ACAMS CAMS (Certified Anti-Money Laundering Specialist (the 6th edition)) Practice Test 53

Question 520

An AFC remediation plan must both address this gap and demonstrate effectiveness: A vendor's watchlist feed stops updating for four days while payment processing continues. Choose TWO actions that together accomplish that.

  1. Sample enrichment hits for correct person, source quality, and currency
  2. Combine biometric matching with liveness and identity-document validation
  3. Simulate missed feed updates and verify operational escalation
  4. Review current corporate filings, acquisition records, and customer declarations
  5. Implement feed freshness alerts, reconciliation, and release gates

Explanation

Correct Answers

C:

For the supported action of simulate missed feed updates and verify operational escalation in this risk mitigation review involving a vendor's watchlist feed stops updating for four days while payment processing continues, assurance checks whether the institution responds before stale data becomes prolonged exposure. It produces control-performance evidence about a vendor's watchlist feed stops updating for four days while payment processing continues; a documented plan alone would not prove operation.

E:

Critical list updates should be traceable and exceptions should trigger risk decisions. It addresses the live exposure in a vendor's watchlist feed stops updating for four days while payment processing continues; corrective action is not a substitute for verifying its operation.

Incorrect Answers

A:

Against the reported situation in which a vendor's watchlist feed stops updating for four days while payment processing…, assurance gauges mistaken identity and stale information separately. Even a favorable result for a bank buys adverse-media data but cannot explain which persons its records actually match would not demonstrate the control works when a vendor's watchlist feed stops updating for four days while payment processing continues. For the alternative option of sample enrichment hits for correct person, source quality, and currency in this risk mitigation review involving a vendor's watchlist feed stops updating for four days while payment processing continues, a two-part remediation plan for a vendor's watchlist feed stops updating for four days while payment processing… needs an issue-specific safeguard and proof that it operates, not this unrelated step.

B:

The relevant alternative mechanism is different from a vendor's watchlist feed stops updating for four days while payment processing…: A layered approach reduces spoofing risk without assuming biometrics prove identity on their own. That would be a coherent mitigation for a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie…, whereas the immediate gap concerns a vendor's watchlist feed stops updating for four days while payment processing continues. For the alternative option of combine biometric matching with liveness and identity-document validation in this risk mitigation review involving a vendor's watchlist feed stops updating for four days while payment processing continues, a two-part remediation plan for a vendor's watchlist feed stops updating for four days while payment processing… needs an issue-specific safeguard and proof that it operates, not this unrelated step.

D:

This is not the central mechanism when a vendor's watchlist feed stops updating for four days while payment processing…; cross-source comparison identifies differences requiring further verification. The inquiry is suited to an onboarding system relies on a beneficial-ownership register that has not been updated following…; the requested evidence must instead address a vendor's watchlist feed stops updating for four days while payment processing continues. For the alternative option of review current corporate filings, acquisition records, and customer declarations in this risk mitigation review involving a vendor's watchlist feed stops updating for four days while payment processing continues, a two-part remediation plan for a vendor's watchlist feed stops updating for four days while payment processing… needs an issue-specific safeguard and proof that it operates, not this unrelated step.

Question 521

Staff have identified a repeatable risk pattern: A relationship manager promises a high-risk client instant onboarding despite missing beneficial ownership evidence. What would most directly improve control?

  1. Set distinct AFC accountability and independent senior escalation
  2. Define accountable owners for each preventive, detective, and reporting process
  3. Require complete CDD and AFC approval before risk-sensitive onboarding
  4. Align privacy schedules with statutory AML requirements and legal holds

Explanation

Correct Answer

C:

For the supported action of require complete cdd and afc approval before risk-sensitive onboarding in this risk mitigation review involving a relationship manager promises a high-risk client instant onboarding despite missing…, the front office should gather information while compliance independently challenges unresolved risk. This intervention operates at the point where the reported weakness arises; a growing bank moves AFC analysts into a sales reporting chain without clear conflict… presents a different failure mode.

Incorrect Answers

A:

The relevant alternative mechanism is different from a relationship manager promises a high-risk client instant onboarding despite missing…: The organizational design should support risk-based oversight of revenue-generating areas. The intervention addresses a different exposure: a growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards; the present case concerns a relationship manager promises a high-risk client instant onboarding despite missing beneficial….

B:

Compared with the stated facts about a relationship manager promises a high-risk client instant onboarding despite missing…, clear functions support timely operation and effective escalation. Its controls focus on a financial crime team has investigators but no ownership of data quality, training, or sanctions…, which would leave the observed problem of a relationship manager promises a high-risk client instant onboarding despite missing beneficial… unresolved.

