Question 740
A firm wants measurable assurance for this identified exposure: A customer is retained despite repeated unresolved suspicious transactions because revenue targets override committee conditions. Which evaluation should be conducted?
- Compare segment outcomes before and after risk-based changes
- Review rejection reasons and verified alternative-onboarding outcomes
- Sample retained high-risk clients for condition compliance and escalation
- Sample recorded customer contacts for report-specific disclosures
Explanation
Correct Answer
C:Testing checks that governance decisions actually alter ongoing controls. For the supported action of sample retained high-risk clients for condition compliance and escalation in this effectiveness test review involving a customer is retained despite repeated unresolved suspicious transactions because revenue…, the assessment probes the affected transactions and decisions, not just an adjacent risk such as an MSB withdraws from an entire remittance corridor after isolated suspicious cases without….
Incorrect Answers
A:This is not the central mechanism when a customer is retained despite repeated unresolved suspicious transactions because…; testing evaluates whether targeted safeguards preserve control effectiveness and access. The sample would be probative if an MSB withdraws from an entire remittance corridor after isolated suspicious cases without…; a different population and test are needed for a customer is retained despite repeated unresolved suspicious transactions because revenue targets….
B:When testing the contrasting pattern of a customer is retained despite repeated unresolved suspicious transactions because…, remember that assurance checks fairness and control performance, not only onboarding speed. The test exercises an adjacent pathway, a bank terminates all accounts belonging to refugees because identity documents differ from its…, without directly challenging a customer is retained despite repeated unresolved suspicious transactions because revenue targets….
D:Against the reported situation in which a customer is retained despite repeated unresolved suspicious transactions because…, assurance tests whether confidentiality rules are followed in practice. This assurance method targets a customer asks why a transfer is held; an analyst says it is because a suspicious-activity report… rather than the reported process: a customer is retained despite repeated unresolved suspicious transactions because revenue targets….
Question 741
For this identified exposure, a former senior politician retains influence over a state-owned enterprise through close associates. Choose TWO complementary steps: one targeted safeguard and one test of its operation.
- Sample merchant payments from purchase to refund beneficiary
- Confirm debtor existence, delivery, and underlying receivable validity
- Implement customer-network velocity monitoring across agents
- Conduct a documented risk-based PEP reassessment
- Check whether PEP downgrades considered influence and associated parties
- Reconstruct pooled entries and exits to natural-person investors
Explanation
Correct Answers
D:The institution should adjust due diligence using credible evidence of remaining influence. It addresses the live exposure in a former senior politician retains influence over a state-owned enterprise through close associates; corrective action is not a substitute for verifying its operation.
E:Controls should resist automatic removals based only on a departure date. It produces control-performance evidence about a former senior politician retains influence over a state-owned enterprise through close associates; a documented plan alone would not prove operation.
Incorrect Answers
A:Compared with the stated facts about a former senior politician retains influence over a state-owned enterprise through…, end-to-end testing exposes settlement diversion that transaction volume metrics would miss. Even a favorable result for a payment processor onboards merchants whose websites sell one product but settlement refunds go to… would not demonstrate the control works when a former senior politician retains influence over a state-owned enterprise through close associates. For the alternative option of sample merchant payments from purchase to refund beneficiary in this effectiveness test review involving a former senior politician retains influence over a state-owned enterprise through close…, a two-part remediation plan for a former senior politician retains influence over a state-owned enterprise through… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
B:This is not the central mechanism when a former senior politician retains influence over a state-owned enterprise through…; independent evidence of the commercial obligation distinguishes genuine financing from fabricated paper. It seeks evidence about a factoring company finances invoices issued to counterparties with no verified trading history; the allegation under review instead involves a former senior politician retains influence over a state-owned enterprise through close associates. For the alternative option of confirm debtor existence, delivery, and underlying receivable validity in this effectiveness test review involving a former senior politician retains influence over a state-owned enterprise through close…, a two-part remediation plan for a former senior politician retains influence over a state-owned enterprise through… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
C:When testing the contrasting pattern of a former senior politician retains influence over a state-owned enterprise through…, remember that controls must aggregate activity instead of assessing each transfer in isolation. This safeguard targets a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions; it does not directly remediate the process failure in a former senior politician retains influence over a state-owned enterprise through close associates. For the alternative option of implement customer-network velocity monitoring across agents in this effectiveness test review involving a former senior politician retains influence over a state-owned enterprise through close…, a two-part remediation plan for a former senior politician retains influence over a state-owned enterprise through… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
F:The relevant alternative mechanism is different from a former senior politician retains influence over a state-owned enterprise through…: The review tests whether the fund can trace who provided and received value. Even a favorable result for a pooled investment vehicle permits rapid subscriptions and redemptions through several offshore… would not demonstrate the control works when a former senior politician retains influence over a state-owned enterprise through close associates. For the alternative option of reconstruct pooled entries and exits to natural-person investors in this effectiveness test review involving a former senior politician retains influence over a state-owned enterprise through close…, a two-part remediation plan for a former senior politician retains influence over a state-owned enterprise through… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
Question 742
A remediation is marked complete for this case: A risk team updates KYC at account opening but not after a complex customer changes ownership. Which operational test would best challenge that claim?
