Question 570
Staff have identified a repeatable risk pattern: A former senior politician retains influence over a state-owned enterprise through close associates. What would most directly improve control?
- Require third-party payer scrutiny and delivery reconciliation
- Apply partner due diligence and proportionate grant monitoring
- Escalate dual-use transactions for sanctions and end-use checks
- Conduct a documented risk-based PEP reassessment
Explanation
Correct Answer
D:The institution should adjust due diligence using credible evidence of remaining influence. Targeting the exposed workflow is more effective than deploying a measure intended for a precious-metals dealer receives repeated third-party deposits without links to purchased….
Incorrect Answers
A:The relevant alternative mechanism is different from a former senior politician retains influence over a state-owned enterprise through…: Controls should link each payment to a genuine purchaser and documented commodity sale. That measure could be appropriate where a precious-metals dealer receives repeated third-party deposits without links to purchased bullion, but the described weakness is a former senior politician retains influence over a state-owned enterprise through close associates.
B:Compared with the stated facts about a former senior politician retains influence over a state-owned enterprise through…, a risk-sensitive arrangement can preserve assistance while managing diversion and TF risk. The intervention addresses a different exposure: a relief organization routes grants to an unverified local partner in an active conflict area; the present case concerns a former senior politician retains influence over a state-owned enterprise through close associates.
C:This is not the central mechanism when a former senior politician retains influence over a state-owned enterprise through…; specialist review should integrate ownership, goods and destination rather than price alone. Its controls focus on a licensed firearms wholesaler ships dual-use components to newly created intermediaries with…, which would leave the observed problem of a former senior politician retains influence over a state-owned enterprise through close associates unresolved.
Question 571
The institution wants to reduce this specific exposure: An online betting account is funded by several payment cards and withdraws winnings to a different name. What is the most appropriate control design?
- Require name-matched deposits and risk-screened withdrawals
- Due-diligence issuers and redemption counterparties using a risk-based approach
- Assess regulated-service functions and apply applicable VASP safeguards
- Apply blockchain analytics and source-of-funds review for high-risk deposits
- Apply EDD to high-value premiums and rapid surrender requests
Explanation
Correct Answer
A:Payment controls should challenge unexplained funding and cash-out patterns. Targeting the exposed workflow is more effective than deploying a measure intended for a virtual-asset custodian processes large stablecoin redemptions through offshore issuers….
Incorrect Answers
B:Compared with the stated facts about an online betting account is funded by several payment cards and withdraws winnings…, controls should cover fiat rails and reserve-linked payments, not merely token transfers. That measure could be appropriate where a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak…, but the described weakness is an online betting account is funded by several payment cards and withdraws winnings to a different….
C:This is not the central mechanism when an online betting account is funded by several payment cards and withdraws winnings…; legal classification should follow actual activities and jurisdiction rather than assumed technological immunity. The intervention addresses a different exposure: a token project describes its protocol as decentralized but a company retains privileged controls…; the present case concerns an online betting account is funded by several payment cards and withdraws winnings to a different….
D:When testing the contrasting pattern of an online betting account is funded by several payment cards and withdraws winnings…, remember that risk-based controls should combine on-chain findings with customer information before disposition. Its controls focus on a virtual-asset exchange receives coins from a mixer shortly before conversion into fiat and…, which would leave the observed problem of an online betting account is funded by several payment cards and withdraws winnings to a different… unresolved.
E:Controls should capture suspicious life-insurance cash flows rather than only claims fraud; the observed record here instead involves an online betting account is funded by several payment cards and withdraws winnings…. That would be a coherent mitigation for a customer buys a large life policy using a third party and requests early surrender despite steep…, whereas the immediate gap concerns an online betting account is funded by several payment cards and withdraws winnings to a different….
Question 572
An AFC owner is assigned to remediate this finding: A small-business monitoring scenario uses the same cash threshold as a multinational wholesale-banking segment. What change best targets the underlying vulnerability?
- Require source-linked review and sign-off for AI-assisted narratives
- Use standardized OSINT capture and case documentation procedures
- Design risk-based scenarios and thresholds by customer segment
- Keep human escalation for consequential or uncertain sanctions matches
Explanation
Correct Answer
C:Monitoring should distinguish low-activity firms from cash-intensive or wholesale customers. The control is aligned with the actual failure in a small-business monitoring scenario uses the same cash threshold as a multinational wholesale-banking…; safeguards designed for a case system auto-generates suspicious-activity narratives using AI that sometimes invents… would not close that gap.
