Question 680
The following risk prompted a control change: A monitoring engine receives transaction dates as free-form strings and misorders transfers across time zones. How should the institution confirm the control detects or prevents it?
- Test exit cases for case-status checks and retention preservation
- Test sample customers from onboarding through investigations and closure
- Replay known time-ordered payments through the normalized data pipeline
- Challenge the flow with altered documents and independent issuer checks
- Sample enrichment hits for correct person, source quality, and currency
Explanation
Correct Answer
C:Tests should detect sequencing errors before alerts rely on corrupted timestamps. This test provides observable evidence about the affected process; a test focused on an institution introduces an exit-control process that deletes customers before outstanding… would not establish the same result.
Incorrect Answers
A:This is not the central mechanism when a monitoring engine receives transaction dates as free-form strings and misorders…; assurance verifies that closure workflows do not erase unresolved compliance obligations. Testing this would validate controls for an institution introduces an exit-control process that deletes customers before outstanding…, not the effectiveness of remediation for a monitoring engine receives transaction dates as free-form strings and misorders transfers across….
B:When testing the contrasting pattern of a monitoring engine receives transaction dates as free-form strings and misorders…, remember that end-to-end validation exposes missing handoffs between distinct control stages. The sample would be probative if a fintech buys a transaction-monitoring platform without any process for verifying customers at…; a different population and test are needed for a monitoring engine receives transaction dates as free-form strings and misorders transfers across….
D:Against the reported situation in which a monitoring engine receives transaction dates as free-form strings and misorders…, testing confirms whether manipulated documents are rejected or escalated. Even a favorable result for an e-KYC provider verifies an image of an identity document but never validates its issuer or… would not demonstrate the control works when a monitoring engine receives transaction dates as free-form strings and misorders transfers across….
E:The relevant alternative mechanism is different from a monitoring engine receives transaction dates as free-form strings and misorders…: Assurance gauges mistaken identity and stale information separately. This assurance method targets a bank buys adverse-media data but cannot explain which persons its records actually match rather than the reported process: a monitoring engine receives transaction dates as free-form strings and misorders transfers across….
Question 681
The compliance team introduces remediation for this weakness: A local compliance team automatically applies US suspicious-activity deadlines to an EU subsidiary. Which evidence best shows it is functioning?
- Audit US submissions against applicable FinCEN triggers and deadlines
- Audit 314(a) searches and 314(b) disclosures as different processes
- Test policies against applicable EU reform obligations at each effective date
- Test filing timeliness using each entity's actual legal triggers
Explanation
Correct Answer
D:Assurance detects both late and incorrectly routed reports. The assessment probes the affected transactions and decisions, not just an adjacent risk such as a US branch relies on European transaction reporting rules to set its US….
Incorrect Answers
A:The relevant alternative mechanism is different from a local compliance team automatically applies US suspicious-activity deadlines to an…: Assurance confirms correct legal regime rather than general resemblance to foreign rules. Even a favorable result for a US branch relies on European transaction reporting rules to set its US suspicious-activity filing… would not demonstrate the control works when a local compliance team automatically applies US suspicious-activity deadlines to an EU subsidiary.
B:Compared with the stated facts about a local compliance team automatically applies US suspicious-activity deadlines to an…, testing checks that each activity follows its own authority and recordkeeping requirements. This assurance method targets a firm's US manager sends data requested under an informal private-sector network as if it were a… rather than the reported process: a local compliance team automatically applies US suspicious-activity deadlines to an EU subsidiary.
C:This is not the central mechanism when a local compliance team automatically applies US suspicious-activity deadlines to an…; assurance should not treat future requirements as already binding or ignore commenced duties. Testing this would validate controls for an EU financial group assumes a policy written before the 2024 AML regulatory package will remain…, not the effectiveness of remediation for a local compliance team automatically applies US suspicious-activity deadlines to an EU subsidiary.
Question 682
An examiner questions whether a revised procedure works after this event: A regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade corridor. Which test directly addresses the event?
- Audit request and dissemination logs for authorized channels
- Compare final submissions for reconciliation and authorization evidence
- Challenge risk ratings against sector-level evidence and portfolio reality
- Back-test new scenarios against the report's key indicators
Explanation
Correct Answer
D:Validation checks that the warning is operationalized in trade surveillance. The proposed sample exercises the failure seen in a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade corridor, rather than the separate pathway represented by an FIU receives information suggesting an overseas account is connected to local predicate….
