Question 490
Following the discovery that adverse media software flags a person because another individual with the same common name was arrested., which risk-based intervention most directly addresses the problem?
- Combine scheduled reviews with risk-based perpetual KYC triggers
- Preserve and screen relevant payment data with validated parsing limits
- Apply contextual entity resolution and analyst review to media alerts
- Calibrate fuzzy rules with documented false-negative safeguards
Explanation
Correct Answer
C:The process reduces unjustified risk changes caused by superficial matches. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a bank performs KYC refresh only once every five years for high-risk businesses despite….
Incorrect Answers
A:When testing the contrasting pattern of adverse media software flags a person because another individual with the same common…, remember that event-driven refresh better addresses changes in identity, ownership, and behavior. This safeguard targets a bank performs KYC refresh only once every five years for high-risk businesses despite major…; it does not directly remediate the process failure in adverse media software flags a person because another individual with the same common name was….
B:Control design should avoid silent loss of legally meaningful identifiers; the observed record here instead involves adverse media software flags a person because another individual with the same common…. That measure could be appropriate where a bank's cross-border screening system truncates long payment free-text fields before names are…, but the described weakness is adverse media software flags a person because another individual with the same common name was….
D:The relevant alternative mechanism is different from adverse media software flags a person because another individual with the same common…: Optimization should improve usable signal without ignoring legally relevant variants. Its controls focus on a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within…, which would leave the observed problem of adverse media software flags a person because another individual with the same common name was… unresolved.
Question 491
A financial-crime team is determining corrective action: Internal audit designs the transaction monitoring rules it must later assess. What should be implemented?
- Assign operational design to management and independent review to audit
- Define measurable prohibitions, limits, and escalation triggers in the RAS
- Require time-limited exceptions with committee reporting and exit criteria
- Give AFC leadership direct access to senior oversight and adequate resources
Explanation
Correct Answer
A:The three lines model separates control operation, compliance oversight, and independent assurance. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries for….
Incorrect Answers
B:When testing the contrasting pattern of internal audit designs the transaction monitoring rules it must later assess, remember that specific tolerances translate board intent into customer and product decisions. The intervention addresses a different exposure: a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries for high-risk…; the present case concerns internal audit designs the transaction monitoring rules it must later assess.
C:Governed exceptions preserve accountability and prevent permanent unmanaged deviations; the observed record here instead involves internal audit designs the transaction monitoring rules it must later assess. Its controls focus on a bank repeatedly grants exceptions for the same high-risk product without reporting them to its…, which would leave the observed problem of internal audit designs the transaction monitoring rules it must later assess unresolved.
D:Against the reported situation in which internal audit designs the transaction monitoring rules it must later assess, authority and independent escalation make the control framework capable of affecting business decisions. That would be a coherent mitigation for an AML department has written procedures but no authority to challenge a revenue-generating…, whereas the immediate gap concerns internal audit designs the transaction monitoring rules it must later assess.
Question 492
Following the discovery that a land developer rapidly sells the same parcel among related entities at escalating prices., which risk-based intervention most directly addresses the problem?
- Require substance testing for high-value professional-fee payments
- Flag short-period related-party resales and unexplained price changes
- Apply risk-based gatekeeper due diligence and escalation
- Refresh trust-party CDD after material distribution or deed changes
Explanation
Correct Answer
B:Transaction monitoring should identify concentrated linked-party real-estate movement. The control is aligned with the actual failure in a land developer rapidly sells the same parcel among related entities at escalating prices; safeguards designed for a professional service provider invoices an offshore entity for vague advisory work… would not close that gap.
Incorrect Answers
A:When testing the contrasting pattern of a land developer rapidly sells the same parcel among related entities at escalating…, remember that control teams should assess economic purpose rather than relying on an invoice heading. That would be a coherent mitigation for a professional service provider invoices an offshore entity for vague advisory work followed by…, whereas the immediate gap concerns a land developer rapidly sells the same parcel among related entities at escalating prices.
C:Against the reported situation in which a land developer rapidly sells the same parcel among related entities at escalating…, a bank should seek sufficient transparency before accepting transactions for newly formed entities. That measure could be appropriate where a legal adviser forms companies for a client while refusing to disclose the person providing…, but the described weakness is a land developer rapidly sells the same parcel among related entities at escalating prices.
D:The relevant alternative mechanism is different from a land developer rapidly sells the same parcel among related entities at escalating…: Risk controls should follow changes to beneficiaries and powers throughout the relationship. The intervention addresses a different exposure: a trustee directs distributions to beneficiaries omitted from a family's original trust…; the present case concerns a land developer rapidly sells the same parcel among related entities at escalating prices.
Question 493
A control-design team faces this gap: A bank responds to a law-enforcement subpoena by providing unrelated records outside the requested period. Which tailored safeguard should it prioritize?
