Question 590
A business unit asks compliance for an actionable response to the following: A board approves restricted correspondent banking but sales continues to onboard nested-payment intermediaries. Which control is most suitable?
- Install appetite-based acceptance rules and exception governance
- Introduce event-triggered enterprise risk reassessments
- Formalize MLRO escalation rights and board access
- Use tested control effectiveness when calculating residual exposure
Explanation
Correct Answer
A:Frontline teams need decision checks linked to the board's risk parameters. Targeting the exposed workflow is more effective than deploying a measure intended for a firm expands into a high-risk remittance corridor but leaves enterprise risk scores….
Incorrect Answers
B:The relevant alternative mechanism is different from a board approves restricted correspondent banking but sales continues to onboard…: Major changes should produce timely updates to controls and board information. That measure could be appropriate where a firm expands into a high-risk remittance corridor but leaves enterprise risk scores unchanged for…, but the described weakness is a board approves restricted correspondent banking but sales continues to onboard nested-payment….
C:Compared with the stated facts about a board approves restricted correspondent banking but sales continues to onboard…, decision governance must let the accountable officer communicate serious risks independently. The intervention addresses a different exposure: a bank's reporting officer is excluded from material regulatory communication about suspicious…; the present case concerns a board approves restricted correspondent banking but sales continues to onboard nested-payment….
D:This is not the central mechanism when a board approves restricted correspondent banking but sales continues to onboard…; scores should reflect actual prevention and detection, not the length of a policy manual. Its controls focus on a bank uses the number of written AML policies as proof that residual risk is low, which would leave the observed problem of a board approves restricted correspondent banking but sales continues to onboard nested-payment… unresolved.
Question 591
A business unit asks compliance for an actionable response to the following: A country identifies high exposure to trade-based laundering in free trade zones; a bank uses only residency to rate corporate clients. Which control is most suitable?
- Run gap assessments against the regulator's documented findings
- Update relevant trade-risk scenarios and investigator guidance
- Update product and country risks using the official assessment
- Require legal validation of significant vendor-derived sanctions rules
- Expand geographical risk assessment to trade corridors and zones
Explanation
Correct Answer
E:Scoring should capture where value and goods move, not just legal domicile. Targeting the exposed workflow is more effective than deploying a measure intended for a supervisor publishes an enforcement case about missed cash reporting by small branches.
Incorrect Answers
A:Against the reported situation in which a country identifies high exposure to trade-based laundering in free trade zones; a…, branch controls can then be strengthened based on lessons demonstrably applicable to the bank. Its controls focus on a supervisor publishes an enforcement case about missed cash reporting by small branches, which would leave the observed problem of a country identifies high exposure to trade-based laundering in free trade zones; a bank uses only… unresolved.
B:The relevant alternative mechanism is different from a country identifies high exposure to trade-based laundering in free trade zones; a…: Controls should evolve with substantiated typologies rather than remain limited to historic cases. That would be a coherent mitigation for a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade…, whereas the immediate gap concerns a country identifies high exposure to trade-based laundering in free trade zones; a bank uses only….
C:Compared with the stated facts about a country identifies high exposure to trade-based laundering in free trade zones; a…, a reasoned change documents exposure and any needed specialized controls. This safeguard targets a bank ignores a national proliferation-financing threat assessment because it has little retail…; it does not directly remediate the process failure in a country identifies high exposure to trade-based laundering in free trade zones; a bank uses only….
D:This is not the central mechanism when a country identifies high exposure to trade-based laundering in free trade zones; a…; change control should avoid turning vendor opinions into unreviewed legal determinations. That measure could be appropriate where a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation, but the described weakness is a country identifies high exposure to trade-based laundering in free trade zones; a bank uses only….
Question 592
Following the discovery that a customer buys a large life policy using a third party and requests early surrender despite steep penalties., which risk-based intervention most directly addresses the problem?