D:

When testing the contrasting pattern of a relationship manager promises a high-risk client instant onboarding despite missing…, remember that joint governance should preserve necessary records while respecting minimization duties. This safeguard targets a privacy team deletes records under an automated schedule without considering mandatory AML…; it does not directly remediate the process failure in a relationship manager promises a high-risk client instant onboarding despite missing beneficial….

Question 522

A financial-crime team is determining corrective action: A bank treats a regulatory examination request as a criminal search warrant. What should be implemented?

  1. Map UN measures into the applicable sanctions-screening rulebook
  2. Maintain jurisdiction-specific obligations mapped to FATF principles
  3. Route supervisory requests through authorized legal and compliance teams
  4. Use risk-tuned matching and documented match-resolution workflows

Explanation

Correct Answer

C:

Controlled disclosure protects confidentiality while meeting valid regulatory obligations. Its scope matches this process, while the alternative would mainly address a payments team assumes every UN Security Council sanctions resolution becomes locally….

Incorrect Answers

A:

This is not the central mechanism when a bank treats a regulatory examination request as a criminal search warrant; institutions should implement binding local restrictions and escalation procedures. Its controls focus on a payments team assumes every UN Security Council sanctions resolution becomes locally enforceable…, which would leave the observed problem of a bank treats a regulatory examination request as a criminal search warrant unresolved.

B:

When testing the contrasting pattern of a bank treats a regulatory examination request as a criminal search warrant, remember that compliance design should use the common standards while applying the actual laws governing each entity. That would be a coherent mitigation for a multinational bank treats FATF recommendations as directly enforceable statutes in every…, whereas the immediate gap concerns a bank treats a regulatory examination request as a criminal search warrant.

D:

Against the reported situation in which a bank treats a regulatory examination request as a criminal search warrant, a reliable process combines screening sensitivity with trained review of identifying details. That measure could be appropriate where a sanctions analyst releases a possible listed-person match because the customer name has different…, but the described weakness is a bank treats a regulatory examination request as a criminal search warrant.

Question 523

An auditor describes an unresolved weakness: An onboarding system relies on a beneficial-ownership register that has not been updated following a recent acquisition. Which remediation addresses the actual failure?

  1. Use trusted identity-source checks and document authenticity testing
  2. Standardize event timestamps with validated time-zone handling
  3. Use risk-based step-up verification for higher exposure cases
  4. Combine biometric matching with liveness and identity-document validation
  5. Use multiple reliable sources and event-driven owner refresh

Explanation

Correct Answer

E:

A single delayed register should not be the sole evidence for an ownership decision. Its scope matches this process, while the alternative would mainly address an e-KYC provider verifies an image of an identity document but never validates its issuer….

Incorrect Answers

A:

When testing the contrasting pattern of an onboarding system relies on a beneficial-ownership register that has not been…, remember that verification should establish both the document's legitimacy and its link to the applicant. The intervention addresses a different exposure: an e-KYC provider verifies an image of an identity document but never validates its issuer or…; the present case concerns an onboarding system relies on a beneficial-ownership register that has not been updated following….

B:

Consistent definitions are essential for reliable cross-border and near-real-time monitoring; the observed record here instead involves an onboarding system relies on a beneficial-ownership register that has not been…. Its controls focus on a monitoring engine receives transaction dates as free-form strings and misorders transfers across…, which would leave the observed problem of an onboarding system relies on a beneficial-ownership register that has not been updated following… unresolved.

C:

Against the reported situation in which an onboarding system relies on a beneficial-ownership register that has not been…, a proportionate journey can preserve mandatory identification while adjusting additional checks. That would be a coherent mitigation for digital onboarding requests identical extensive checks from simple low-risk applicants and…, whereas the immediate gap concerns an onboarding system relies on a beneficial-ownership register that has not been updated following….

D:

The relevant alternative mechanism is different from an onboarding system relies on a beneficial-ownership register that has not been…: A layered approach reduces spoofing risk without assuming biometrics prove identity on their own. This safeguard targets a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie…; it does not directly remediate the process failure in an onboarding system relies on a beneficial-ownership register that has not been updated following….

Question 524

An institution must translate its risk findings into practical safeguards: A precious-metals dealer receives repeated third-party deposits without links to purchased bullion. Which action fits?