- Use legal-approved production with scope control and an evidence log
- Open a documented relationship-level unusual-activity investigation
- Require evidence-based case narratives and supervisory review
- Use targeted mitigation and documented risk appetite decisions
- Apply time-bound conditions with escalation for breaches
- Use monitored clocks and defined decision owners for reportable cases
Explanation
Correct Answer
A:Controlled responses satisfy valid obligations while protecting unrelated clients. The control is aligned with the actual failure in a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested period; safeguards designed for a retail customer receives a series of unrelated inbound transfers and sends almost all… would not close that gap.
Incorrect Answers
B:When testing the contrasting pattern of a bank responds to a law-enforcement subpoena by providing unrelated records outside…, remember that a holistic review should compare the pattern to expected behavior and reporting thresholds. Its controls focus on a retail customer receives a series of unrelated inbound transfers and sends almost all funds…, which would leave the observed problem of a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested… unresolved.
C:A reviewable record should explain the decision and unresolved uncertainties; the observed record here instead involves a bank responds to a law-enforcement subpoena by providing unrelated records outside…. That would be a coherent mitigation for an investigator closes a case as not suspicious without recording why multiple cash transfers were…, whereas the immediate gap concerns a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested….
D:Against the reported situation in which a bank responds to a law-enforcement subpoena by providing unrelated records outside…, a proportionate strategy can avoid excluding legitimate remittances unnecessarily. This safeguard targets an MSB withdraws from an entire remittance corridor after isolated suspicious cases without…; it does not directly remediate the process failure in a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested….
E:The relevant alternative mechanism is different from a bank responds to a law-enforcement subpoena by providing unrelated records outside…: Risk owners should track exceptions and act when agreed mitigation fails. That measure could be appropriate where a customer is retained despite repeated unresolved suspicious transactions because revenue targets…, but the described weakness is a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested….
F:Compared with the stated facts about a bank responds to a law-enforcement subpoena by providing unrelated records outside…, procedures should prevent internal debate from creating missed legal deadlines. The intervention addresses a different exposure: a transaction monitoring alert is escalated after the legal deadline because investigators dispute…; the present case concerns a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested….
Question 494
This fact pattern is being incorporated into the AFC control inventory: A new national risk assessment highlights cash-intensive money service businesses but the bank's weights remain unchanged. Which measure directly addresses it?
- Update relevant trade-risk scenarios and investigator guidance
- Require legal validation of significant vendor-derived sanctions rules
- Document evidence standards before using private typology research
- Trigger documented methodology and control updates after national risk changes
Explanation
Correct Answer
D:A governed refresh links risk intelligence to operational safeguards. For the supported action of trigger documented methodology and control updates after national risk changes in this risk mitigation review involving a new national risk assessment highlights cash-intensive money service businesses but the…, its scope matches this process, while the alternative would mainly address a regional FIU report identifies a new invoice-manipulation scheme involving the bank's….
Incorrect Answers
A:Controls should evolve with substantiated typologies rather than remain limited to historic cases; the observed record here instead involves a new national risk assessment highlights cash-intensive money service businesses but…. This safeguard targets a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade…; it does not directly remediate the process failure in a new national risk assessment highlights cash-intensive money service businesses but the bank's….
B:Against the reported situation in which a new national risk assessment highlights cash-intensive money service businesses but…, change control should avoid turning vendor opinions into unreviewed legal determinations. That measure could be appropriate where a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation, but the described weakness is a new national risk assessment highlights cash-intensive money service businesses but the bank's….
C:The relevant alternative mechanism is different from a new national risk assessment highlights cash-intensive money service businesses but…: Governance should separate well-supported observations from tentative assertions. The intervention addresses a different exposure: a bank repeats industry research claims about laundering indicators without checking methodology or…; the present case concerns a new national risk assessment highlights cash-intensive money service businesses but the bank's….
Question 495
A risk owner seeks a focused response rather than blanket customer exclusion: A local compliance team automatically applies US suspicious-activity deadlines to an EU subsidiary. Which option is best?
- Build typology-focused collaboration with controlled escalation paths
- Integrate sanctions legal analysis with ownership-aware screening
- Maintain a jurisdiction-and-date-specific EU regulatory change register
- Publish locally approved reporting and escalation calendars
Explanation
Correct Answer
D:A global standard should be adapted to each authority's binding requirements. Targeting the exposed workflow is more effective than deploying a measure intended for a banking consortium wants to share scam indicators but only discusses names instead of….
Incorrect Answers
A:Against the reported situation in which a local compliance team automatically applies US suspicious-activity deadlines to an…, the design should turn common patterns into actionable internal monitoring updates. That measure could be appropriate where a banking consortium wants to share scam indicators but only discusses names instead of…, but the described weakness is a local compliance team automatically applies US suspicious-activity deadlines to an EU subsidiary.