- Test ownership events against refresh completion and risk rerating
- Audit introduced relationships for required owner information and verification
- Sample mule referrals for consistent risk reassessment and action
- Seed new-PEP events and inspect alerts plus escalation records
Explanation
Correct Answer
A:The measure detects stale profiles that could mask altered control. Success on this scenario would be relevant to the original failure, whereas a corporate client uses a trusted introducer but the bank has not verified its actual… tests a different exposure.
Incorrect Answers
B:Assurance checks that the bank has not relied blindly on intermediaries; the observed record here instead involves a risk team updates KYC at account opening but not after a complex customer changes…. The sample would be probative if a corporate client uses a trusted introducer but the bank has not verified its actual controlling…; a different population and test are needed for a risk team updates KYC at account opening but not after a complex customer changes ownership.
C:Against the reported situation in which a risk team updates KYC at account opening but not after a complex customer changes…, testing checks whether relevant fraud intelligence drives AFC review. The test exercises an adjacent pathway, a fraud team sees mule-account patterns that the AML team never incorporates into customer risk…, without directly challenging a risk team updates KYC at account opening but not after a complex customer changes ownership.
D:The relevant alternative mechanism is different from a risk team updates KYC at account opening but not after a complex customer changes…: The test verifies continuing coverage rather than one-time clearance. Even a favorable result for a bank screens PEPs only during initial account opening would not demonstrate the control works when a risk team updates KYC at account opening but not after a complex customer changes ownership.
Question 743
The AFC team needs to demonstrate sustained remediation for the following weakness: A client's brother becomes a senior procurement official and a related company receives government contracts. Which validation is appropriate?
- Validate cross-branch linkage using recorded courier and merchant IDs
- Sample payment-to-delivery chains and unexplained funders
- Test collateral files for independent provenance and valuation proof
- Test event-driven PEP updates against new public appointments
Explanation
Correct Answer
D:A working control will flag materially changed exposure and trigger appropriate review. Operating-effectiveness evidence must reach the specific control gap here; a regional bank sees sudden cash deposits at several branches by couriers working for one… would require a different test.
Incorrect Answers
A:The relevant alternative mechanism is different from a client's brother becomes a senior procurement official and a related company…: Test cases must trigger even when no individual branch exceeds its alert threshold. Testing this would validate controls for a regional bank sees sudden cash deposits at several branches by couriers working for one merchant, not the effectiveness of remediation for a client's brother becomes a senior procurement official and a related company receives government….
B:Compared with the stated facts about a client's brother becomes a senior procurement official and a related company…, the test exposes unsupported funding that a simple invoice check can miss. The sample would be probative if a precious-metals dealer receives repeated third-party deposits without links to purchased bullion; a different population and test are needed for a client's brother becomes a senior procurement official and a related company receives government….
C:This is not the central mechanism when a client's brother becomes a senior procurement official and a related company…; a complete trail should support ownership and explain the scale of the pledged wealth. The test exercises an adjacent pathway, a private-banking client pledges opaque offshore holdings as collateral for unusually large credit…, without directly challenging a client's brother becomes a senior procurement official and a related company receives government….
Question 744
A remediation is marked complete for this case: An automated KYC tool increases a customer's risk score on every adverse-media mention without assessing identity. Which operational test would best challenge that claim?
- Sample common-name alerts for identity precision and documented closures
- Simulate missed feed updates and verify operational escalation
- Seed transliterated list names and evaluate recall plus alert workload
- Audit risk-score changes against genuine event and entity matches
Explanation
Correct Answer
D:Assurance checks automated escalation precision and traceability. The proposed sample exercises the failure seen in an automated KYC tool increases a customer's risk score on every adverse-media mention without assessing…, rather than the separate pathway represented by adverse media software flags a person because another individual with the same common name….