- Use risk-based unhosted-wallet due diligence and transaction monitoring
- Monitor high-value buy-in and low-play cash-out combinations
- Apply blockchain analytics and source-of-funds review for high-risk deposits
- Apply EDD to high-value premiums and rapid surrender requests
Explanation
Correct Answer
D:Controls should capture suspicious life-insurance cash flows rather than only claims fraud. The control is aligned with the actual failure in a customer buys a large life policy using a third party and requests early surrender despite steep…; safeguards designed for a trading platform repeatedly sends virtual assets to an unhosted address controlled by an… would not close that gap.
Incorrect Answers
A:When testing the contrasting pattern of a customer buys a large life policy using a third party and requests early surrender…, remember that the response should address material wallet exposure while recognizing that controls vary by jurisdiction. Its controls focus on a trading platform repeatedly sends virtual assets to an unhosted address controlled by an…, which would leave the observed problem of a customer buys a large life policy using a third party and requests early surrender despite steep… unresolved.
B:A targeted scenario should connect acquisition and redemption rather than separate counters; the observed record here instead involves a customer buys a large life policy using a third party and requests early surrender…. That would be a coherent mitigation for a casino patron exchanges large cash amounts for chips and redeems them shortly afterward without…, whereas the immediate gap concerns a customer buys a large life policy using a third party and requests early surrender despite steep….
C:Against the reported situation in which a customer buys a large life policy using a third party and requests early surrender…, risk-based controls should combine on-chain findings with customer information before disposition. This safeguard targets a virtual-asset exchange receives coins from a mixer shortly before conversion into fiat and…; it does not directly remediate the process failure in a customer buys a large life policy using a third party and requests early surrender despite steep….
Question 593
After a risk-assessment update notes that a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity., which safeguard most closely responds to the root cause?
- Maintain local filing instructions and escalation responsibilities
- Approve a clear charter with authority, membership, quorum, and reporting
- Report detection effectiveness alongside productivity KPIs
- Restrict SAR information and use approved neutral customer messaging
Explanation
Correct Answer
C:Management should see match quality and missed-risk indicators before accepting a volume reduction. This intervention operates at the point where the reported weakness arises; a compliance analyst assumes suspicious activity always must be reported to the same global… presents a different failure mode.
Incorrect Answers
A:Compared with the stated facts about a bank celebrates a decline in sanctions alerts after a vendor changes matching…, a global process needs legally accurate jurisdictional implementation. The intervention addresses a different exposure: a compliance analyst assumes suspicious activity always must be reported to the same global office; the present case concerns a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity.
B:This is not the central mechanism when a bank celebrates a decline in sanctions alerts after a vendor changes matching…; defined terms let the committee make and escalate properly authorized decisions. Its controls focus on a risk committee meets quarterly but has no formal mandate or named decision powers, which would leave the observed problem of a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity unresolved.
D:Communication protocols should avoid revealing confidential investigations; the observed record here instead involves a bank celebrates a decline in sanctions alerts after a vendor changes matching…. This safeguard targets an institution sends a suspicious-activity report directly to a customer to explain a payment delay; it does not directly remediate the process failure in a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity.
Question 594
The institution wants to reduce this specific exposure: An illicit trade network infiltrates local payment channels and distorts competition with cash-funded storefronts. What is the most appropriate control design?
- Monitor connected-party round trips and non-economic trading
- Use risk intelligence to prioritize exposed sectors and businesses
- Escalate trafficking indicators and monitor linked payroll accounts
- Apply cash-intensive-business due diligence and tailored cash monitoring
- Build commodity and permit-based reviews for high-risk counterparties
Explanation
Correct Answer
B:Sectoral typologies should inform enhanced review and proportionate control placement. Targeting the exposed workflow is more effective than deploying a measure intended for a brokerage customer buys securities through several entities and quickly sells them back….