B:The relevant alternative mechanism is different from a local compliance team automatically applies US suspicious-activity deadlines to an…: Exact name matching alone may miss indirect interests or alternative identifiers. The intervention addresses a different exposure: a US firm assumes every person on an OFAC sanctions list can be screened by exact spelling alone; the present case concerns a local compliance team automatically applies US suspicious-activity deadlines to an EU subsidiary.
C:Compared with the stated facts about a local compliance team automatically applies US suspicious-activity deadlines to an…, horizon scanning should translate legislative milestones into approved policy updates. Its controls focus on an EU financial group assumes a policy written before the 2024 AML regulatory package will remain…, which would leave the observed problem of a local compliance team automatically applies US suspicious-activity deadlines to an EU subsidiary unresolved.
Question 496
A financial-crime team is determining corrective action: A risk team updates KYC at account opening but not after a complex customer changes ownership. What should be implemented?
- Trigger targeted CDD refresh and transaction review for behavior changes
- Run risk-based ongoing PEP screening and reassessment
- Implement event-driven KYC refresh and ongoing customer review
- Build controlled cross-risk referrals into scoring and investigations
Explanation
Correct Answer
C:Lifecycle controls should react to material changes, not only fixed anniversaries. Its scope matches this process, while the alternative would mainly address a customer profile lists salary income but transactions show unusually large commercial….
Incorrect Answers
A:This is not the central mechanism when a risk team updates KYC at account opening but not after a complex customer changes…; a linked process investigates anomalies rather than automatically treating them as crime. Its controls focus on a customer profile lists salary income but transactions show unusually large commercial receipts, which would leave the observed problem of a risk team updates KYC at account opening but not after a complex customer changes ownership unresolved.
B:When testing the contrasting pattern of a risk team updates KYC at account opening but not after a complex customer changes…, remember that monitoring should detect new roles and prompt enhanced measures when warranted. That would be a coherent mitigation for a bank screens PEPs only during initial account opening, whereas the immediate gap concerns a risk team updates KYC at account opening but not after a complex customer changes ownership.
D:Against the reported situation in which a risk team updates KYC at account opening but not after a complex customer changes…, sharing validated indicators improves awareness without treating every fraud alert as proven laundering. That measure could be appropriate where a fraud team sees mule-account patterns that the AML team never incorporates into customer risk…, but the described weakness is a risk team updates KYC at account opening but not after a complex customer changes ownership.
Question 497
Staff have identified a repeatable risk pattern: A high-risk subsidiary is included in the enterprise risk assessment but not in the sanctions-specific risk assessment. What would most directly improve control?
- Restrict material profile edits and require independent review
- Implement event-driven KYC refresh and ongoing customer review
- Align enterprise and sanctions assessments while preserving distinct risk drivers
- Escalate account exit through legal and AFC governance before closure
Explanation
Correct Answer
C:Common data improves consistency but specialized risks require tailored analysis. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a relationship manager changes customer occupation data after repeated alerts without an….
Incorrect Answers
A:The relevant alternative mechanism is different from a high-risk subsidiary is included in the enterprise risk assessment but not in the…: Segregation and audit trails help prevent business staff from concealing anomalies. This safeguard targets a relationship manager changes customer occupation data after repeated alerts without an audit trail; it does not directly remediate the process failure in a high-risk subsidiary is included in the enterprise risk assessment but not in the….
B:Compared with the stated facts about a high-risk subsidiary is included in the enterprise risk assessment but not in the…, lifecycle controls should react to material changes, not only fixed anniversaries. That measure could be appropriate where a risk team updates KYC at account opening but not after a complex customer changes ownership, but the described weakness is a high-risk subsidiary is included in the enterprise risk assessment but not in the….
D:When testing the contrasting pattern of a high-risk subsidiary is included in the enterprise risk assessment but not in the…, remember that coordinated decision-making balances customer risk with valid investigative requirements. Its controls focus on a bank closes an account under investigation without considering an authorized law-enforcement…, which would leave the observed problem of a high-risk subsidiary is included in the enterprise risk assessment but not in the… unresolved.
Question 498
A financial-crime team is determining corrective action: A recycling firm receives international transfers inconsistent with its permits and declared scrap exports. What should be implemented?
- Apply cash-intensive-business due diligence and tailored cash monitoring
- Build commodity and permit-based reviews for high-risk counterparties
- Apply trade-document discrepancy and counterparty reviews
- Introduce capacity-based triage and statutory-deadline controls
Explanation
Correct Answer
B:EDD should investigate the actual trade and licensing, not simply the payment amounts. For the supported action of build commodity and permit-based reviews for high-risk counterparties in this risk mitigation review involving a recycling firm receives international transfers inconsistent with its permits and declared…, the mechanism directly mitigates the stated exposure rather than a related but separate problem such as a warehouse operator routes illicit cash proceeds into retail deposits while claiming….