Incorrect Answers
A:Automation can improve drafting speed but responsibility for factual accuracy remains human; the observed record here instead involves a small-business monitoring scenario uses the same cash threshold as a multinational…. That measure could be appropriate where a case system auto-generates suspicious-activity narratives using AI that sometimes invents account…, but the described weakness is a small-business monitoring scenario uses the same cash threshold as a multinational….
B:Against the reported situation in which a small-business monitoring scenario uses the same cash threshold as a multinational…, structured workflows support lawful, reproducible investigations and confidence grading. The intervention addresses a different exposure: investigators copy public social-media information into cases without recording where or when they…; the present case concerns a small-business monitoring scenario uses the same cash threshold as a multinational….
D:Compared with the stated facts about a small-business monitoring scenario uses the same cash threshold as a multinational…, appropriate governance prevents unsupported algorithmic decisions from becoming final legal dispositions. That would be a coherent mitigation for an institution uses AI to prioritize sanctions cases but lets the system permanently clear…, whereas the immediate gap concerns a small-business monitoring scenario uses the same cash threshold as a multinational….
Question 573
After a risk-assessment update notes that an e-KYC provider verifies an image of an identity document but never validates its issuer or authenticity., which safeguard most closely responds to the root cause?
- Use multiple reliable sources and event-driven owner refresh
- Use trusted identity-source checks and document authenticity testing
- Apply documented quality and identity checks to external data feeds
- Apply contextual verification triggers to higher-risk account events
Explanation
Correct Answer
B:Verification should establish both the document's legitimacy and its link to the applicant. Its scope matches this process, while the alternative would mainly address an onboarding system relies on a beneficial-ownership register that has not been updated….
Incorrect Answers
A:Compared with the stated facts about an e-KYC provider verifies an image of an identity document but never validates its…, a single delayed register should not be the sole evidence for an ownership decision. That measure could be appropriate where an onboarding system relies on a beneficial-ownership register that has not been updated following…, but the described weakness is an e-KYC provider verifies an image of an identity document but never validates its issuer or….
C:When testing the contrasting pattern of an e-KYC provider verifies an image of an identity document but never validates its…, remember that automated enrichment should not turn name similarity into an unsupported adverse conclusion. Its controls focus on a bank buys adverse-media data but cannot explain which persons its records actually match, which would leave the observed problem of an e-KYC provider verifies an image of an identity document but never validates its issuer or… unresolved.
D:Controls should be commensurate with exposure and inclusive of users who cannot use biometrics; the observed record here instead involves an e-KYC provider verifies an image of an identity document but never validates its…. That would be a coherent mitigation for a payment app adds facial recognition to every minor account-profile change despite low observed…, whereas the immediate gap concerns an e-KYC provider verifies an image of an identity document but never validates its issuer or….
Question 574
A control-design team faces this gap: Management counts completed training modules without checking repeated analyst errors. Which tailored safeguard should it prioritize?
- Use competency-based measures in AFC reporting
- Approve a clear charter with authority, membership, quorum, and reporting
- Establish shared triggers between reputational risk and AFC teams
- Restrict SAR information and use approved neutral customer messaging
Explanation
Correct Answer
A:Decision-makers should know whether training reduces actual control failures. Targeting the exposed workflow is more effective than deploying a measure intended for a risk committee meets quarterly but has no formal mandate or named decision powers.
Incorrect Answers
B:When testing the contrasting pattern of management counts completed training modules without checking repeated analyst errors, remember that defined terms let the committee make and escalate properly authorized decisions. That measure could be appropriate where a risk committee meets quarterly but has no formal mandate or named decision powers, but the described weakness is management counts completed training modules without checking repeated analyst errors.
C:A controlled information flow supports timely and proportionate decisions; the observed record here instead involves management counts completed training modules without checking repeated analyst errors. The intervention addresses a different exposure: a reputational-risk team discovers adverse media about a major customer but does not inform…; the present case concerns management counts completed training modules without checking repeated analyst errors.
D:Against the reported situation in which management counts completed training modules without checking repeated analyst errors, communication protocols should avoid revealing confidential investigations. Its controls focus on an institution sends a suspicious-activity report directly to a customer to explain a payment delay, which would leave the observed problem of management counts completed training modules without checking repeated analyst errors unresolved.
