Question 710
Quality assurance is reviewing a remediation plan for this situation: A bank's cross-border screening system truncates long payment free-text fields before names are analyzed. Which sample or test is most useful?
- Test changed identifiers and new designations against cleared records
- Seed newly designated controllers and test customer-level escalation
- Run precision-recall tests and timed case-resolution exercises
- Test alerts for accurate dates and captured case dispositions
- Test maximum-length payment messages for complete screening coverage
Explanation
Correct Answer
E:Assurance confirms that truncation and encoding do not conceal matches. Operating-effectiveness evidence must reach the specific control gap here; a screening platform suppresses repeat matches based solely on a previously cleared… would require a different test.
Incorrect Answers
A:When testing the contrasting pattern of a bank's cross-border screening system truncates long payment free-text fields before…, remember that assurance detects unsafe permanent suppression of potential matches. The test exercises an adjacent pathway, a screening platform suppresses repeat matches based solely on a previously cleared customer name, without directly challenging a bank's cross-border screening system truncates long payment free-text fields before names are….
B:The test catches indirect exposure missed by name-only rescreening; the observed record here instead involves a bank's cross-border screening system truncates long payment free-text fields before…. Even a favorable result for a daily sanctions batch screens active customers but excludes recently changed beneficial owners would not demonstrate the control works when a bank's cross-border screening system truncates long payment free-text fields before names are….
C:Against the reported situation in which a bank's cross-border screening system truncates long payment free-text fields before…, assurance shows whether tuning improves quality and case timeliness simultaneously. This assurance method targets a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within… rather than the reported process: a bank's cross-border screening system truncates long payment free-text fields before names are….
D:The relevant alternative mechanism is different from a bank's cross-border screening system truncates long payment free-text fields before…: Assurance prevents old material from being treated as verified new misconduct. Testing this would validate controls for a news-screening tool presents a decade-old allegation as breaking information about a current…, not the effectiveness of remediation for a bank's cross-border screening system truncates long payment free-text fields before names are….
Question 711
A remediation is marked complete for this case: A bank treats a regulatory examination request as a criminal search warrant. Which operational test would best challenge that claim?
- Test typographic and transliteration variants of listed names
- Sample trade payments for prohibited product and destination flags
- Test request handling against authority verification and disclosure logs
- Track intelligence-triggered updates and investigation outcomes
Explanation
Correct Answer
C:Assurance checks whether the institution honored each lawful request without excess disclosure. This test provides observable evidence about the affected process; a test focused on a sanctions analyst releases a possible listed-person match because the customer name has… would not establish the same result.
Incorrect Answers
A:When testing the contrasting pattern of a bank treats a regulatory examination request as a criminal search warrant, remember that scenario testing should determine whether reasonable spelling differences are still surfaced. Testing this would validate controls for a sanctions analyst releases a possible listed-person match because the customer name has different…, not the effectiveness of remediation for a bank treats a regulatory examination request as a criminal search warrant.
B:Control testing demonstrates that embargoed activity is found even without a listed party; the observed record here instead involves a bank treats a regulatory examination request as a criminal search warrant. The sample would be probative if a branch screens sanctioned party names but overlooks a UN embargo relating to a category of…; a different population and test are needed for a bank treats a regulatory examination request as a criminal search warrant.
D:The relevant alternative mechanism is different from a bank treats a regulatory examination request as a criminal search warrant: Evidence should demonstrate whether the organization learns from reputable non-government sources. Even a favorable result for a policy team ignores a credible advocacy report that documents exploitation patterns affecting its… would not demonstrate the control works when a bank treats a regulatory examination request as a criminal search warrant.
Question 712
A remediation is marked complete for this case: A relief organization routes grants to an unverified local partner in an active conflict area. Which operational test would best challenge that claim?