Incorrect Answers
A:This is not the central mechanism when a recycling firm receives international transfers inconsistent with its permits and…; expected turnover, seasonality, and cash volumes should define targeted triggers for deviations. Its controls focus on a warehouse operator routes illicit cash proceeds into retail deposits while claiming ordinary shop…, which would leave the observed problem of a recycling firm receives international transfers inconsistent with its permits and declared scrap… unresolved.
C:Trade controls should detect abnormal price, routing, quantity, and related-party combinations; the observed record here instead involves a recycling firm receives international transfers inconsistent with its permits and…. This safeguard targets a shell importer repeatedly overstates invoice values and sends the difference overseas through…; it does not directly remediate the process failure in a recycling firm receives international transfers inconsistent with its permits and declared scrap….
D:Against the reported situation in which a recycling firm receives international transfers inconsistent with its permits and…, escalation owners and exception tracking help prevent queues from exceeding legal reporting windows. That measure could be appropriate where a suspicious-activity backlog grows until analysts miss required reporting deadlines, but the described weakness is a recycling firm receives international transfers inconsistent with its permits and declared scrap….
Question 499
This fact pattern is being incorporated into the AFC control inventory: A growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards. Which measure directly addresses it?
- Train the front office to submit timely confidential internal referrals
- Set distinct AFC accountability and independent senior escalation
- Provide role-specific training with realistic referral scenarios
- Deliver focused board training on controls, risk and accountability
Explanation
Correct Answer
B:The organizational design should support risk-based oversight of revenue-generating areas. For the supported action of set distinct afc accountability and independent senior escalation in this risk mitigation review involving a growing bank moves AFC analysts into a sales reporting chain without clear conflict…, its scope matches this process, while the alternative would mainly address a wealth adviser notices unexpected offshore transfers but believes only the monitoring….
Incorrect Answers
A:Human observations should reach investigators without the employee deciding the final SAR outcome; the observed record here instead involves a growing bank moves AFC analysts into a sales reporting chain without clear conflict…. That measure could be appropriate where a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can…, but the described weakness is a growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards.
C:The relevant alternative mechanism is different from a growing bank moves AFC analysts into a sales reporting chain without clear conflict…: Programs should turn emerging threats into actions staff can recognize and report. Its controls focus on tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern, which would leave the observed problem of a growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards unresolved.
D:Compared with the stated facts about a growing bank moves AFC analysts into a sales reporting chain without clear conflict…, appropriate education enables informed challenge and resourcing decisions. That would be a coherent mitigation for a board receives annual compliance training identical to the material used for new customer-service…, whereas the immediate gap concerns a growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards.
Question 500
An institution must translate its risk findings into practical safeguards: A bank closes an account under investigation without considering an authorized law-enforcement request to keep it open. Which action fits?
- Build controlled cross-risk referrals into scoring and investigations
- Complete identity and beneficial ownership controls before appropriate onboarding
- Run risk-based ongoing PEP screening and reassessment
- Trigger targeted CDD refresh and transaction review for behavior changes
- Escalate account exit through legal and AFC governance before closure
Explanation
Correct Answer
E:Coordinated decision-making balances customer risk with valid investigative requirements. The control is aligned with the actual failure in a bank closes an account under investigation without considering an authorized law-enforcement request…; safeguards designed for a fraud team sees mule-account patterns that the AML team never incorporates into customer… would not close that gap.
Incorrect Answers
A:Compared with the stated facts about a bank closes an account under investigation without considering an authorized…, sharing validated indicators improves awareness without treating every fraud alert as proven laundering. This safeguard targets a fraud team sees mule-account patterns that the AML team never incorporates into customer risk…; it does not directly remediate the process failure in a bank closes an account under investigation without considering an authorized law-enforcement….
B:This is not the central mechanism when a bank closes an account under investigation without considering an authorized…; any permitted reliance arrangement should preserve accountability and accessible records. That measure could be appropriate where a corporate client uses a trusted introducer but the bank has not verified its actual controlling…, but the described weakness is a bank closes an account under investigation without considering an authorized law-enforcement….
C:When testing the contrasting pattern of a bank closes an account under investigation without considering an authorized…, remember that monitoring should detect new roles and prompt enhanced measures when warranted. The intervention addresses a different exposure: a bank screens PEPs only during initial account opening; the present case concerns a bank closes an account under investigation without considering an authorized law-enforcement….
D:A linked process investigates anomalies rather than automatically treating them as crime; the observed record here instead involves a bank closes an account under investigation without considering an authorized…. Its controls focus on a customer profile lists salary income but transactions show unusually large commercial receipts, which would leave the observed problem of a bank closes an account under investigation without considering an authorized law-enforcement… unresolved.