Incorrect Answers
A:When testing the contrasting pattern of an automated KYC tool increases a customer's risk score on every adverse-media…, remember that testing measures whether the system avoids harmful mistaken attribution. This assurance method targets adverse media software flags a person because another individual with the same common name was… rather than the reported process: an automated KYC tool increases a customer's risk score on every adverse-media mention without….
B:Assurance checks whether the institution responds before stale data becomes prolonged exposure; the observed record here instead involves an automated KYC tool increases a customer's risk score on every adverse-media…. Testing this would validate controls for a vendor's watchlist feed stops updating for four days while payment processing continues, not the effectiveness of remediation for an automated KYC tool increases a customer's risk score on every adverse-media mention without….
C:Against the reported situation in which an automated KYC tool increases a customer's risk score on every adverse-media…, the test measures missed matches and false positives rather than alert counts alone. The sample would be probative if a sanctions screening tool uses exact spelling only and misses a listed person whose name has two…; a different population and test are needed for an automated KYC tool increases a customer's risk score on every adverse-media mention without….
Question 745
Independent assurance must evaluate an issue originally found as follows: A nonprofit fundraiser channels emergency donations through an opaque crowdfunding account and instant withdrawals. What validation would most directly test effectiveness?
- Reconcile pooled balances to identifiable client-level subledgers
- Test revenue exceptions against independent tax and bank records
- Trace sample campaigns from donations to verified disbursements
- Sample nominee-led transactions for documented instruction sources
- Sample escrow ledgers against underlying client contracts and settlements
- Test related-entity flows against declared tax and trading activity
Explanation
Correct Answer
C:The test detects diversions hidden behind persuasive appeals and platform summaries. This test provides observable evidence about the affected process; a test focused on a bookkeeping firm pools client receipts in its own account and remits them without… would not establish the same result.
Incorrect Answers
A:Against the reported situation in which a nonprofit fundraiser channels emergency donations through an opaque crowdfunding…, tests assess whether every movement can be traced to a legitimate account owner. Testing this would validate controls for a bookkeeping firm pools client receipts in its own account and remits them without customer-level…, not the effectiveness of remediation for a nonprofit fundraiser channels emergency donations through an opaque crowdfunding account and….
B:The relevant alternative mechanism is different from a nonprofit fundraiser channels emergency donations through an opaque crowdfunding…: Effective validation detects fabricated turnover despite professionally prepared statements. The sample would be probative if an accountant certifies revenue for a client despite bank receipts that sharply diverge from tax…; a different population and test are needed for a nonprofit fundraiser channels emergency donations through an opaque crowdfunding account and….
D:This is not the central mechanism when a nonprofit fundraiser channels emergency donations through an opaque crowdfunding…; assurance confirms whether hidden controllers are surfaced for risk assessment. Even a favorable result for a nominee director signs transactions on instruction from an undisclosed offshore client would not demonstrate the control works when a nonprofit fundraiser channels emergency donations through an opaque crowdfunding account and….
E:When testing the contrasting pattern of a nonprofit fundraiser channels emergency donations through an opaque crowdfunding…, remember that end-to-end evidence establishes whether the professional account channels unsupported payments. This assurance method targets a notary receives large third-party escrow deposits with no connection to the declared asset… rather than the reported process: a nonprofit fundraiser channels emergency donations through an opaque crowdfunding account and….
F:Reconciliation exposes entities that cannot support their transactions commercially; the observed record here instead involves a nonprofit fundraiser channels emergency donations through an opaque crowdfunding…. Testing this would validate controls for a tax adviser creates repeated artificial loss-making entities whose transfers fund personal luxury…, not the effectiveness of remediation for a nonprofit fundraiser channels emergency donations through an opaque crowdfunding account and….
Question 746
For this identified exposure, a relationship manager changes customer occupation data after repeated alerts without an audit trail. Choose TWO complementary steps: one targeted safeguard and one test of its operation.
- Escalate the employee referral under the internal suspicious-activity process
- Review originator links, transaction timing, and customer explanation
- Test sensitive profile changes for provenance and dual authorization
- Restrict material profile edits and require independent review
- Reperform closed cases to test whether rationales support conclusions
- Trace case-to-filing dates against documented legal triggers
Explanation
Correct Answers
C:Assurance should uncover silent rewrites of monitoring inputs. It produces control-performance evidence about a relationship manager changes customer occupation data after repeated alerts without an audit trail; a documented plan alone would not prove operation.
D:Segregation and audit trails help prevent business staff from concealing anomalies. It addresses the live exposure in a relationship manager changes customer occupation data after repeated alerts without an audit trail; corrective action is not a substitute for verifying its operation.
