Question 660
An internal audit report describes this failure: Tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern. Choose THREE complementary measures covering evidence, remediation, and effectiveness testing.
- Measure post-training referral accuracy and case-handling improvement
- Provide role-specific training with realistic referral scenarios
- Design proportionate alternative verification and product limits
- Assess what ordinary documentation is needed and how to request it
- Review teller case referrals, typology coverage, and knowledge gaps
- Sample exchanges for channel classification and retention evidence
Explanation
Correct Answers
A:Assurance checks applied competence rather than attendance certificates. It produces control-performance evidence about tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern; a documented plan alone would not prove operation.
B:Programs should turn emerging threats into actions staff can recognize and report. It addresses the live exposure in tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern; corrective action is not a substitute for verifying its operation.
E:Job-based evidence shows what practical detection skills are missing. It supplies corroborating evidence about tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern; investigation is distinct from implementing or testing a safeguard.
Incorrect Answers
C:Against the reported situation in which tellers attend generic AML training but cannot identify an emerging local…, appropriate safeguards can preserve access while satisfying identification obligations. That would be a coherent mitigation for a bank terminates all accounts belonging to refugees because identity documents differ from its…, whereas the immediate gap concerns tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern. For the alternative option of design proportionate alternative verification and product limits in this effectiveness test review involving tellers attend generic AML training but cannot identify an emerging local romance-scam mule…, for tellers attend generic AML training but cannot identify an emerging local…, corroboration, targeted correction, and assurance must all relate to the same failure.
D:The relevant alternative mechanism is different from tellers attend generic AML training but cannot identify an emerging local…: A neutral evidence request can support inquiry without unnecessary allegations. That review would be useful if an investigator requests business documents through a customer-facing team using an accusatory…, but it would not resolve the central uncertainty in tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern. For the alternative option of assess what ordinary documentation is needed and how to request it in this effectiveness test review involving tellers attend generic AML training but cannot identify an emerging local romance-scam mule…, for tellers attend generic AML training but cannot identify an emerging local…, corroboration, targeted correction, and assurance must all relate to the same failure.
F:This is not the central mechanism when tellers attend generic AML training but cannot identify an emerging local…; testing ensures searches and disclosures follow the proper framework. The test exercises an adjacent pathway, a bank treats a voluntary interbank information request as an automatic section 314(a) government…, without directly challenging tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern. For the alternative option of sample exchanges for channel classification and retention evidence in this effectiveness test review involving tellers attend generic AML training but cannot identify an emerging local romance-scam mule…, for tellers attend generic AML training but cannot identify an emerging local…, corroboration, targeted correction, and assurance must all relate to the same failure.
Question 661
An institution has corrected a process after discovering this case: A compliance analyst assumes suspicious activity always must be reported to the same global office. Which test best proves the relevant safeguard operates?
- Test outages for timely AML impact assessment and backlog recovery
- Resample reviewed cases after training for sustained error reduction
- Trace reported metrics back to case management and source systems
- Test country files for correct report recipients and timing
Explanation
Correct Answer
D:An audit detects reports misrouted to a global mailbox instead of a competent authority. Operating-effectiveness evidence must reach the specific control gap here; operational risk owns vendor outages but never shares payment-data disruptions with AML… would require a different test.
Incorrect Answers
A:Assurance shows whether dependent financial-crime controls received attention; the observed record here instead involves a compliance analyst assumes suspicious activity always must be reported to the same…. Testing this would validate controls for operational risk owns vendor outages but never shares payment-data disruptions with AML monitoring, not the effectiveness of remediation for a compliance analyst assumes suspicious activity always must be reported to the same global office.
B:Against the reported situation in which a compliance analyst assumes suspicious activity always must be reported to the same…, assurance checks behavior change rather than attendance. The sample would be probative if management counts completed training modules without checking repeated analyst errors; a different population and test are needed for a compliance analyst assumes suspicious activity always must be reported to the same global office.
C:The relevant alternative mechanism is different from a compliance analyst assumes suspicious activity always must be reported to the same…: Validation checks completeness, definitions, and accuracy of the board pack. The test exercises an adjacent pathway, a board pack reports alert volumes but omits false positives, overdue cases, and filing timeliness, without directly challenging a compliance analyst assumes suspicious activity always must be reported to the same global office.