Incorrect Answers
A:The relevant alternative mechanism is different from an illicit trade network infiltrates local payment channels and distorts competition…: Scenario logic should detect repeated offsetting trades among linked entities. The intervention addresses a different exposure: a brokerage customer buys securities through several entities and quickly sells them back to…; the present case concerns an illicit trade network infiltrates local payment channels and distorts competition with….
C:This is not the central mechanism when an illicit trade network infiltrates local payment channels and distorts competition…; relationship-level analysis can connect suspicious revenue flows with abusive recruitment practices. That would be a coherent mitigation for an account receives payments from employers implicated in withholding migrant workers' wages and…, whereas the immediate gap concerns an illicit trade network infiltrates local payment channels and distorts competition with….
D:When testing the contrasting pattern of an illicit trade network infiltrates local payment channels and distorts competition…, remember that expected turnover, seasonality, and cash volumes should define targeted triggers for deviations. This safeguard targets a warehouse operator routes illicit cash proceeds into retail deposits while claiming ordinary shop…; it does not directly remediate the process failure in an illicit trade network infiltrates local payment channels and distorts competition with….
E:EDD should investigate the actual trade and licensing, not simply the payment amounts; the observed record here instead involves an illicit trade network infiltrates local payment channels and distorts competition…. That measure could be appropriate where a recycling firm receives international transfers inconsistent with its permits and declared scrap…, but the described weakness is an illicit trade network infiltrates local payment channels and distorts competition with….
Question 595
An auditor describes an unresolved weakness: A privacy team deletes records under an automated schedule without considering mandatory AML retention holds. Which remediation addresses the actual failure?
- Require complete CDD and AFC approval before risk-sensitive onboarding
- Align privacy schedules with statutory AML requirements and legal holds
- Set distinct AFC accountability and independent senior escalation
- Train the front office to submit timely confidential internal referrals
Explanation
Correct Answer
B:Joint governance should preserve necessary records while respecting minimization duties. Its scope matches this process, while the alternative would mainly address a relationship manager promises a high-risk client instant onboarding despite missing….
Incorrect Answers
A:When testing the contrasting pattern of a privacy team deletes records under an automated schedule without considering…, remember that the front office should gather information while compliance independently challenges unresolved risk. That measure could be appropriate where a relationship manager promises a high-risk client instant onboarding despite missing beneficial…, but the described weakness is a privacy team deletes records under an automated schedule without considering mandatory AML….
C:Against the reported situation in which a privacy team deletes records under an automated schedule without considering…, the organizational design should support risk-based oversight of revenue-generating areas. Its controls focus on a growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards, which would leave the observed problem of a privacy team deletes records under an automated schedule without considering mandatory AML… unresolved.
D:The relevant alternative mechanism is different from a privacy team deletes records under an automated schedule without considering…: Human observations should reach investigators without the employee deciding the final SAR outcome. That would be a coherent mitigation for a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can…, whereas the immediate gap concerns a privacy team deletes records under an automated schedule without considering mandatory AML….
Question 596
Following the discovery that a corporate client uses a trusted introducer but the bank has not verified its actual controlling persons., which risk-based intervention most directly addresses the problem?
- Require layered ownership mapping and enhanced relationship approval
- Escalate account exit through legal and AFC governance before closure
- Complete identity and beneficial ownership controls before appropriate onboarding
- Align enterprise and sanctions assessments while preserving distinct risk drivers
Explanation
Correct Answer
C:Any permitted reliance arrangement should preserve accountability and accessible records. The control is aligned with the actual failure in a corporate client uses a trusted introducer but the bank has not verified its actual controlling persons; safeguards designed for a complex group uses three layers of offshore holdings with trustee powers to redirect… would not close that gap.
Incorrect Answers
A:When testing the contrasting pattern of a corporate client uses a trusted introducer but the bank has not verified its actual…, remember that the bank should establish control before treating legal entities as transparent. That measure could be appropriate where a complex group uses three layers of offshore holdings with trustee powers to redirect profits, but the described weakness is a corporate client uses a trusted introducer but the bank has not verified its actual controlling….