Incorrect Answers
A:Compared with the stated facts about a relationship manager changes customer occupation data after repeated alerts without…, a timely, confidential investigation should decide whether a report is warranted. This safeguard targets an employee reports a customer attempting to suppress questions about repeated third-party cash…; it does not directly remediate the process failure in a relationship manager changes customer occupation data after repeated alerts without an audit trail. For the alternative option of escalate the employee referral under the internal suspicious-activity process in this effectiveness test review involving a relationship manager changes customer occupation data after repeated alerts without an audit…, a two-part remediation plan for a relationship manager changes customer occupation data after repeated alerts… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
B:This is not the central mechanism when a relationship manager changes customer occupation data after repeated alerts without…; context determines whether the flow has a legitimate purpose or warrants escalation. The inquiry is suited to a retail customer receives a series of unrelated inbound transfers and sends almost all funds…; the requested evidence must instead address a relationship manager changes customer occupation data after repeated alerts without an audit trail. For the alternative option of review originator links, transaction timing, and customer explanation in this effectiveness test review involving a relationship manager changes customer occupation data after repeated alerts without an audit…, a two-part remediation plan for a relationship manager changes customer occupation data after repeated alerts… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
E:Against the reported situation in which a relationship manager changes customer occupation data after repeated alerts without…, assurance checks reasoning quality instead of simple case completion rates. This assurance method targets an investigator closes a case as not suspicious without recording why multiple cash transfers were… rather than the reported process: a relationship manager changes customer occupation data after repeated alerts without an audit trail. For the alternative option of reperform closed cases to test whether rationales support conclusions in this effectiveness test review involving a relationship manager changes customer occupation data after repeated alerts without an audit…, a two-part remediation plan for a relationship manager changes customer occupation data after repeated alerts… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
F:The relevant alternative mechanism is different from a relationship manager changes customer occupation data after repeated alerts without…: Testing identifies delayed reports and weak deadline governance. Testing this would validate controls for a transaction monitoring alert is escalated after the legal deadline because investigators dispute…, not the effectiveness of remediation for a relationship manager changes customer occupation data after repeated alerts without an audit trail. For the alternative option of trace case-to-filing dates against documented legal triggers in this effectiveness test review involving a relationship manager changes customer occupation data after repeated alerts without an audit…, a two-part remediation plan for a relationship manager changes customer occupation data after repeated alerts… needs an issue-specific safeguard and proof that it operates, not this unrelated step.
Question 747
A firm wants measurable assurance for this identified exposure: A charity receives small lawful donations and a trustee secretly diverts the proceeds to a prohibited militant network. Which evaluation should be conducted?
- Sample alert-to-filing timelines and overdue-case exceptions
- Sample grants through recipient verification and payment tracing
- Test whether linked accounts and wage anomalies reach investigators
- Measure sector-specific alert outcomes and intelligence referrals
Explanation
Correct Answer
B:End-use tests show whether diverted funds and suspicious counterparties would be detected. The assessment probes the affected transactions and decisions, not just an adjacent risk such as a suspicious-activity backlog grows until analysts miss required reporting deadlines.
Incorrect Answers
A:This is not the central mechanism when a charity receives small lawful donations and a trustee secretly diverts the proceeds…; elapsed-time testing establishes whether deadlines are consistently met and breaches are escalated. This assurance method targets a suspicious-activity backlog grows until analysts miss required reporting deadlines rather than the reported process: a charity receives small lawful donations and a trustee secretly diverts the proceeds to a….
C:An effective control should identify related employers, beneficiaries, and implausible payroll patterns; the observed record here instead involves a charity receives small lawful donations and a trustee secretly diverts the proceeds…. The sample would be probative if an account receives payments from employers implicated in withholding migrant workers' wages and…; a different population and test are needed for a charity receives small lawful donations and a trustee secretly diverts the proceeds to a….
D:Against the reported situation in which a charity receives small lawful donations and a trustee secretly diverts the proceeds…, a targeted effectiveness measure tracks whether the identified criminal pattern is actually surfaced. The test exercises an adjacent pathway, an illicit trade network infiltrates local payment channels and distorts competition with…, without directly challenging a charity receives small lawful donations and a trustee secretly diverts the proceeds to a….
Question 748
A firm wants measurable assurance for this identified exposure: Two supervisors request overlapping transaction samples from a cross-border banking group with inconsistent definitions. Which evaluation should be conducted?
- Audit the national-assessment mapping to material business activities
- Sample high-impact screening configurations against primary sources
- Compare final submissions for reconciliation and authorization evidence
- Challenge risk ratings against sector-level evidence and portfolio reality
Explanation
Correct Answer
C:Assurance should find consistent data definitions without unauthorized cross-border transfers. This test provides observable evidence about the affected process; a test focused on a bank ignores a national proliferation-financing threat assessment because it has little… would not establish the same result.