Question 662
Independent assurance must evaluate an issue originally found as follows: An overseas investor uses a lawyer's client account to settle a property purchase without naming the actual buyer. What validation would most directly test effectiveness?
- Review gatekeeper files for natural-person controllers and exceptions
- Sample escrow ledgers against underlying client contracts and settlements
- Test related-entity flows against declared tax and trading activity
- Check client-account payments against verified underlying buyer records
Explanation
Correct Answer
D:The assurance review tests whether opaque settlements are identified before closing. The proposed sample exercises the failure seen in an overseas investor uses a lawyer's client account to settle a property purchase without naming the…, rather than the separate pathway represented by a legal adviser forms companies for a client while refusing to disclose the person….
Incorrect Answers
A:Against the reported situation in which an overseas investor uses a lawyer's client account to settle a property purchase…, testing should verify that reliance on professional status has not displaced CDD. This assurance method targets a legal adviser forms companies for a client while refusing to disclose the person providing… rather than the reported process: an overseas investor uses a lawyer's client account to settle a property purchase without naming….
B:The relevant alternative mechanism is different from an overseas investor uses a lawyer's client account to settle a property purchase…: End-to-end evidence establishes whether the professional account channels unsupported payments. Testing this would validate controls for a notary receives large third-party escrow deposits with no connection to the declared asset…, not the effectiveness of remediation for an overseas investor uses a lawyer's client account to settle a property purchase without naming….
C:Compared with the stated facts about an overseas investor uses a lawyer's client account to settle a property purchase…, reconciliation exposes entities that cannot support their transactions commercially. The sample would be probative if a tax adviser creates repeated artificial loss-making entities whose transfers fund personal luxury…; a different population and test are needed for an overseas investor uses a lawyer's client account to settle a property purchase without naming….
Question 663
An examiner questions whether a revised procedure works after this event: An AML department has written procedures but no authority to challenge a revenue-generating business line. Which test directly addresses the event?
- Test high-severity matters for timely designated-officer notification
- Challenge high-effectiveness ratings against unresolved audit findings
- Test whether serious findings reached the board and caused remediation
- Sample new correspondent relationships for policy-aligned approval
Explanation
Correct Answer
C:Assurance should check implemented decisions rather than the existence of policy documents. For the supported action of test whether serious findings reached the board and caused remediation in this effectiveness test review involving an AML department has written procedures but no authority to challenge a revenue-generating…, the assessment probes the affected transactions and decisions, not just an adjacent risk such as a bank's reporting officer is excluded from material regulatory communication about….
Incorrect Answers
A:Against the reported situation in which an AML department has written procedures but no authority to challenge a…, the review confirms that oversight is not bypassed by business hierarchy. The sample would be probative if a bank's reporting officer is excluded from material regulatory communication about suspicious…; a different population and test are needed for an AML department has written procedures but no authority to challenge a revenue-generating….
B:The relevant alternative mechanism is different from an AML department has written procedures but no authority to challenge a…: The review checks for credible evidence supporting risk reductions. The test exercises an adjacent pathway, a bank uses the number of written AML policies as proof that residual risk is low, without directly challenging an AML department has written procedures but no authority to challenge a revenue-generating….
D:This is not the central mechanism when an AML department has written procedures but no authority to challenge a…; testing confirms that stated restrictions influence actual onboarding outcomes. This assurance method targets a board approves restricted correspondent banking but sales continues to onboard nested-payment… rather than the reported process: an AML department has written procedures but no authority to challenge a revenue-generating….
Question 664
Independent assurance must evaluate an issue originally found as follows: A customer profile lists salary income but transactions show unusually large commercial receipts. What validation would most directly test effectiveness?
- Test ownership events against refresh completion and risk rerating
- Audit dual-use transactions for end-user and routing checks
- Test behavior-change alerts for review of customer purpose and occupation
- Test entity inventories for inclusion across applicable AFC assessments
- Sample sensitive exits for legal review and approved timing
Explanation
Correct Answer
C:Assurance evaluates whether changed conduct actually updates risk assessment. The assessment probes the affected transactions and decisions, not just an adjacent risk such as a risk team updates KYC at account opening but not after a complex customer changes….
Incorrect Answers
A:Against the reported situation in which a customer profile lists salary income but transactions show unusually large…, the measure detects stale profiles that could mask altered control. The sample would be probative if a risk team updates KYC at account opening but not after a complex customer changes ownership; a different population and test are needed for a customer profile lists salary income but transactions show unusually large commercial receipts.