B:Coordinated decision-making balances customer risk with valid investigative requirements; the observed record here instead involves a corporate client uses a trusted introducer but the bank has not verified its actual…. The intervention addresses a different exposure: a bank closes an account under investigation without considering an authorized law-enforcement…; the present case concerns a corporate client uses a trusted introducer but the bank has not verified its actual controlling….
D:The relevant alternative mechanism is different from a corporate client uses a trusted introducer but the bank has not verified its actual…: Common data improves consistency but specialized risks require tailored analysis. That would be a coherent mitigation for a high-risk subsidiary is included in the enterprise risk assessment but not in the…, whereas the immediate gap concerns a corporate client uses a trusted introducer but the bank has not verified its actual controlling….
Question 597
This fact pattern is being incorporated into the AFC control inventory: An overseas investor uses a lawyer's client account to settle a property purchase without naming the actual buyer. Which measure directly addresses it?
- Verify underlying principals where nominee arrangements are present
- Apply related-entity network due diligence before onboarding
- Require underlying-client transparency for property-related payments
- Require substance testing for high-value professional-fee payments
Explanation
Correct Answer
C:Controls should not substitute the intermediary's professional status for purchaser due diligence. This intervention operates at the point where the reported weakness arises; a nominee director signs transactions on instruction from an undisclosed offshore client presents a different failure mode.
Incorrect Answers
A:EDD should trace effective control rather than accept the nominee's identification alone; the observed record here instead involves an overseas investor uses a lawyer's client account to settle a property purchase…. The intervention addresses a different exposure: a nominee director signs transactions on instruction from an undisclosed offshore client; the present case concerns an overseas investor uses a lawyer's client account to settle a property purchase without naming….
B:Against the reported situation in which an overseas investor uses a lawyer's client account to settle a property purchase…, identification of common control helps prevent fragmented risk treatment across customers. Its controls focus on a company-service provider registers dozens of firms sharing directors, addresses, and inactive…, which would leave the observed problem of an overseas investor uses a lawyer's client account to settle a property purchase without naming… unresolved.
D:Compared with the stated facts about an overseas investor uses a lawyer's client account to settle a property purchase…, control teams should assess economic purpose rather than relying on an invoice heading. This safeguard targets a professional service provider invoices an offshore entity for vague advisory work followed by…; it does not directly remediate the process failure in an overseas investor uses a lawyer's client account to settle a property purchase without naming….
Question 598
An AFC owner is assigned to remediate this finding: An AML department has written procedures but no authority to challenge a revenue-generating business line. What change best targets the underlying vulnerability?
- Assign operational design to management and independent review to audit
- Give AFC leadership direct access to senior oversight and adequate resources
- Separate first-line risk ownership from second-line challenge and adjudication
- Install appetite-based acceptance rules and exception governance
Explanation
Correct Answer
B:Authority and independent escalation make the control framework capable of affecting business decisions. The control is aligned with the actual failure in an AML department has written procedures but no authority to challenge a revenue-generating business line; safeguards designed for internal audit designs the transaction monitoring rules it must later assess would not close that gap.
Incorrect Answers
A:The three lines model separates control operation, compliance oversight, and independent assurance; the observed record here instead involves an AML department has written procedures but no authority to challenge a…. That would be a coherent mitigation for internal audit designs the transaction monitoring rules it must later assess, whereas the immediate gap concerns an AML department has written procedures but no authority to challenge a revenue-generating….
C:The relevant alternative mechanism is different from an AML department has written procedures but no authority to challenge a…: Clear decision rights preserve business responsibility while preventing conflicts. That measure could be appropriate where a branch sales manager closes alerts that implicate the manager's own high-value clients, but the described weakness is an AML department has written procedures but no authority to challenge a revenue-generating….