- Check whether PEP downgrades considered influence and associated parties
- Reconcile sampled grants to end beneficiaries and approved projects
- Review discrepancies held versus released and their resolutions
- Test event-driven PEP updates against new public appointments
- Review approval files and wealth corroboration for new foreign PEPs
Explanation
Correct Answer
B:Tracing disbursements shows whether controls follow money beyond the initial partner payment. Operating-effectiveness evidence must reach the specific control gap here; a former senior politician retains influence over a state-owned enterprise through close… would require a different test.
Incorrect Answers
A:When testing the contrasting pattern of a relief organization routes grants to an unverified local partner in an active…, remember that controls should resist automatic removals based only on a departure date. The sample would be probative if a former senior politician retains influence over a state-owned enterprise through close associates; a different population and test are needed for a relief organization routes grants to an unverified local partner in an active conflict area.
C:Against the reported situation in which a relief organization routes grants to an unverified local partner in an active…, assurance tests whether exceptions are resolved with evidence before funds move. Even a favorable result for a trading company requests a letter of credit with documents inconsistent on port, cargo, and… would not demonstrate the control works when a relief organization routes grants to an unverified local partner in an active conflict area.
D:The relevant alternative mechanism is different from a relief organization routes grants to an unverified local partner in an active…: A working control will flag materially changed exposure and trigger appropriate review. This assurance method targets a client's brother becomes a senior procurement official and a related company receives government… rather than the reported process: a relief organization routes grants to an unverified local partner in an active conflict area.
E:Compared with the stated facts about a relief organization routes grants to an unverified local partner in an active…, testing should confirm decision-makers received meaningful risk evidence before onboarding. Testing this would validate controls for a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained…, not the effectiveness of remediation for a relief organization routes grants to an unverified local partner in an active conflict area.
Question 713
For this identified exposure, a payment processor onboards merchants whose websites sell one product but settlement refunds go to unrelated entities. Choose TWO complementary steps: one targeted safeguard and one test of its operation.
- Test event-driven PEP updates against new public appointments
- Perform merchant underwriting and beneficiary-of-settlement checks
- Obtain senior management approval and enhanced ongoing monitoring
- Sample merchant payments from purchase to refund beneficiary
- Trace instructions, underlying client identity, and payment origin
- Check whether PEP downgrades considered influence and associated parties
Explanation
Correct Answers
B:Monitoring should detect undeclared business models and unexplained third-party flows. It addresses the live exposure in a payment processor onboards merchants whose websites sell one product but settlement refunds go to unrelated…; corrective action is not a substitute for verifying its operation.
D:End-to-end testing exposes settlement diversion that transaction volume metrics would miss. It produces control-performance evidence about a payment processor onboards merchants whose websites sell one product but settlement refunds go to unrelated…; a documented plan alone would not prove operation.
Incorrect Answers
A:Compared with the stated facts about a payment processor onboards merchants whose websites sell one product but settlement…, a working control will flag materially changed exposure and trigger appropriate review. The sample would be probative if a client's brother becomes a senior procurement official and a related company receives government…; a different population and test are needed for a payment processor onboards merchants whose websites sell one product but settlement refunds go to…. For the alternative option of test event-driven pep updates against new public appointments in this effectiveness test review involving a payment processor onboards merchants whose websites sell one product but settlement refunds…, a two-part remediation plan for a payment processor onboards merchants whose websites sell one product but… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
C:When testing the contrasting pattern of a payment processor onboards merchants whose websites sell one product but settlement…, remember that foreign PEP relationships call for elevated governance and reasonable wealth/source-of-funds checks. Its controls focus on a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained…, which would leave the observed problem of a payment processor onboards merchants whose websites sell one product but settlement refunds go to… unresolved. For the alternative option of obtain senior management approval and enhanced ongoing monitoring in this effectiveness test review involving a payment processor onboards merchants whose websites sell one product but settlement refunds…, a two-part remediation plan for a payment processor onboards merchants whose websites sell one product but… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
E:Against the reported situation in which a payment processor onboards merchants whose websites sell one product but settlement…, the lawyer's account name does not by itself establish who purchased the asset. That review would be useful if an overseas investor uses a lawyer's client account to settle a property purchase without naming…, but it would not resolve the central uncertainty in a payment processor onboards merchants whose websites sell one product but settlement refunds go to…. For the alternative option of trace instructions, underlying client identity, and payment origin in this effectiveness test review involving a payment processor onboards merchants whose websites sell one product but settlement refunds…, a two-part remediation plan for a payment processor onboards merchants whose websites sell one product but… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
F:The relevant alternative mechanism is different from a payment processor onboards merchants whose websites sell one product but settlement…: Controls should resist automatic removals based only on a departure date. The sample would be probative if a former senior politician retains influence over a state-owned enterprise through close associates; a different population and test are needed for a payment processor onboards merchants whose websites sell one product but settlement refunds go to…. For the alternative option of check whether pep downgrades considered influence and associated parties in this effectiveness test review involving a payment processor onboards merchants whose websites sell one product but settlement refunds…, a two-part remediation plan for a payment processor onboards merchants whose websites sell one product but… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
Question 714
A risk committee asks for operating-effectiveness evidence regarding the following: A bank scores a low-risk domestic payment product using a national threat assessment for an unrelated industry. What would provide the strongest proof?