Incorrect Answers
A:Against the reported situation in which a regional FIU report identifies a new invoice-manipulation scheme involving the…, testing checks that cross-border intelligence was appropriately routed and safeguarded. This assurance method targets an FIU receives information suggesting an overseas account is connected to local predicate crime rather than the reported process: a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade….
B:The relevant alternative mechanism is different from a regional FIU report identifies a new invoice-manipulation scheme involving the…: Assurance should find consistent data definitions without unauthorized cross-border transfers. Testing this would validate controls for two supervisors request overlapping transaction samples from a cross-border banking group with…, not the effectiveness of remediation for a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade….
C:Compared with the stated facts about a regional FIU report identifies a new invoice-manipulation scheme involving the…, testing shows whether the assessment differentiates exposed and unrelated products. The sample would be probative if a bank scores a low-risk domestic payment product using a national threat assessment for an…; a different population and test are needed for a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade….
Question 683
The following risk prompted a control change: A bank repeats industry research claims about laundering indicators without checking methodology or sample size. How should the institution confirm the control detects or prevents it?
- Compare final submissions for reconciliation and authorization evidence
- Audit the national-assessment mapping to material business activities
- Test samples where trade routes diverge from registered addresses
- Review cited third-party claims for methods and independent support
Explanation
Correct Answer
D:Testing can uncover weak evidence embedded in risk scores or training. The assessment probes the affected transactions and decisions, not just an adjacent risk such as two supervisors request overlapping transaction samples from a cross-border banking group….
Incorrect Answers
A:This is not the central mechanism when a bank repeats industry research claims about laundering indicators without checking…; assurance should find consistent data definitions without unauthorized cross-border transfers. Even a favorable result for two supervisors request overlapping transaction samples from a cross-border banking group with… would not demonstrate the control works when a bank repeats industry research claims about laundering indicators without checking methodology or….
B:When testing the contrasting pattern of a bank repeats industry research claims about laundering indicators without checking…, remember that the test confirms that threats were considered, even where some were discounted with evidence. This assurance method targets a bank ignores a national proliferation-financing threat assessment because it has little retail… rather than the reported process: a bank repeats industry research claims about laundering indicators without checking methodology or….
C:An effective method detects exposure that residency-only logic would miss; the observed record here instead involves a bank repeats industry research claims about laundering indicators without checking…. Testing this would validate controls for a country identifies high exposure to trade-based laundering in free trade zones; a bank uses only…, not the effectiveness of remediation for a bank repeats industry research claims about laundering indicators without checking methodology or….
Question 684
A remediation is marked complete for this case: A trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation. Which operational test would best challenge that claim?
- Review dated risk-methodology revisions and affected-customer decisions
- Back-test new scenarios against the report's key indicators
- Sample high-impact screening configurations against primary sources
- Test samples where trade routes diverge from registered addresses
- Compare final submissions for reconciliation and authorization evidence
- Test remediation against the specific enforcement failure mode
Explanation
Correct Answer
C:Assurance verifies that operative restrictions come from authorized legal interpretation. The assessment probes the affected transactions and decisions, not just an adjacent risk such as a new national risk assessment highlights cash-intensive money service businesses but the….
Incorrect Answers
A:When testing the contrasting pattern of a trade team assumes a private sanctions-screening vendor's advisory is binding legal…, remember that the test proves that updated national findings actually changed control treatment. The sample would be probative if a new national risk assessment highlights cash-intensive money service businesses but the bank's…; a different population and test are needed for a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation.
B:Validation checks that the warning is operationalized in trade surveillance; the observed record here instead involves a trade team assumes a private sanctions-screening vendor's advisory is binding legal…. The test exercises an adjacent pathway, a regional FIU report identifies a new invoice-manipulation scheme involving the bank's trade…, without directly challenging a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation.
D:The relevant alternative mechanism is different from a trade team assumes a private sanctions-screening vendor's advisory is binding legal…: An effective method detects exposure that residency-only logic would miss. This assurance method targets a country identifies high exposure to trade-based laundering in free trade zones; a bank uses only… rather than the reported process: a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation.