B:The relevant alternative mechanism is different from a customer profile lists salary income but transactions show unusually large…: Testing ensures specialist review is not reduced to a payment-name scan. The test exercises an adjacent pathway, a trade client purchases dual-use machinery through several intermediary companies near a conflict…, without directly challenging a customer profile lists salary income but transactions show unusually large commercial receipts.
D:This is not the central mechanism when a customer profile lists salary income but transactions show unusually large…; assurance checks that material subsidiaries are not invisible in specialist reporting. This assurance method targets a high-risk subsidiary is included in the enterprise risk assessment but not in the… rather than the reported process: a customer profile lists salary income but transactions show unusually large commercial receipts.
E:When testing the contrasting pattern of a customer profile lists salary income but transactions show unusually large…, remember that assurance checks that termination was not automated without required coordination. Testing this would validate controls for a bank closes an account under investigation without considering an authorized law-enforcement…, not the effectiveness of remediation for a customer profile lists salary income but transactions show unusually large commercial receipts.
Question 665
Independent assurance must evaluate an issue originally found as follows: An insurance broker proposes many single-premium policies purchased by entities with the same hidden controller. What validation would most directly test effectiveness?
- Reconstruct common-controller relationships in policy issuance files
- Test high-velocity wallet chains for traceable endpoints
- Test alerts for newly introduced high-risk external wallet addresses
- Replay fragmented remittance patterns across multiple agent identifiers
Explanation
Correct Answer
A:An effective control catches a network that looks ordinary at policy level. The proposed sample exercises the failure seen in an insurance broker proposes many single-premium policies purchased by entities with the same hidden…, rather than the separate pathway represented by a digital-wallet provider allows unverified subaccounts to transfer balances repeatedly….
Incorrect Answers
B:The relevant alternative mechanism is different from an insurance broker proposes many single-premium policies purchased by entities with…: The assurance review should expose anonymity gaps in account-to-account transfers. This assurance method targets a digital-wallet provider allows unverified subaccounts to transfer balances repeatedly between… rather than the reported process: an insurance broker proposes many single-premium policies purchased by entities with the same….
C:Compared with the stated facts about an insurance broker proposes many single-premium policies purchased by entities with…, validation should consider address changes and behavioral risk, not only known exchange labels. Testing this would validate controls for a trading platform repeatedly sends virtual assets to an unhosted address controlled by an…, not the effectiveness of remediation for an insurance broker proposes many single-premium policies purchased by entities with the same….
D:This is not the central mechanism when an insurance broker proposes many single-premium policies purchased by entities with…; detection tests should identify linked small transfers despite distribution across outlets. The sample would be probative if a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions; a different population and test are needed for an insurance broker proposes many single-premium policies purchased by entities with the same….
Question 666
A remediation is marked complete for this case: A bank replaces every rules-based alert with a machine-learning score without evaluating interpretability or unexplained misses. Which operational test would best challenge that claim?
- Back-test thresholds using segment-specific suspicious cases and false positives
- Inject unsupported relationships and verify they are rejected in review
- Compare model detection and drift against controlled benchmark cases
- Back-test model versions and check drift plus approval evidence
Explanation
Correct Answer
C:The test checks performance, explainability, and stability after deployment. This test provides observable evidence about the affected process; a test focused on a small-business monitoring scenario uses the same cash threshold as a multinational… would not establish the same result.
Incorrect Answers
A:When testing the contrasting pattern of a bank replaces every rules-based alert with a machine-learning score without…, remember that testing should check recall and alert quality across different populations. Testing this would validate controls for a small-business monitoring scenario uses the same cash threshold as a multinational…, not the effectiveness of remediation for a bank replaces every rules-based alert with a machine-learning score without evaluating….
B:Testing measures whether errors are caught before escalation and reporting; the observed record here instead involves a bank replaces every rules-based alert with a machine-learning score without…. The sample would be probative if a case system auto-generates suspicious-activity narratives using AI that sometimes invents account…; a different population and test are needed for a bank replaces every rules-based alert with a machine-learning score without evaluating….
D:The relevant alternative mechanism is different from a bank replaces every rules-based alert with a machine-learning score without…: Assurance determines whether changes preserved detection effectiveness. Even a favorable result for a data scientist deploys a revised monitoring model without documenting validation or independent… would not demonstrate the control works when a bank replaces every rules-based alert with a machine-learning score without evaluating….
