices.
Incorrect Answers
A:Compared with the stated facts about a professional service provider invoices an offshore entity for vague advisory work…, transaction monitoring should identify concentrated linked-party real-estate movement. That measure could be appropriate where a land developer rapidly sells the same parcel among related entities at escalating prices, but the described weakness is a professional service provider invoices an offshore entity for vague advisory work followed by….
C:When testing the contrasting pattern of a professional service provider invoices an offshore entity for vague advisory work…, remember that identification of common control helps prevent fragmented risk treatment across customers. Its controls focus on a company-service provider registers dozens of firms sharing directors, addresses, and inactive…, which would leave the observed problem of a professional service provider invoices an offshore entity for vague advisory work followed by… unresolved.
D:EDD should trace effective control rather than accept the nominee's identification alone; the observed record here instead involves a professional service provider invoices an offshore entity for vague advisory work…. That would be a coherent mitigation for a nominee director signs transactions on instruction from an undisclosed offshore client, whereas the immediate gap concerns a professional service provider invoices an offshore entity for vague advisory work followed by….
Question 488
A risk owner seeks a focused response rather than blanket customer exclusion: An AML model's thresholds are reduced until alert volume rises sharply but investigators find fewer meaningful cases. Which option is best?
- Weight graph edges by discriminative evidence and analyst context
- Use phased AI deployment with validation and human accountability
- Require source-linked review and sign-off for AI-assisted narratives
- Tune scenarios against outcomes and risk priorities rather than volume alone
- Use explainable network analytics with investigator verification
Explanation
Correct Answer
D:A sound process weighs missed patterns, capacity, and control effectiveness. This intervention operates at the point where the reported weakness arises; a graph model flags every customer sharing a common public IP address as a criminal network presents a different failure mode.
Incorrect Answers
A:Against the reported situation in which an AML model's thresholds are reduced until alert volume rises sharply but…, network controls should not equate a single common attribute with criminal association. That would be a coherent mitigation for a graph model flags every customer sharing a common public IP address as a criminal network, whereas the immediate gap concerns an AML model's thresholds are reduced until alert volume rises sharply but investigators find fewer….
B:The relevant alternative mechanism is different from an AML model's thresholds are reduced until alert volume rises sharply but…: Machine learning can supplement or replace rules only with proven coverage and controls. This safeguard targets a bank replaces every rules-based alert with a machine-learning score without evaluating…; it does not directly remediate the process failure in an AML model's thresholds are reduced until alert volume rises sharply but investigators find fewer….
C:Compared with the stated facts about an AML model's thresholds are reduced until alert volume rises sharply but…, automation can improve drafting speed but responsibility for factual accuracy remains human. That measure could be appropriate where a case system auto-generates suspicious-activity narratives using AI that sometimes invents account…, but the described weakness is an AML model's thresholds are reduced until alert volume rises sharply but investigators find fewer….
E:When testing the contrasting pattern of an AML model's thresholds are reduced until alert volume rises sharply but…, remember that graph alerts should prioritize related accounts without treating every shared attribute as proof. Its controls focus on several mule accounts appear independent until network software links them to a single device and…, which would leave the observed problem of an AML model's thresholds are reduced until alert volume rises sharply but investigators find fewer… unresolved.
Question 489
A business unit asks compliance for an actionable response to the following: A daily sanctions batch screens active customers but excludes recently changed beneficial owners. Which control is most suitable?
- Configure field-complete payment screening with message-specific mappings
- Include source age, case outcome, and review controls in adverse-media workflows
- Include beneficial-owner and ownership-change events in batch screening
- Preserve and screen relevant payment data with validated parsing limits
- Use explainable event screening with review and escalation safeguards
- Configure tested fuzzy and alias-aware screening rules
Explanation
Correct Answer
C:Risk controls should respond when individuals behind a legal person change. The control is aligned with the actual failure in a daily sanctions batch screens active customers but excludes recently changed beneficial owners; safeguards designed for a payments engine screens only the recipient name while ignoring originator and… would not close that gap.
Incorrect Answers
A:Against the reported situation in which a daily sanctions batch screens active customers but excludes recently changed…, sanctions controls should cover relevant originator, intermediary, and beneficiary attributes. That measure could be appropriate where a payments engine screens only the recipient name while ignoring originator and intermediary…, but the described weakness is a daily sanctions batch screens active customers but excludes recently changed beneficial owners.
B:The relevant alternative mechanism is different from a daily sanctions batch screens active customers but excludes recently changed…: Investigators should distinguish allegations from proven conduct and record decisions. The intervention addresses a different exposure: a news-screening tool presents a decade-old allegation as breaking information about a current…; the present case concerns a daily sanctions batch screens active customers but excludes recently changed beneficial owners.
D:This is not the central mechanism when a daily sanctions batch screens active customers but excludes recently changed…; control design should avoid silent loss of legally meaningful identifiers. That would be a coherent mitigation for a bank's cross-border screening system truncates long payment free-text fields before names are…, whereas the immediate gap concerns a daily sanctions batch screens active customers but excludes recently changed beneficial owners.
E:When testing the contrasting pattern of a daily sanctions batch screens active customers but excludes recently changed…, remember that automation should prioritize changes while preserving evidence-based decisions. This safeguard targets an automated KYC tool increases a customer's risk score on every adverse-media mention without…; it does not directly remediate the process failure in a daily sanctions batch screens active customers but excludes recently changed beneficial owners.
F:Matching should be sensitive enough to surface credible variants with reviewable alerts; the observed record here instead involves a daily sanctions batch screens active customers but excludes recently changed…. That measure could be appropriate where a sanctions screening tool uses exact spelling only and misses a listed person whose name has two…, but the described weakness is a daily sanctions batch screens active customers but excludes recently changed beneficial owners.
Question 490
Following the discovery that adverse media software flags a person because another individual with the same common name was arrested., which risk-based intervention most directly addresses the problem?
- Combine scheduled reviews with risk-based perpetual KYC triggers
- Preserve and screen relevant payment data with validated parsing limits
- Apply contextual entity resolution and analyst review to media alerts
- Calibrate fuzzy rules with documented false-negative safeguards
Explanation
Correct Answer
C:The process reduces unjustified risk changes caused by superficial matches. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a bank performs KYC refresh only once every five years for high-risk businesses despite….
Incorrect Answers
A:When testing the contrasting pattern of adverse media software flags a person because another individual with the same common…, remember that event-driven refresh better addresses changes in identity, ownership, and behavior. This safeguard targets a bank performs KYC refresh only once every five years for high-risk businesses despite major…; it does not directly remediate the process failure in adverse media software flags a person because another individual with the same common name was….
B:Control design should avoid silent loss of legally meaningful identifiers; the observed record here instead involves adverse media software flags a person because another individual with the same common…. That measure could be appropriate where a bank's cross-border screening system truncates long payment free-text fields before names are…, but the described weakness is adverse media software flags a person because another individual with the same common name was….
D:The relevant alternative mechanism is different from adverse media software flags a person because another individual with the same common…: Optimization should improve usable signal without ignoring legally relevant variants. Its controls focus on a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within…, which would leave the observed problem of adverse media software flags a person because another individual with the same common name was… unresolved.