E:Compared with the stated facts about a trade team assumes a private sanctions-screening vendor's advisory is binding legal…, assurance should find consistent data definitions without unauthorized cross-border transfers. Testing this would validate controls for two supervisors request overlapping transaction samples from a cross-border banking group with…, not the effectiveness of remediation for a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation.
F:This is not the central mechanism when a trade team assumes a private sanctions-screening vendor's advisory is binding legal…; assurance should measure the weak control, not merely staff awareness of the publication. The sample would be probative if a supervisor publishes an enforcement case about missed cash reporting by small branches; a different population and test are needed for a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation.
Question 685
For this identified exposure, a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within payment deadlines. Choose TWO complementary steps: one targeted safeguard and one test of its operation.
- Calibrate fuzzy rules with documented false-negative safeguards
- Seed ambiguous high-risk matches and examine reviewer escalation
- Use phased AI deployment with validation and human accountability
- Assess true-positive outcomes, typology coverage, and alert workload
- Run precision-recall tests and timed case-resolution exercises
- Back-test model versions and check drift plus approval evidence
Explanation
Correct Answers
A:Optimization should improve usable signal without ignoring legally relevant variants. It addresses the live exposure in a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within payment…; corrective action is not a substitute for verifying its operation.
E:Assurance shows whether tuning improves quality and case timeliness simultaneously. It produces control-performance evidence about a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within payment…; a documented plan alone would not prove operation.
Incorrect Answers
B:This is not the central mechanism when a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear…; assurance checks that automation does not bypass critical adjudication. The test exercises an adjacent pathway, an institution uses AI to prioritize sanctions cases but lets the system permanently clear…, without directly challenging a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within…. For the alternative option of seed ambiguous high-risk matches and examine reviewer escalation in this effectiveness test review involving a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them…, a two-part remediation plan for a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
C:When testing the contrasting pattern of a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear…, remember that machine learning can supplement or replace rules only with proven coverage and controls. Its controls focus on a bank replaces every rules-based alert with a machine-learning score without evaluating…, which would leave the observed problem of a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within… unresolved. For the alternative option of use phased ai deployment with validation and human accountability in this effectiveness test review involving a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them…, a two-part remediation plan for a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
D:Quality and coverage show whether threshold changes actually identify useful risks; the observed record here instead involves a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear…. It seeks evidence about an AML model's thresholds are reduced until alert volume rises sharply but investigators find fewer…; the allegation under review instead involves a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within…. For the alternative option of assess true-positive outcomes, typology coverage, and alert workload in this effectiveness test review involving a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them…, a two-part remediation plan for a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
F:The relevant alternative mechanism is different from a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear…: Assurance determines whether changes preserved detection effectiveness. The sample would be probative if a data scientist deploys a revised monitoring model without documenting validation or independent…; a different population and test are needed for a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within…. For the alternative option of back-test model versions and check drift plus approval evidence in this effectiveness test review involving a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them…, a two-part remediation plan for a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
Question 686
An examiner questions whether a revised procedure works after this event: A payments team assumes every UN Security Council sanctions resolution becomes locally enforceable without implementation steps. Which test directly addresses the event?
- Audit policy citations for source authority and legal status
- Check procedures for regulatory coverage beyond association membership
- Verify regional intelligence is reflected in customer and geographic risk scoring
- Test screening lists against effective local and UN update timelines
- Track intelligence-triggered updates and investigation outcomes
Explanation
Correct Answer
D:Assurance checks whether legally operative changes reach payment controls promptly. The assessment probes the affected transactions and decisions, not just an adjacent risk such as a nonprofit training group claims authority to impose national AML penalties because it….
Incorrect Answers
A:Against the reported situation in which a payments team assumes every UN Security Council sanctions resolution becomes…, the test prevents a private report from being treated as a regulator's directive. Even a favorable result for a nonprofit training group claims authority to impose national AML penalties because it publishes… would not demonstrate the control works when a payments team assumes every UN Security Council sanctions resolution becomes locally enforceable….
B:The relevant alternative mechanism is different from a payments team assumes every UN Security Council sanctions resolution becomes…: Assurance confirms that voluntary recommendations have not hidden statutory gaps. This assurance method targets a bank uses an industry association's voluntary principles as its only legal compliance standard rather than the reported process: a payments team assumes every UN Security Council sanctions resolution becomes locally enforceable….