Question 575
A control owner seeks implementation and independent assurance after this finding: A technology company pays regular 'recovery fees' to accounts linked to a regional extortion group. Choose TWO measures that directly meet these separate objectives.
- Sample respondent payments for originator and beneficiary visibility
- Check detection of recurring fees to linked extortion beneficiaries
- Validate cross-branch linkage using recorded courier and merchant IDs
- Escalate extortion-linked transfers through financial-crime investigations
- Verify asset ownership, acquisition history, and independent valuations
- Apply partner due diligence and proportionate grant monitoring
Explanation
Correct Answers
B:Link analysis should uncover apparently isolated payments that converge on the same group. It produces control-performance evidence about a technology company pays regular 'recovery fees' to accounts linked to a regional extortion group; a documented plan alone would not prove operation.
D:A targeted case review preserves evidence and considers reporting under the governing jurisdiction. It addresses the live exposure in a technology company pays regular 'recovery fees' to accounts linked to a regional extortion group; corrective action is not a substitute for verifying its operation.
Incorrect Answers
A:When testing the contrasting pattern of a technology company pays regular 'recovery fees' to accounts linked to a regional…, remember that an effectiveness test confirms whether downstream activity can be identified and escalated. The sample would be probative if a bank opens a payable-through correspondent arrangement but cannot identify the foreign bank's…; a different population and test are needed for a technology company pays regular 'recovery fees' to accounts linked to a regional extortion group. For the alternative option of sample respondent payments for originator and beneficiary visibility in this risk mitigation review involving a technology company pays regular 'recovery fees' to accounts linked to a regional extortion…, a two-part remediation plan for a technology company pays regular 'recovery fees' to accounts linked to a regional… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
C:Against the reported situation in which a technology company pays regular 'recovery fees' to accounts linked to a regional…, test cases must trigger even when no individual branch exceeds its alert threshold. Even a favorable result for a regional bank sees sudden cash deposits at several branches by couriers working for one merchant would not demonstrate the control works when a technology company pays regular 'recovery fees' to accounts linked to a regional extortion group. For the alternative option of validate cross-branch linkage using recorded courier and merchant ids in this risk mitigation review involving a technology company pays regular 'recovery fees' to accounts linked to a regional extortion…, a two-part remediation plan for a technology company pays regular 'recovery fees' to accounts linked to a regional… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
E:Compared with the stated facts about a technology company pays regular 'recovery fees' to accounts linked to a regional…, evidence of how the wealth was accumulated differs from tracing a single repayment source. That review would be useful if a private-banking client pledges opaque offshore holdings as collateral for unusually large credit…, but it would not resolve the central uncertainty in a technology company pays regular 'recovery fees' to accounts linked to a regional extortion group. For the alternative option of verify asset ownership, acquisition history, and independent valuations in this risk mitigation review involving a technology company pays regular 'recovery fees' to accounts linked to a regional extortion…, a two-part remediation plan for a technology company pays regular 'recovery fees' to accounts linked to a regional… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
F:This is not the central mechanism when a technology company pays regular 'recovery fees' to accounts linked to a regional…; a risk-sensitive arrangement can preserve assistance while managing diversion and TF risk. That measure could be appropriate where a relief organization routes grants to an unverified local partner in an active conflict area, but the described weakness is a technology company pays regular 'recovery fees' to accounts linked to a regional extortion group. For the alternative option of apply partner due diligence and proportionate grant monitoring in this risk mitigation review involving a technology company pays regular 'recovery fees' to accounts linked to a regional extortion…, a two-part remediation plan for a technology company pays regular 'recovery fees' to accounts linked to a regional… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
Question 576
An institution must translate its risk findings into practical safeguards: An investigator requests business documents through a customer-facing team using an accusatory script. Which action fits?
- Apply time-bound conditions with escalation for breaches
- Create controlled RFI templates and investigator-review procedures
- Create separate intake, authorization, and disclosure procedures
- Design proportionate alternative verification and product limits
Explanation
Correct Answer
B:The process should seek relevant information while avoiding prohibited disclosures. Targeting the exposed workflow is more effective than deploying a measure intended for a customer is retained despite repeated unresolved suspicious transactions because revenue….