- Review cited third-party claims for methods and independent support
- Test foreign-request workflows for documented legal validation
- Sample high-impact screening configurations against primary sources
- Challenge risk ratings against sector-level evidence and portfolio reality
Explanation
Correct Answer
D:Testing shows whether the assessment differentiates exposed and unrelated products. The proposed sample exercises the failure seen in a bank scores a low-risk domestic payment product using a national threat assessment for an unrelated…, rather than the separate pathway represented by a bank repeats industry research claims about laundering indicators without checking….
Incorrect Answers
A:Testing can uncover weak evidence embedded in risk scores or training; the observed record here instead involves a bank scores a low-risk domestic payment product using a national threat assessment…. This assurance method targets a bank repeats industry research claims about laundering indicators without checking methodology or… rather than the reported process: a bank scores a low-risk domestic payment product using a national threat assessment for an….
B:Against the reported situation in which a bank scores a low-risk domestic payment product using a national threat assessment…, assurance checks preservation decisions and disclosures against verified authority. Testing this would validate controls for an overseas police unit asks a bank employee to preserve client data without a recognized local…, not the effectiveness of remediation for a bank scores a low-risk domestic payment product using a national threat assessment for an….
C:The relevant alternative mechanism is different from a bank scores a low-risk domestic payment product using a national threat assessment…: Assurance verifies that operative restrictions come from authorized legal interpretation. The sample would be probative if a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation; a different population and test are needed for a bank scores a low-risk domestic payment product using a national threat assessment for an….
Question 715
A firm wants measurable assurance for this identified exposure: A bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity. Which evaluation should be conducted?
- Review material resolutions for quorum, action owners, and closure
- Test country files for correct report recipients and timing
- Run seeded sanctioned-name tests before and after threshold changes
- Sample customer contacts around filed reports for prohibited disclosures
Explanation
Correct Answer
C:The test provides direct evidence of sensitivity rather than relying on volume alone. Success on this scenario would be relevant to the original failure, whereas a risk committee meets quarterly but has no formal mandate or named decision powers tests a different exposure.
Incorrect Answers
A:This is not the central mechanism when a bank celebrates a decline in sanctions alerts after a vendor changes matching…; control effectiveness rests on decisions being made and implemented. This assurance method targets a risk committee meets quarterly but has no formal mandate or named decision powers rather than the reported process: a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity.
B:When testing the contrasting pattern of a bank celebrates a decline in sanctions alerts after a vendor changes matching…, remember that an audit detects reports misrouted to a global mailbox instead of a competent authority. Testing this would validate controls for a compliance analyst assumes suspicious activity always must be reported to the same global office, not the effectiveness of remediation for a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity.
D:Against the reported situation in which a bank celebrates a decline in sanctions alerts after a vendor changes matching…, the test checks that staff maintain legal confidentiality while handling inquiries. The test exercises an adjacent pathway, an institution sends a suspicious-activity report directly to a customer to explain a payment delay, without directly challenging a bank celebrates a decline in sanctions alerts after a vendor changes matching sensitivity.