C:Compared with the stated facts about a payments team assumes every UN Security Council sanctions resolution becomes…, a traceable assessment explains why specific regional exposure receives additional scrutiny. Testing this would validate controls for a bank ignores guidance from the regional FATF-style body serving one of its markets, not the effectiveness of remediation for a payments team assumes every UN Security Council sanctions resolution becomes locally enforceable….
E:When testing the contrasting pattern of a payments team assumes every UN Security Council sanctions resolution becomes…, remember that evidence should demonstrate whether the organization learns from reputable non-government sources. The test exercises an adjacent pathway, a policy team ignores a credible advocacy report that documents exploitation patterns affecting its…, without directly challenging a payments team assumes every UN Security Council sanctions resolution becomes locally enforceable….
Question 687
The AFC team needs to demonstrate sustained remediation for the following weakness: A motor-insurance intermediary sends claim payments to accounts not linked to insured persons or repairers. Which validation is appropriate?
- Test high-velocity wallet chains for traceable endpoints
- Check detection of mixer-linked chains and analyst follow-up quality
- Test claims for undocumented beneficiary changes and related parties
- Investigate suspicious seller clusters for genuine shipments and returns
Explanation
Correct Answer
C:Reviewing actual disbursement files detects bypasses that approval-rate dashboards conceal. The assessment probes the affected transactions and decisions, not just an adjacent risk such as a digital-wallet provider allows unverified subaccounts to transfer balances repeatedly….
Incorrect Answers
A:The relevant alternative mechanism is different from a motor-insurance intermediary sends claim payments to accounts not linked to insured…: The assurance review should expose anonymity gaps in account-to-account transfers. The sample would be probative if a digital-wallet provider allows unverified subaccounts to transfer balances repeatedly between…; a different population and test are needed for a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or….
B:Compared with the stated facts about a motor-insurance intermediary sends claim payments to accounts not linked to insured…, back-testing should show that relevant routes are flagged and investigated appropriately. The test exercises an adjacent pathway, a virtual-asset exchange receives coins from a mixer shortly before conversion into fiat and…, without directly challenging a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or….
D:When testing the contrasting pattern of a motor-insurance intermediary sends claim payments to accounts not linked to insured…, remember that control testing checks whether coordinated buyer-seller activity is identified. This assurance method targets a marketplace pays seller proceeds to newly added bank accounts after bursts of fabricated purchase… rather than the reported process: a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or….
Question 688
The AFC team needs to demonstrate sustained remediation for the following weakness: A bank uses an industry association's voluntary principles as its only legal compliance standard. Which validation is appropriate?
- Test screening lists against effective local and UN update timelines
- Review cross-border disclosures for validated authority and data minimization
- Check procedures for regulatory coverage beyond association membership
- Sample trade payments for prohibited product and destination flags
Explanation
Correct Answer
C:Assurance confirms that voluntary recommendations have not hidden statutory gaps. Success on this scenario would be relevant to the original failure, whereas a payments team assumes every UN Security Council sanctions resolution becomes locally… tests a different exposure.
Incorrect Answers
A:The relevant alternative mechanism is different from a bank uses an industry association's voluntary principles as its only legal…: Assurance checks whether legally operative changes reach payment controls promptly. This assurance method targets a payments team assumes every UN Security Council sanctions resolution becomes locally enforceable… rather than the reported process: a bank uses an industry association's voluntary principles as its only legal compliance standard.
B:Compared with the stated facts about a bank uses an industry association's voluntary principles as its only legal…, testing can reveal informal transfers unsupported by applicable safeguards. Testing this would validate controls for a fraud analyst sends customer data to overseas police on an informal personal email request, not the effectiveness of remediation for a bank uses an industry association's voluntary principles as its only legal compliance standard.
D:When testing the contrasting pattern of a bank uses an industry association's voluntary principles as its only legal…, remember that control testing demonstrates that embargoed activity is found even without a listed party. The test exercises an adjacent pathway, a branch screens sanctioned party names but overlooks a UN embargo relating to a category of…, without directly challenging a bank uses an industry association's voluntary principles as its only legal compliance standard.
Question 689
An internal audit report describes this failure: A data scientist deploys a revised monitoring model without documenting validation or independent challenge. Choose THREE complementary measures covering evidence, remediation, and effectiveness testing.