Incorrect Answers
A:This is not the central mechanism when two supervisors request overlapping transaction samples from a cross-border banking…; the test confirms that threats were considered, even where some were discounted with evidence. Testing this would validate controls for a bank ignores a national proliferation-financing threat assessment because it has little retail…, not the effectiveness of remediation for two supervisors request overlapping transaction samples from a cross-border banking group with….
B:When testing the contrasting pattern of two supervisors request overlapping transaction samples from a cross-border banking…, remember that assurance verifies that operative restrictions come from authorized legal interpretation. The sample would be probative if a trade team assumes a private sanctions-screening vendor's advisory is binding legal interpretation; a different population and test are needed for two supervisors request overlapping transaction samples from a cross-border banking group with….
D:Against the reported situation in which two supervisors request overlapping transaction samples from a cross-border banking…, testing shows whether the assessment differentiates exposed and unrelated products. Even a favorable result for a bank scores a low-risk domestic payment product using a national threat assessment for an… would not demonstrate the control works when two supervisors request overlapping transaction samples from a cross-border banking group with….
Question 749
Independent assurance must evaluate an issue originally found as follows: A newly appointed foreign minister wants accounts funded by an offshore trust with unexplained wealth. What validation would most directly test effectiveness?
- Validate cross-branch linkage using recorded courier and merchant IDs
- Test that prohibited end-use scenarios trigger specialist holds
- Sample respondent payments for originator and beneficiary visibility
- Review approval files and wealth corroboration for new foreign PEPs
Explanation
Correct Answer
D:Testing should confirm decision-makers received meaningful risk evidence before onboarding. This test provides observable evidence about the affected process; a test focused on a regional bank sees sudden cash deposits at several branches by couriers working for one… would not establish the same result.
Incorrect Answers
A:Against the reported situation in which a newly appointed foreign minister wants accounts funded by an offshore trust with…, test cases must trigger even when no individual branch exceeds its alert threshold. The test exercises an adjacent pathway, a regional bank sees sudden cash deposits at several branches by couriers working for one merchant, without directly challenging a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained….
B:The relevant alternative mechanism is different from a newly appointed foreign minister wants accounts funded by an offshore trust with…: The control should respond to product and beneficiary red flags even without list-name matches. Even a favorable result for a licensed firearms wholesaler ships dual-use components to newly created intermediaries with… would not demonstrate the control works when a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained….
C:Compared with the stated facts about a newly appointed foreign minister wants accounts funded by an offshore trust with…, an effectiveness test confirms whether downstream activity can be identified and escalated. This assurance method targets a bank opens a payable-through correspondent arrangement but cannot identify the foreign bank's… rather than the reported process: a newly appointed foreign minister wants accounts funded by an offshore trust with unexplained….
Question 750
A risk committee asks for operating-effectiveness evidence regarding the following: A customer buys a large life policy using a third party and requests early surrender despite steep penalties. What would provide the strongest proof?
- Sample withdrawals for verified beneficiary and funder consistency
- Reconcile token burns with verified fiat redemptions and approved payees
- Sample merchant payments from purchase to refund beneficiary
- Sample policies for premium-origin and payout-recipient consistency
Explanation
Correct Answer
D:Testing addresses the laundering channel created by rapid encashment and unrelated funders. Operating-effectiveness evidence must reach the specific control gap here; an online betting account is funded by several payment cards and withdraws winnings to a… would require a different test.
Incorrect Answers
A:Testing should detect name mismatches even where account winnings appear plausible; the observed record here instead involves a customer buys a large life policy using a third party and requests early surrender…. Testing this would validate controls for an online betting account is funded by several payment cards and withdraws winnings to a different…, not the effectiveness of remediation for a customer buys a large life policy using a third party and requests early surrender despite steep….
B:Against the reported situation in which a customer buys a large life policy using a third party and requests early surrender…, testing links on-chain events with actual fund recipients and settlement evidence. The sample would be probative if a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak…; a different population and test are needed for a customer buys a large life policy using a third party and requests early surrender despite steep….
C:The relevant alternative mechanism is different from a customer buys a large life policy using a third party and requests early surrender…: End-to-end testing exposes settlement diversion that transaction volume metrics would miss. The test exercises an adjacent pathway, a payment processor onboards merchants whose websites sell one product but settlement refunds go to…, without directly challenging a customer buys a large life policy using a third party and requests early surrender despite steep….