Incorrect Answers
A:Compared with the stated facts about an investigator requests business documents through a customer-facing team using an…, risk owners should track exceptions and act when agreed mitigation fails. The intervention addresses a different exposure: a customer is retained despite repeated unresolved suspicious transactions because revenue targets…; the present case concerns an investigator requests business documents through a customer-facing team using an accusatory….
C:When testing the contrasting pattern of an investigator requests business documents through a customer-facing team using an…, remember that a controlled approach avoids accidental statutory noncompliance or unauthorized sharing. That would be a coherent mitigation for a bank treats a voluntary interbank information request as an automatic section 314(a) government…, whereas the immediate gap concerns an investigator requests business documents through a customer-facing team using an accusatory….
D:Appropriate safeguards can preserve access while satisfying identification obligations; the observed record here instead involves an investigator requests business documents through a customer-facing team using an…. This safeguard targets a bank terminates all accounts belonging to refugees because identity documents differ from its…; it does not directly remediate the process failure in an investigator requests business documents through a customer-facing team using an accusatory….
Question 577
This fact pattern is being incorporated into the AFC control inventory: A bank's risk appetite says 'zero financial crime' but gives no measurable boundaries for high-risk relationships. Which measure directly addresses it?
- Define measurable prohibitions, limits, and escalation triggers in the RAS
- Use tested control effectiveness when calculating residual exposure
- Rebuild the model with distinct inherent, control, and residual components
- Give AFC leadership direct access to senior oversight and adequate resources
Explanation
Correct Answer
A:Specific tolerances translate board intent into customer and product decisions. The control is aligned with the actual failure in a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries for high-risk…; safeguards designed for a bank uses the number of written AML policies as proof that residual risk is low would not close that gap.
Incorrect Answers
B:Against the reported situation in which a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries…, scores should reflect actual prevention and detection, not the length of a policy manual. Its controls focus on a bank uses the number of written AML policies as proof that residual risk is low, which would leave the observed problem of a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries for high-risk… unresolved.
C:The relevant alternative mechanism is different from a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries…: Transparent separation supports consistent risk decisions and meaningful comparison. That would be a coherent mitigation for a bank calculates inherent country risk after deducting the effectiveness of its screening controls, whereas the immediate gap concerns a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries for high-risk….
D:Compared with the stated facts about a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries…, authority and independent escalation make the control framework capable of affecting business decisions. This safeguard targets an AML department has written procedures but no authority to challenge a revenue-generating…; it does not directly remediate the process failure in a bank's risk appetite says 'zero financial crime' but gives no measurable boundaries for high-risk….
Question 578
This fact pattern is being incorporated into the AFC control inventory: Investigators copy public social-media information into cases without recording where or when they collected it. Which measure directly addresses it?
- Keep human escalation for consequential or uncertain sanctions matches
- Use standardized OSINT capture and case documentation procedures
- Use rolling-window aggregation and relationship-level monitoring scenarios
- Design risk-based scenarios and thresholds by customer segment
- Use explainable network analytics with investigator verification
- Use phased AI deployment with validation and human accountability
Explanation
Correct Answer
B:Structured workflows support lawful, reproducible investigations and confidence grading. The control is aligned with the actual failure in investigators copy public social-media information into cases without recording where or when they…; safeguards designed for an institution uses AI to prioritize sanctions cases but lets the system permanently clear… would not close that gap.
Incorrect Answers
A:Appropriate governance prevents unsupported algorithmic decisions from becoming final legal dispositions; the observed record here instead involves investigators copy public social-media information into cases without recording where…. That would be a coherent mitigation for an institution uses AI to prioritize sanctions cases but lets the system permanently clear…, whereas the immediate gap concerns investigators copy public social-media information into cases without recording where or when they….
C:The relevant alternative mechanism is different from investigators copy public social-media information into cases without recording where…: The rule should evaluate connected payments over time instead of single values. That measure could be appropriate where a transaction-monitoring rule detects individual large transfers but misses repeated low-value…, but the described weakness is investigators copy public social-media information into cases without recording where or when they….
D:Compared with the stated facts about investigators copy public social-media information into cases without recording where…, monitoring should distinguish low-activity firms from cash-intensive or wholesale customers. The intervention addresses a different exposure: a small-business monitoring scenario uses the same cash threshold as a multinational…; the present case concerns investigators copy public social-media information into cases without recording where or when they….