- Back-test model versions and check drift plus approval evidence
- Require governed model validation before production release
- Apply contextual entity resolution and analyst review to media alerts
- Inspect payment-message formats and field mapping across payment types
- Test maximum-length payment messages for complete screening coverage
- Obtain development evidence, performance tests, and model approval records
Explanation
Correct Answers
A:Assurance determines whether changes preserved detection effectiveness. It produces control-performance evidence about a data scientist deploys a revised monitoring model without documenting validation or independent challenge; a documented plan alone would not prove operation.
B:A controlled lifecycle supports reproducibility, ownership, and operational monitoring. It addresses the live exposure in a data scientist deploys a revised monitoring model without documenting validation or independent challenge; corrective action is not a substitute for verifying its operation.
F:Independent review establishes what changed and which risks arise. It supplies corroborating evidence about a data scientist deploys a revised monitoring model without documenting validation or independent challenge; investigation is distinct from implementing or testing a safeguard.
Incorrect Answers
C:When testing the contrasting pattern of a data scientist deploys a revised monitoring model without documenting validation or…, remember that the process reduces unjustified risk changes caused by superficial matches. That measure could be appropriate where adverse media software flags a person because another individual with the same common name was…, but the described weakness is a data scientist deploys a revised monitoring model without documenting validation or independent…. For the alternative option of apply contextual entity resolution and analyst review to media alerts in this effectiveness test review involving a data scientist deploys a revised monitoring model without documenting validation or…, for a data scientist deploys a revised monitoring model without documenting validation…, corroboration, targeted correction, and assurance must all relate to the same failure.
D:The review establishes which available party information is being omitted; the observed record here instead involves a data scientist deploys a revised monitoring model without documenting validation or…. It might establish facts where a payments engine screens only the recipient name while ignoring originator and intermediary…, but those records would not test the observed pattern: a data scientist deploys a revised monitoring model without documenting validation or independent…. For the alternative option of inspect payment-message formats and field mapping across payment types in this effectiveness test review involving a data scientist deploys a revised monitoring model without documenting validation or…, for a data scientist deploys a revised monitoring model without documenting validation…, corroboration, targeted correction, and assurance must all relate to the same failure.
E:Against the reported situation in which a data scientist deploys a revised monitoring model without documenting validation or…, assurance confirms that truncation and encoding do not conceal matches. Even a favorable result for a bank's cross-border screening system truncates long payment free-text fields before names are… would not demonstrate the control works when a data scientist deploys a revised monitoring model without documenting validation or independent…. For the alternative option of test maximum-length payment messages for complete screening coverage in this effectiveness test review involving a data scientist deploys a revised monitoring model without documenting validation or…, for a data scientist deploys a revised monitoring model without documenting validation…, corroboration, targeted correction, and assurance must all relate to the same failure.
Question 690
The following risk prompted a control change: A precious-metals dealer receives repeated third-party deposits without links to purchased bullion. How should the institution confirm the control detects or prevents it?
- Test event-driven PEP updates against new public appointments
- Sample payment-to-delivery chains and unexplained funders
- Test collateral files for independent provenance and valuation proof
- Audit nominee files for documented control and escalation decisions
Explanation
Correct Answer
B:The test exposes unsupported funding that a simple invoice check can miss. This test provides observable evidence about the affected process; a test focused on a client's brother becomes a senior procurement official and a related company receives… would not establish the same result.
Incorrect Answers
A:This is not the central mechanism when a precious-metals dealer receives repeated third-party deposits without links to…; a working control will flag materially changed exposure and trigger appropriate review. Even a favorable result for a client's brother becomes a senior procurement official and a related company receives government… would not demonstrate the control works when a precious-metals dealer receives repeated third-party deposits without links to purchased bullion.
C:A complete trail should support ownership and explain the scale of the pledged wealth; the observed record here instead involves a precious-metals dealer receives repeated third-party deposits without links to…. Testing this would validate controls for a private-banking client pledges opaque offshore holdings as collateral for unusually large credit…, not the effectiveness of remediation for a precious-metals dealer receives repeated third-party deposits without links to purchased bullion.
D:Against the reported situation in which a precious-metals dealer receives repeated third-party deposits without links to…, the test focuses on who actually directs the entity, not just the shareholder register. The sample would be probative if a high-risk client uses a nominee shareholder whose instructions come from an unidentified…; a different population and test are needed for a precious-metals dealer receives repeated third-party deposits without links to purchased bullion.