D:Compared with the stated facts about an AML department has written procedures but no authority to challenge a…, frontline teams need decision checks linked to the board's risk parameters. The intervention addresses a different exposure: a board approves restricted correspondent banking but sales continues to onboard nested-payment…; the present case concerns an AML department has written procedures but no authority to challenge a revenue-generating….
Question 599
A financial-crime team is determining corrective action: A bank replaces every rules-based alert with a machine-learning score without evaluating interpretability or unexplained misses. What should be implemented?
- Use rolling-window aggregation and relationship-level monitoring scenarios
- Tune scenarios against outcomes and risk priorities rather than volume alone
- Design risk-based scenarios and thresholds by customer segment
- Use phased AI deployment with validation and human accountability
Explanation
Correct Answer
D:Machine learning can supplement or replace rules only with proven coverage and controls. The control is aligned with the actual failure in a bank replaces every rules-based alert with a machine-learning score without evaluating…; safeguards designed for a transaction-monitoring rule detects individual large transfers but misses repeated… would not close that gap.
Incorrect Answers
A:This is not the central mechanism when a bank replaces every rules-based alert with a machine-learning score without…; the rule should evaluate connected payments over time instead of single values. Its controls focus on a transaction-monitoring rule detects individual large transfers but misses repeated low-value…, which would leave the observed problem of a bank replaces every rules-based alert with a machine-learning score without evaluating… unresolved.
B:When testing the contrasting pattern of a bank replaces every rules-based alert with a machine-learning score without…, remember that a sound process weighs missed patterns, capacity, and control effectiveness. That would be a coherent mitigation for an AML model's thresholds are reduced until alert volume rises sharply but investigators find fewer…, whereas the immediate gap concerns a bank replaces every rules-based alert with a machine-learning score without evaluating….
C:Monitoring should distinguish low-activity firms from cash-intensive or wholesale customers; the observed record here instead involves a bank replaces every rules-based alert with a machine-learning score without…. This safeguard targets a small-business monitoring scenario uses the same cash threshold as a multinational…; it does not directly remediate the process failure in a bank replaces every rules-based alert with a machine-learning score without evaluating….
Question 600
After a risk-assessment update notes that a fraud team sees mule-account patterns that the AML team never incorporates into customer risk scores., which safeguard most closely responds to the root cause?
- Trigger targeted CDD refresh and transaction review for behavior changes
- Build controlled cross-risk referrals into scoring and investigations
- Obtain appropriate approvals and enhanced source-of-wealth review
- Run risk-based ongoing PEP screening and reassessment
Explanation
Correct Answer
B:Sharing validated indicators improves awareness without treating every fraud alert as proven laundering. The mechanism directly mitigates the stated exposure rather than a related but separate problem such as a customer profile lists salary income but transactions show unusually large commercial….
Incorrect Answers
A:Compared with the stated facts about a fraud team sees mule-account patterns that the AML team never incorporates into…, a linked process investigates anomalies rather than automatically treating them as crime. Its controls focus on a customer profile lists salary income but transactions show unusually large commercial receipts, which would leave the observed problem of a fraud team sees mule-account patterns that the AML team never incorporates into customer risk… unresolved.
C:When testing the contrasting pattern of a fraud team sees mule-account patterns that the AML team never incorporates into…, remember that governance should address both political influence and unexplained wealth accumulation. This safeguard targets a new customer is a PEP whose funds arrive from a closely held firm with undisclosed controllers; it does not directly remediate the process failure in a fraud team sees mule-account patterns that the AML team never incorporates into customer risk….
D:Monitoring should detect new roles and prompt enhanced measures when warranted; the observed record here instead involves a fraud team sees mule-account patterns that the AML team never incorporates into…. That measure could be appropriate where a bank screens PEPs only during initial account opening, but the described weakness is a fraud team sees mule-account patterns that the AML team never incorporates into customer risk….