Question 667
The compliance team introduces remediation for this weakness: A vendor's watchlist feed stops updating for four days while payment processing continues. Which evidence best shows it is functioning?
- Audit risk-score changes against genuine event and entity matches
- Seed newly designated controllers and test customer-level escalation
- Simulate missed feed updates and verify operational escalation
- Seed material customer events and verify timely profile refresh
Explanation
Correct Answer
C:For the supported action of simulate missed feed updates and verify operational escalation in this effectiveness test review involving a vendor's watchlist feed stops updating for four days while payment processing continues, assurance checks whether the institution responds before stale data becomes prolonged exposure. This test provides observable evidence about the affected process; a test focused on an automated KYC tool increases a customer's risk score on every adverse-media mention… would not establish the same result.
Incorrect Answers
A:The relevant alternative mechanism is different from a vendor's watchlist feed stops updating for four days while payment processing…: Assurance checks automated escalation precision and traceability. Testing this would validate controls for an automated KYC tool increases a customer's risk score on every adverse-media mention without…, not the effectiveness of remediation for a vendor's watchlist feed stops updating for four days while payment processing continues.
B:Compared with the stated facts about a vendor's watchlist feed stops updating for four days while payment processing…, the test catches indirect exposure missed by name-only rescreening. The sample would be probative if a daily sanctions batch screens active customers but excludes recently changed beneficial owners; a different population and test are needed for a vendor's watchlist feed stops updating for four days while payment processing continues.
D:When testing the contrasting pattern of a vendor's watchlist feed stops updating for four days while payment processing…, remember that testing shows whether real-world changes initiate reassessment. Even a favorable result for a bank performs KYC refresh only once every five years for high-risk businesses despite major… would not demonstrate the control works when a vendor's watchlist feed stops updating for four days while payment processing continues.
Question 668
For this identified exposure, an illicit trade network infiltrates local payment channels and distorts competition with cash-funded storefronts. Choose TWO complementary steps: one targeted safeguard and one test of its operation.
- Validate cross-branch linkage using recorded courier and merchant IDs
- Measure sector-specific alert outcomes and intelligence referrals
- Verify the partner's governance and documented program beneficiaries
- Use risk intelligence to prioritize exposed sectors and businesses
- Sample payment-to-delivery chains and unexplained funders
- Escalate material trade-document inconsistencies before settlement
Explanation
Correct Answers
B:A targeted effectiveness measure tracks whether the identified criminal pattern is actually surfaced. It produces control-performance evidence about an illicit trade network infiltrates local payment channels and distorts competition with cash-funded…; a documented plan alone would not prove operation.
D:Sectoral typologies should inform enhanced review and proportionate control placement. It addresses the live exposure in an illicit trade network infiltrates local payment channels and distorts competition with cash-funded…; corrective action is not a substitute for verifying its operation.
Incorrect Answers
A:Compared with the stated facts about an illicit trade network infiltrates local payment channels and distorts competition…, test cases must trigger even when no individual branch exceeds its alert threshold. This assurance method targets a regional bank sees sudden cash deposits at several branches by couriers working for one merchant rather than the reported process: an illicit trade network infiltrates local payment channels and distorts competition with…. For the alternative option of validate cross-branch linkage using recorded courier and merchant ids in this effectiveness test review involving an illicit trade network infiltrates local payment channels and distorts competition with…, a two-part remediation plan for an illicit trade network infiltrates local payment channels and distorts competition… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
C:When testing the contrasting pattern of an illicit trade network infiltrates local payment channels and distorts competition…, remember that the recipient's capacity and end-use evidence matter more than geographic assumptions alone. The inquiry is suited to a relief organization routes grants to an unverified local partner in an active conflict area; the requested evidence must instead address an illicit trade network infiltrates local payment channels and distorts competition with…. For the alternative option of verify the partner's governance and documented program beneficiaries in this effectiveness test review involving an illicit trade network infiltrates local payment channels and distorts competition with…, a two-part remediation plan for an illicit trade network infiltrates local payment channels and distorts competition… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
E:Against the reported situation in which an illicit trade network infiltrates local payment channels and distorts competition…, the test exposes unsupported funding that a simple invoice check can miss. Even a favorable result for a precious-metals dealer receives repeated third-party deposits without links to purchased bullion would not demonstrate the control works when an illicit trade network infiltrates local payment channels and distorts competition with…. For the alternative option of sample payment-to-delivery chains and unexplained funders in this effectiveness test review involving an illicit trade network infiltrates local payment channels and distorts competition with…, a two-part remediation plan for an illicit trade network infiltrates local payment channels and distorts competition… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
F:The relevant alternative mechanism is different from an illicit trade network infiltrates local payment channels and distorts competition…: Control points must address trade substance rather than accepting facially complete papers. That would be a coherent mitigation for a trading company requests a letter of credit with documents inconsistent on port, cargo, and…, whereas the immediate gap concerns an illicit trade network infiltrates local payment channels and distorts competition with…. For the alternative option of escalate material trade-document inconsistencies before settlement in this effectiveness test review involving an illicit trade network infiltrates local payment channels and distorts competition with…, a two-part remediation plan for an illicit trade network infiltrates local payment channels and distorts competition… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
Question 669
An examiner questions whether a revised procedure works after this event: A bank terminates all accounts belonging to refugees because identity documents differ from its standard domestic format. Which test directly addresses the event?