E:This is not the central mechanism when investigators copy public social-media information into cases without recording where…; graph alerts should prioritize related accounts without treating every shared attribute as proof. Its controls focus on several mule accounts appear independent until network software links them to a single device and…, which would leave the observed problem of investigators copy public social-media information into cases without recording where or when they… unresolved.
F:When testing the contrasting pattern of investigators copy public social-media information into cases without recording where…, remember that machine learning can supplement or replace rules only with proven coverage and controls. That would be a coherent mitigation for a bank replaces every rules-based alert with a machine-learning score without evaluating…, whereas the immediate gap concerns investigators copy public social-media information into cases without recording where or when they….
Question 579
Following the discovery that a bank's reporting officer is excluded from material regulatory communication about suspicious transactions., which risk-based intervention most directly addresses the problem?
- Use tested control effectiveness when calculating residual exposure
- Fund risk-based training and independent compliance testing
- Formalize MLRO escalation rights and board access
- Rebuild the model with distinct inherent, control, and residual components
- Introduce event-triggered enterprise risk reassessments
Explanation
Correct Answer
C:Decision governance must let the accountable officer communicate serious risks independently. Targeting the exposed workflow is more effective than deploying a measure intended for a bank uses the number of written AML policies as proof that residual risk is low.
Incorrect Answers
A:When testing the contrasting pattern of a bank's reporting officer is excluded from material regulatory communication about…, remember that scores should reflect actual prevention and detection, not the length of a policy manual. That would be a coherent mitigation for a bank uses the number of written AML policies as proof that residual risk is low, whereas the immediate gap concerns a bank's reporting officer is excluded from material regulatory communication about suspicious….
B:An effective framework requires personnel competence and validation that its controls operate; the observed record here instead involves a bank's reporting officer is excluded from material regulatory communication about…. This safeguard targets a bank appoints an AML officer but does not test policies or train relationship staff; it does not directly remediate the process failure in a bank's reporting officer is excluded from material regulatory communication about suspicious….
D:The relevant alternative mechanism is different from a bank's reporting officer is excluded from material regulatory communication about…: Transparent separation supports consistent risk decisions and meaningful comparison. The intervention addresses a different exposure: a bank calculates inherent country risk after deducting the effectiveness of its screening controls; the present case concerns a bank's reporting officer is excluded from material regulatory communication about suspicious….
E:Compared with the stated facts about a bank's reporting officer is excluded from material regulatory communication about…, major changes should produce timely updates to controls and board information. Its controls focus on a firm expands into a high-risk remittance corridor but leaves enterprise risk scores unchanged for…, which would leave the observed problem of a bank's reporting officer is excluded from material regulatory communication about suspicious… unresolved.
Question 580
After a risk-assessment update notes that a US firm assumes every person on an OFAC sanctions list can be screened by exact spelling alone., which safeguard most closely responds to the root cause?
- Integrate sanctions legal analysis with ownership-aware screening
- Apply targeted enhanced due diligence within stated risk appetite
- Define controlled information-sharing protocols and access governance
- Build a sanctions legal inventory and regime-specific escalation paths
Explanation
Correct Answer
A:Exact name matching alone may miss indirect interests or alternative identifiers. Its scope matches this process, while the alternative would mainly address an international bank rejects all payments from a high-risk country without assessing….
Incorrect Answers
B:This is not the central mechanism when a US firm assumes every person on an OFAC sanctions list can be screened by exact…; a proportionate approach balances financial-crime exposure with legitimate economic access. This safeguard targets an international bank rejects all payments from a high-risk country without assessing customer or…; it does not directly remediate the process failure in a US firm assumes every person on an OFAC sanctions list can be screened by exact spelling alone.
C:When testing the contrasting pattern of a US firm assumes every person on an OFAC sanctions list can be screened by exact…, remember that a PPP should provide useful intelligence while respecting legal restrictions. That measure could be appropriate where banks and investigators create a public-private forum but share raw customer data without a…, but the described weakness is a US firm assumes every person on an OFAC sanctions list can be screened by exact spelling alone.
D:Group controls can be consistent without ignoring country-specific prohibitions; the observed record here instead involves a US firm assumes every person on an OFAC sanctions list can be screened by exact…. The intervention addresses a different exposure: a regional payments company deploys one global sanctions rule without checking local territorial…; the present case concerns a US firm assumes every person on an OFAC sanctions list can be screened by exact spelling alone.