Question 716
An examiner questions whether a revised procedure works after this event: A sanctions screening tool uses exact spelling only and misses a listed person whose name has two transliterations. Which test directly addresses the event?
- Seed material customer events and verify timely profile refresh
- Seed transliterated list names and evaluate recall plus alert workload
- Seed list matches into different message fields and formats
- Run precision-recall tests and timed case-resolution exercises
Explanation
Correct Answer
B:The test measures missed matches and false positives rather than alert counts alone. Success on this scenario would be relevant to the original failure, whereas a bank performs KYC refresh only once every five years for high-risk businesses despite… tests a different exposure.
Incorrect Answers
A:Against the reported situation in which a sanctions screening tool uses exact spelling only and misses a listed person whose…, testing shows whether real-world changes initiate reassessment. The test exercises an adjacent pathway, a bank performs KYC refresh only once every five years for high-risk businesses despite major…, without directly challenging a sanctions screening tool uses exact spelling only and misses a listed person whose name has two….
C:Compared with the stated facts about a sanctions screening tool uses exact spelling only and misses a listed person whose…, testing reveals blind spots caused by incomplete parsing. This assurance method targets a payments engine screens only the recipient name while ignoring originator and intermediary… rather than the reported process: a sanctions screening tool uses exact spelling only and misses a listed person whose name has two….
D:This is not the central mechanism when a sanctions screening tool uses exact spelling only and misses a listed person whose…; assurance shows whether tuning improves quality and case timeliness simultaneously. Testing this would validate controls for a fuzzy sanctions matcher produces overwhelming false hits and analysts cannot clear them within…, not the effectiveness of remediation for a sanctions screening tool uses exact spelling only and misses a listed person whose name has two….
Question 717
Quality assurance is reviewing a remediation plan for this situation: An EU financial group assumes a policy written before the 2024 AML regulatory package will remain sufficient unchanged. Which sample or test is most useful?
- Test cross-border data access against consent and legal bases where applicable
- Measure member adoption of indicators and validated hit quality
- Sample referrals for corroboration and documented customer outcomes
- Monitor high-risk-country outcomes for differentiated risk decisions
- Test policies against applicable EU reform obligations at each effective date
Explanation
Correct Answer
E:Assurance should not treat future requirements as already binding or ignore commenced duties. For the supported action of test policies against applicable eu reform obligations at each effective date in this effectiveness test review involving an EU financial group assumes a policy written before the 2024 AML regulatory package will…, this test provides observable evidence about the affected process; a test focused on a bank centralizes all customer data in one country despite incompatible transfer… would not establish the same result.
Incorrect Answers
A:When testing the contrasting pattern of an EU financial group assumes a policy written before the 2024 AML regulatory package…, remember that audit logs reveal whether disclosures remain within authorized use. This assurance method targets a bank centralizes all customer data in one country despite incompatible transfer restrictions in… rather than the reported process: an EU financial group assumes a policy written before the 2024 AML regulatory package will remain….
B:Testing reveals whether collaboration led to better detection outcomes; the observed record here instead involves an EU financial group assumes a policy written before the 2024 AML regulatory package…. Testing this would validate controls for a banking consortium wants to share scam indicators but only discusses names instead of…, not the effectiveness of remediation for an EU financial group assumes a policy written before the 2024 AML regulatory package will remain….
C:Against the reported situation in which an EU financial group assumes a policy written before the 2024 AML regulatory package…, assurance tests whether peer signals are handled responsibly. The sample would be probative if an institution receives a peer alert about a suspicious account and immediately exits the client…; a different population and test are needed for an EU financial group assumes a policy written before the 2024 AML regulatory package will remain….