- Sample exchanges for channel classification and retention evidence
- Review sent RFIs for scope, tone, and confidentiality compliance
- Sample retained high-risk clients for condition compliance and escalation
- Review rejection reasons and verified alternative-onboarding outcomes
Explanation
Correct Answer
D:Assurance checks fairness and control performance, not only onboarding speed. Operating-effectiveness evidence must reach the specific control gap here; a bank treats a voluntary interbank information request as an automatic section 314(a)… would require a different test.
Incorrect Answers
A:Against the reported situation in which a bank terminates all accounts belonging to refugees because identity documents…, testing ensures searches and disclosures follow the proper framework. Testing this would validate controls for a bank treats a voluntary interbank information request as an automatic section 314(a) government…, not the effectiveness of remediation for a bank terminates all accounts belonging to refugees because identity documents differ from its….
B:The relevant alternative mechanism is different from a bank terminates all accounts belonging to refugees because identity documents…: The check tests both information quality and communications risk. The sample would be probative if an investigator requests business documents through a customer-facing team using an accusatory…; a different population and test are needed for a bank terminates all accounts belonging to refugees because identity documents differ from its….
C:Compared with the stated facts about a bank terminates all accounts belonging to refugees because identity documents…, testing checks that governance decisions actually alter ongoing controls. The test exercises an adjacent pathway, a customer is retained despite repeated unresolved suspicious transactions because revenue targets…, without directly challenging a bank terminates all accounts belonging to refugees because identity documents differ from its….
Question 670
Quality assurance is reviewing a remediation plan for this situation: An FIU receives information suggesting an overseas account is connected to local predicate crime. Which sample or test is most useful?
- Sample high-impact screening configurations against primary sources
- Audit the national-assessment mapping to material business activities
- Back-test new scenarios against the report's key indicators
- Audit request and dissemination logs for authorized channels
Explanation
Correct Answer
D:Testing checks that cross-border intelligence was appropriately routed and safeguarded. For the supported action of audit request and dissemination logs for authorized channels in this effectiveness test review involving an FIU receives information suggesting an overseas account is connected to local predicate…, the assessment probes the affected transactions and decisions, not just an adjacent risk such as a trade team assumes a private sanctions-screening vendor's advisory is binding legal….
Incorrect Answers
A:When testing the contrasting pattern of an FIU receives information suggesting an overseas account is connected to local…, remember that assurance verifies that operative restrictions come from authorized legal interpretation. Even a favorable result for a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation would not demonstrate the control works when an FIU receives information suggesting an overseas account is connected to local predicate crime.
B:The test confirms that threats were considered, even where some were discounted with evidence; the observed record here instead involves an FIU receives information suggesting an overseas account is connected to local…. This assurance method targets a bank ignores a national proliferation-financing threat assessment because it has little retail… rather than the reported process: an FIU receives information suggesting an overseas account is connected to local predicate crime.
C:Against the reported situation in which an FIU receives information suggesting an overseas account is connected to local…, validation checks that the warning is operationalized in trade surveillance. Testing this would validate controls for a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade…, not the effectiveness of remediation for an FIU receives information suggesting an overseas account is connected to local predicate crime.