  1. Enhance correspondent due diligence and contractual transparency
  2. Require third-party payer scrutiny and delivery reconciliation
  3. Obtain senior management approval and enhanced ongoing monitoring
  4. Require source-of-wealth analysis for opaque collateral structures

Explanation

Correct Answer

B:

Controls should link each payment to a genuine purchaser and documented commodity sale. Its scope matches this process, while the alternative would mainly address a bank opens a payable-through correspondent arrangement but cannot identify the foreign….

Incorrect Answers

A:

Compared with the stated facts about a precious-metals dealer receives repeated third-party deposits without links to…, understanding respondent customers and nested services informs risk appetite and monitoring. That measure could be appropriate where a bank opens a payable-through correspondent arrangement but cannot identify the foreign bank's…, but the described weakness is a precious-metals dealer receives repeated third-party deposits without links to purchased bullion.

C:

When testing the contrasting pattern of a precious-metals dealer receives repeated third-party deposits without links to…, remember that foreign PEP relationships call for elevated governance and reasonable wealth/source-of-funds checks. Its controls focus on a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained…, which would leave the observed problem of a precious-metals dealer receives repeated third-party deposits without links to purchased bullion unresolved.

D:

EDD should challenge ownership and accumulation claims before facilities are granted; the observed record here instead involves a precious-metals dealer receives repeated third-party deposits without links to…. That would be a coherent mitigation for a private-banking client pledges opaque offshore holdings as collateral for unusually large credit…, whereas the immediate gap concerns a precious-metals dealer receives repeated third-party deposits without links to purchased bullion.

Question 525

A risk owner seeks a focused response rather than blanket customer exclusion: A casino patron exchanges large cash amounts for chips and redeems them shortly afterward without meaningful play. Which option is best?

  1. Monitor high-value buy-in and low-play cash-out combinations
  2. Introduce payee-change verification and claim-beneficiary screening
  3. Assess regulated-service functions and apply applicable VASP safeguards
  4. Monitor seller-payout changes and unusually circular orders

Explanation

Correct Answer

A:

A targeted scenario should connect acquisition and redemption rather than separate counters. The control is aligned with the actual failure in a casino patron exchanges large cash amounts for chips and redeems them shortly afterward without…; safeguards designed for a motor-insurance intermediary sends claim payments to accounts not linked to insured… would not close that gap.

Incorrect Answers

B:

The relevant alternative mechanism is different from a casino patron exchanges large cash amounts for chips and redeems them shortly…: The safeguard prevents claims settlement from becoming an unverified payment channel. Its controls focus on a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or…, which would leave the observed problem of a casino patron exchanges large cash amounts for chips and redeems them shortly afterward without… unresolved.

C:

Compared with the stated facts about a casino patron exchanges large cash amounts for chips and redeems them shortly…, legal classification should follow actual activities and jurisdiction rather than assumed technological immunity. That would be a coherent mitigation for a token project describes its protocol as decentralized but a company retains privileged controls…, whereas the immediate gap concerns a casino patron exchanges large cash amounts for chips and redeems them shortly afterward without….

D:

This is not the central mechanism when a casino patron exchanges large cash amounts for chips and redeems them shortly…; marketplace controls should assess legitimacy of trade before funds reach beneficiaries. This safeguard targets a marketplace pays seller proceeds to newly added bank accounts after bursts of fabricated purchase…; it does not directly remediate the process failure in a casino patron exchanges large cash amounts for chips and redeems them shortly afterward without….

Question 526

An AFC owner is assigned to remediate this finding: An institution sends a suspicious-activity report directly to a customer to explain a payment delay. What change best targets the underlying vulnerability?

  1. Require legal and AFC approval of external policy changes
  2. Approve a clear charter with authority, membership, quorum, and reporting
  3. Restrict SAR information and use approved neutral customer messaging
  4. Create cross-risk escalation for data and control outages
  5. Establish shared triggers between reputational risk and AFC teams
  6. Add quality, timeliness, and residual-risk measures to reporting

Explanation

Correct Answer

C:

Communication protocols should avoid revealing confidential investigations. The control is aligned with the actual failure in an institution sends a suspicious-activity report directly to a customer to explain a payment delay; safeguards designed for a bank adopts a vendor's proposed policy wording without review of local reporting law would not close that gap.

Incorrect Answers

A:

Review ensures policies remain aligned with binding law and operational context; the observed record here instead involves an institution sends a suspicious-activity report directly to a customer to explain a…. That measure could be appropriate where a bank adopts a vendor's proposed policy wording without review of local reporting law, but the described weakness is an institution sends a suspicious-activity report directly to a customer to explain a payment delay.