D:The relevant alternative mechanism is different from an EU financial group assumes a policy written before the 2024 AML regulatory package…: Testing should identify blanket exclusions that lack documented individual assessment. The test exercises an adjacent pathway, an international bank rejects all payments from a high-risk country without assessing customer or…, without directly challenging an EU financial group assumes a policy written before the 2024 AML regulatory package will remain….
Question 718
Quality assurance is reviewing a remediation plan for this situation: An investigation platform copies unmasked sensitive customer records into a vendor's general-purpose AI training environment. Which sample or test is most useful?
- Test overdue high-risk cases and sampled investigation quality
- Measure high-risk stream coverage and reduction in unmonitored activity
- Audit AI data exports against permissible purposes and retention rules
- Run real-format message tests and review exception handling in a pilot
Explanation
Correct Answer
C:Testing uncovers unauthorized processing and retention beyond the case requirement. Operating-effectiveness evidence must reach the specific control gap here; an AML analytics unit reports record throughput but growing unresolved high-risk alerts… would require a different test.
Incorrect Answers
A:When testing the contrasting pattern of an investigation platform copies unmasked sensitive customer records into a vendor's…, remember that assurance exposes deterioration hidden by aggregate production statistics. Even a favorable result for an AML analytics unit reports record throughput but growing unresolved high-risk alerts remain… would not demonstrate the control works when an investigation platform copies unmasked sensitive customer records into a vendor's….
B:Effectiveness should be demonstrated by reduced exposure rather than software novelty; the observed record here instead involves an investigation platform copies unmasked sensitive customer records into a vendor's…. This assurance method targets a bank invests in a complex AI tool while high-risk payment streams still bypass basic transaction… rather than the reported process: an investigation platform copies unmasked sensitive customer records into a vendor's….
D:The relevant alternative mechanism is different from an investigation platform copies unmasked sensitive customer records into a vendor's…: Testing exposes integration gaps concealed by vendor demonstrations. The sample would be probative if a bank selects a screening vendor based on advertised accuracy without checking payment-system…; a different population and test are needed for an investigation platform copies unmasked sensitive customer records into a vendor's….
Question 719
A firm wants measurable assurance for this identified exposure: A wealth adviser notices unexpected offshore transfers but believes only the monitoring system can report unusual activity. Which evaluation should be conducted?
- Review board challenge records and follow-up after training
- Audit critical workflows for named owners and actual completion
- Audit deletion exceptions against valid holds and applicable schedules
- Audit referrals from relationship teams for timeliness and follow-up
- Measure post-training referral accuracy and case-handling improvement
- Test incident referrals for full payment-chain review and closure
Explanation
Correct Answer
D:Testing measures use of customer intelligence beyond automated alerts. For the supported action of audit referrals from relationship teams for timeliness and follow-up in this effectiveness test review involving a wealth adviser notices unexpected offshore transfers but believes only the monitoring system…, this test provides observable evidence about the affected process; a test focused on a board receives annual compliance training identical to the material used for new… would not establish the same result.
Incorrect Answers
A:This is not the central mechanism when a wealth adviser notices unexpected offshore transfers but believes only the…; the outcome measure tests whether directors apply the instruction. The test exercises an adjacent pathway, a board receives annual compliance training identical to the material used for new customer-service…, without directly challenging a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
B:When testing the contrasting pattern of a wealth adviser notices unexpected offshore transfers but believes only the…, remember that testing reveals control gaps hidden by broad department titles. Even a favorable result for a financial crime team has investigators but no ownership of data quality, training, or sanctions… would not demonstrate the control works when a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
C:The test detects both missing evidence and unjustified retention; the observed record here instead involves a wealth adviser notices unexpected offshore transfers but believes only the…. This assurance method targets a privacy team deletes records under an automated schedule without considering mandatory AML… rather than the reported process: a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
E:The relevant alternative mechanism is different from a wealth adviser notices unexpected offshore transfers but believes only the…: Assurance checks applied competence rather than attendance certificates. The sample would be probative if tellers attend generic AML training but cannot identify an emerging local romance-scam mule pattern; a different population and test are needed for a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
F:Compared with the stated facts about a wealth adviser notices unexpected offshore transfers but believes only the…, assurance checks that cyber alerts produce appropriate financial-crime investigation. The test exercises an adjacent pathway, a cybersecurity team detects a compromised customer login but the AFC team never reviews the…, without directly challenging a wealth adviser notices unexpected offshore transfers but believes only the monitoring system can….