B:

Against the reported situation in which an institution sends a suspicious-activity report directly to a customer to explain a…, defined terms let the committee make and escalate properly authorized decisions. The intervention addresses a different exposure: a risk committee meets quarterly but has no formal mandate or named decision powers; the present case concerns an institution sends a suspicious-activity report directly to a customer to explain a payment delay.

D:

Compared with the stated facts about an institution sends a suspicious-activity report directly to a customer to explain a…, coordination ensures operational incidents trigger compensating AFC safeguards. That would be a coherent mitigation for operational risk owns vendor outages but never shares payment-data disruptions with AML monitoring, whereas the immediate gap concerns an institution sends a suspicious-activity report directly to a customer to explain a payment delay.

E:

This is not the central mechanism when an institution sends a suspicious-activity report directly to a customer to explain a…; a controlled information flow supports timely and proportionate decisions. This safeguard targets a reputational-risk team discovers adverse media about a major customer but does not inform…; it does not directly remediate the process failure in an institution sends a suspicious-activity report directly to a customer to explain a payment delay.

F:

When testing the contrasting pattern of an institution sends a suspicious-activity report directly to a customer to explain a…, remember that boards need information that supports challenge and resource decisions. That measure could be appropriate where a board pack reports alert volumes but omits false positives, overdue cases, and filing timeliness, but the described weakness is an institution sends a suspicious-activity report directly to a customer to explain a payment delay.

Question 527

An auditor describes an unresolved weakness: A trustee directs distributions to beneficiaries omitted from a family's original trust documentation. Which remediation addresses the actual failure?

  1. Apply risk-based gatekeeper due diligence and escalation
  2. Refresh trust-party CDD after material distribution or deed changes
  3. Require underlying-client transparency for property-related payments
  4. Flag short-period related-party resales and unexplained price changes

Explanation

Correct Answer

B:

Risk controls should follow changes to beneficiaries and powers throughout the relationship. Targeting the exposed workflow is more effective than deploying a measure intended for a legal adviser forms companies for a client while refusing to disclose the person….

Incorrect Answers

A:

When testing the contrasting pattern of a trustee directs distributions to beneficiaries omitted from a family's original…, remember that a bank should seek sufficient transparency before accepting transactions for newly formed entities. The intervention addresses a different exposure: a legal adviser forms companies for a client while refusing to disclose the person providing…; the present case concerns a trustee directs distributions to beneficiaries omitted from a family's original trust….

C:

Against the reported situation in which a trustee directs distributions to beneficiaries omitted from a family's original…, controls should not substitute the intermediary's professional status for purchaser due diligence. That would be a coherent mitigation for an overseas investor uses a lawyer's client account to settle a property purchase without naming…, whereas the immediate gap concerns a trustee directs distributions to beneficiaries omitted from a family's original trust….

D:

The relevant alternative mechanism is different from a trustee directs distributions to beneficiaries omitted from a family's original…: Transaction monitoring should identify concentrated linked-party real-estate movement. This safeguard targets a land developer rapidly sells the same parcel among related entities at escalating prices; it does not directly remediate the process failure in a trustee directs distributions to beneficiaries omitted from a family's original trust….

Question 528

An institution must translate its risk findings into practical safeguards: An account receives payments from employers implicated in withholding migrant workers' wages and documents. Which action fits?

  1. Escalate remediation with board-owned milestones and evidence
  2. Escalate trafficking indicators and monitor linked payroll accounts
  3. Apply trade-document discrepancy and counterparty reviews
  4. Use risk intelligence to prioritize exposed sectors and businesses

Explanation

Correct Answer

B:

For the supported action of escalate trafficking indicators and monitor linked payroll accounts in this risk mitigation review involving an account receives payments from employers implicated in withholding migrant workers' wages…, relationship-level analysis can connect suspicious revenue flows with abusive recruitment practices. This intervention operates at the point where the reported weakness arises; a bank loses correspondent relationships after repeated failures to remediate reported AML… presents a different failure mode.

Incorrect Answers

A:

Compared with the stated facts about an account receives payments from employers implicated in withholding migrant…, documented accountability and credible control improvements are needed to restore counterparty confidence. This safeguard targets a bank loses correspondent relationships after repeated failures to remediate reported AML…; it does not directly remediate the process failure in an account receives payments from employers implicated in withholding migrant workers' wages and….

C:

When testing the contrasting pattern of an account receives payments from employers implicated in withholding migrant…, remember that trade controls should detect abnormal price, routing, quantity, and related-party combinations. The intervention addresses a different exposure: a shell importer repeatedly overstates invoice values and sends the difference overseas through…; the present case concerns an account receives payments from employers implicated in withholding migrant workers' wages and….

D:

Sectoral typologies should inform enhanced review and proportionate control placement; the observed record here instead involves an account receives payments from employers implicated in withholding migrant…. Its controls focus on an illicit trade network infiltrates local payment channels and distorts competition with…, which would leave the observed problem of an account receives payments from employers implicated in withholding migrant workers' wages and… unresolved.

Question 529

A control-design team faces this gap: An investigation platform copies unmasked sensitive customer records into a vendor's general-purpose AI training environment. Which tailored safeguard should it prioritize?

  1. Require approved data-minimization and contractual privacy controls
  2. Conduct scenario-based proof-of-concept and integration assessment
  3. Allocate capacity by risk and introduce high-severity service levels
  4. Prioritize data completeness and essential coverage before optional analytics

Explanation

Correct Answer

A:

Privacy-preserving architecture should limit secondary use and protect investigatory records. For the supported action of require approved data-minimization and contractual privacy controls in this risk mitigation review involving an investigation platform copies unmasked sensitive customer records into a vendor's…, the mechanism directly mitigates the stated exposure rather than a related but separate problem such as a bank selects a screening vendor based on advertised accuracy without checking….

Incorrect Answers

B:

When testing the contrasting pattern of an investigation platform copies unmasked sensitive customer records into a vendor's…, remember that selection should validate detection, operations, data protection, and maintainability before commitment. The intervention addresses a different exposure: a bank selects a screening vendor based on advertised accuracy without checking payment-system…; the present case concerns an investigation platform copies unmasked sensitive customer records into a vendor's….

C:

Operational governance should align resources to potential harm rather than headline throughput; the observed record here instead involves an investigation platform copies unmasked sensitive customer records into a vendor's…. Its controls focus on an AML analytics unit reports record throughput but growing unresolved high-risk alerts remain…, which would leave the observed problem of an investigation platform copies unmasked sensitive customer records into a vendor's… unresolved.

D:

Against the reported situation in which an investigation platform copies unmasked sensitive customer records into a vendor's…, resource allocation should first close material surveillance blind spots. That would be a coherent mitigation for a bank invests in a complex AI tool while high-risk payment streams still bypass basic transaction…, whereas the immediate gap concerns an investigation platform copies unmasked sensitive customer records into a vendor's….

Question 530

An auditor describes an unresolved weakness: A firm expands into a high-risk remittance corridor but leaves enterprise risk scores unchanged for a year. Which remediation addresses the actual failure?

  1. Introduce event-triggered enterprise risk reassessments
  2. Require time-limited exceptions with committee reporting and exit criteria
  3. Use evidence-based geographical and product risk factors
  4. Calibrate due diligence depth and monitoring to documented risk

Explanation

Correct Answer

A:

Major changes should produce timely updates to controls and board information. The control is aligned with the actual failure in a firm expands into a high-risk remittance corridor but leaves enterprise risk scores unchanged for a…; safeguards designed for a bank repeatedly grants exceptions for the same high-risk product without reporting them… would not close that gap.

Incorrect Answers

B:

Governed exceptions preserve accountability and prevent permanent unmanaged deviations; the observed record here instead involves a firm expands into a high-risk remittance corridor but leaves enterprise risk scores…. Its controls focus on a bank repeatedly grants exceptions for the same high-risk product without reporting them to its…, which would leave the observed problem of a firm expands into a high-risk remittance corridor but leaves enterprise risk scores unchanged for… unresolved.

C:

Against the reported situation in which a firm expands into a high-risk remittance corridor but leaves enterprise risk scores…, risk scoring should reflect actual typologies and legal obligations, not a blanket foreign label. That would be a coherent mitigation for an institution rates all foreign transactions high-risk without considering destination, customer,…, whereas the immediate gap concerns a firm expands into a high-risk remittance corridor but leaves enterprise risk scores unchanged for….

D:

The relevant alternative mechanism is different from a firm expands into a high-risk remittance corridor but leaves enterprise risk scores…: Control effort should grow with exposure while meeting legal minimums for all customers. This safeguard targets a small nonprofit receives the same level of documentation demands as a complex offshore corporate…; it does not directly remediate the process failure in a firm expands into a high-risk remittance corridor but leaves enterprise risk scores unchanged for….

Certified Anti-Money Laundering Specialist (the 6th edition) (CAMS) Practice Tests