Question 720
For this identified exposure, a bank decides to exit a high-risk customer while two divisions disagree about who has approval authority. Choose TWO complementary steps: one targeted safeguard and one test of its operation.
- Route material exits through approved multidisciplinary governance
- Inspect vendor ownership, personnel access, and conflicting engagements
- Audit high-risk exits for committee approval and documented rationale
- Test material overrides for AFC review and management escalation
- Test sensitive profile changes for provenance and dual authorization
- Obtain appropriate approvals and enhanced source-of-wealth review
Explanation
Correct Answers
A:For the supported action of route material exits through approved multidisciplinary governance in this effectiveness test review involving a bank decides to exit a high-risk customer while two divisions disagree about who has…, compliance, legal, and business functions should make accountable and appropriately timed decisions. It addresses the live exposure in a bank decides to exit a high-risk customer while two divisions disagree about who has approval authority; corrective action is not a substitute for verifying its operation.
C:Assurance can reveal inconsistent or unauthorized account closures. It produces control-performance evidence about a bank decides to exit a high-risk customer while two divisions disagree about who has approval authority; a documented plan alone would not prove operation.
Incorrect Answers
B:This is not the central mechanism when a bank decides to exit a high-risk customer while two divisions disagree about who…; due diligence should establish who can change sensitive configurations and why. It seeks evidence about a technology supplier with access to screening rules also sells services to a…; the allegation under review instead involves a bank decides to exit a high-risk customer while two divisions disagree about who has approval…. For the alternative option of inspect vendor ownership, personnel access, and conflicting engagements in this effectiveness test review involving a bank decides to exit a high-risk customer while two divisions disagree about who has…, a two-part remediation plan for a bank decides to exit a high-risk customer while two divisions disagree about who… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
D:Assurance confirms that reporting lines do not impair compliance decisions; the observed record here instead involves a bank decides to exit a high-risk customer while two divisions disagree about who…. The sample would be probative if a growing bank moves AFC analysts into a sales reporting chain without clear conflict safeguards; a different population and test are needed for a bank decides to exit a high-risk customer while two divisions disagree about who has approval…. For the alternative option of test material overrides for afc review and management escalation in this effectiveness test review involving a bank decides to exit a high-risk customer while two divisions disagree about who has…, a two-part remediation plan for a bank decides to exit a high-risk customer while two divisions disagree about who… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
E:Against the reported situation in which a bank decides to exit a high-risk customer while two divisions disagree about who…, assurance should uncover silent rewrites of monitoring inputs. The test exercises an adjacent pathway, a relationship manager changes customer occupation data after repeated alerts without an audit trail, without directly challenging a bank decides to exit a high-risk customer while two divisions disagree about who has approval…. For the alternative option of test sensitive profile changes for provenance and dual authorization in this effectiveness test review involving a bank decides to exit a high-risk customer while two divisions disagree about who has…, a two-part remediation plan for a bank decides to exit a high-risk customer while two divisions disagree about who… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
F:The relevant alternative mechanism is different from a bank decides to exit a high-risk customer while two divisions disagree about who…: Governance should address both political influence and unexplained wealth accumulation. Its controls focus on a new customer is a PEP whose funds arrive from a closely held firm with undisclosed controllers, which would leave the observed problem of a bank decides to exit a high-risk customer while two divisions disagree about who has approval… unresolved. For the alternative option of obtain appropriate approvals and enhanced source-of-wealth review in this effectiveness test review involving a bank decides to exit a high-risk customer while two divisions disagree about who has…, a two-part remediation plan for a bank decides to exit a high-risk customer while two divisions disagree about who… needs an issue-specific safeguard and proof that it operates, not this unrelated step.