Question 160
Senior oversight asks who should be responsible for addressing poor business-specific risk identification. The approved change is to assess agent networks, destinations, volumes, and product vulnerabilities, not merely issue advisory opinions. Which function should be assigned responsibility for this control repair?
- Enterprise financial-crime risk assessment team
- Sanctions risk assessment and control assurance team
- Sanctions control validation and risk-assessment owners
- Customer risk-scoring methodology lead
- Business-unit risk assessment owner
Explanation
Correct Answer
E:With the need to assess agent networks, destinations, volumes, and product vulnerabilities in view, primary accountability belongs with the function able to execute the described process repair. Here that means ensuring the responsible team can assess agent networks, destinations, volumes, and product vulnerabilities, with the result demonstrated by agent and corridor data supporting recalculated exposure and challenged by appropriate assurance functions.
Incorrect Answers
A:With the contrast between conflating inherent risk with residual risk and poor business-specific risk identification in view, the alternative's control domain is conflating inherent risk with residual risk, generally corrected through steps to score exposure before controls, then separately evaluate control effectiveness. Here the relevant weakness is poor business-specific risk identification, requiring a different remediation ownership and workplan.
B:When examining the contrast between incomplete sanctions control effectiveness assessment and poor business-specific risk identification, this function has a remit connected with the duty to evaluate end-to-end screening, disposition, and list governance, and the associated problem is incomplete sanctions control effectiveness assessment. The current repair requires the responsible team to assess agent networks, destinations, volumes, and product vulnerabilities, so it should not be allocated to a team without direct control over that work.
C:Its normal responsibility would be addressing unsupported control-effectiveness assumption. It may advise or review here, but the accountable execution of measures to assess agent networks, destinations, volumes, and product vulnerabilities belongs in the process identified by this case.
D:In assessing the contrast between customer risk assessment that ignores material exposure drivers and poor business-specific risk identification, that group is suited to producing validated customer risk-factor configuration and examples for another control issue. In the present case ownership must support measures to assess agent networks, destinations, volumes, and product vulnerabilities and closure of poor business-specific risk identification, not an unrelated assurance task.
Question 161
After a thematic review of trade-based laundering through price manipulation, the compliance committee prioritizes reducing value transfer through unjustified import or export prices. The control should work at the relevant entry point. What targeted measure should reduce the identified vulnerability?
- Trade-price reasonableness review for abnormal shipments
- Duplicate-document screening and interbank checks
- Beneficiary and commercial-purpose review of intermediaries
- Document-to-physical-delivery verification in trade finance
Explanation
Correct Answer
A:This directly reduces the chance of value transfer through unjustified import or export prices by placing a relevant check in the affected process. Given the exposure to value transfer through unjustified import or export prices as the distinguishing point, its effectiveness should be measured against real exceptions, without assuming that a risk indicator proves criminal conduct.
Incorrect Answers
B:That safeguard is appropriate for a setting where the exposure is multiple disbursements against the same trade collateral. This scenario instead exposes value transfer through unjustified import or export prices; a control operating on the other mechanism would not be the most proportionate response.
C:This control addresses fees paid to shell intermediaries without real function, a different vulnerability. The current exposure is value transfer through unjustified import or export prices; installing the alternative without a tailored check would leave the key failure path substantially open.
D:The measure is more suited to limiting fabricated trade flows without physical goods movement. It does not directly test or prevent value transfer through unjustified import or export prices in the described customer or transaction process, even if it might help elsewhere in the AFC program.
Question 162
Management says that poor business-specific risk identification has been addressed through work to assess agent networks, destinations, volumes, and product vulnerabilities. The reviewer must independently verify how the revised control performed. What artifact would an independent reviewer need to test operating effectiveness?
- Independent test results and approved effectiveness scoring
- Product risk scoring and scenario analysis records
- Validated customer risk-factor configuration and examples
- Agent and corridor data supporting recalculated exposure
Explanation
Correct Answer
D:This artifact would show whether assess agent networks, destinations, volumes, and product vulnerabilities was executed and whether poor business-specific risk identification was reduced in practice. Given the deficiency of poor business-specific risk identification as the distinguishing point, A signed policy without operating evidence would be an insufficient effectiveness test.
Incorrect Answers
A:The proposed evidence corresponds to oversight of unsupported control-effectiveness assumption. It would leave the actual remediation, assess agent networks, destinations, volumes, and product vulnerabilities, without a clear operational test in this case.
B:That documentation is meaningful where measures to assess severity and multiple risk pathways for the product are the expected control. The present issue is poor business-specific risk identification, and the reviewer needs records specifically tracing the chosen remedy.
C:The artifact tests a different process led by customer risk-scoring methodology lead. It does not adequately demonstrate that poor business-specific risk identification is now controlled, even if it could support wider AFC assurance.
Question 163
A correspondent asks which institution publishes country reports explaining implementation of UN-related terrorist-financing controls. What source of authority or core principle is most relevant to the described problem?
- UN targeted financial sanctions implementation
- Binding UN Security Council measures implemented by states
- UN Counter-Terrorism Committee support and assessment functions
- FATF suspicious transaction reporting principle
Explanation
Correct Answer
C:The decisive feature is the kind of obligation imposed, which requires the responsible party to use official UN counter-terrorism material while checking national implementing duties. It is distinguished by the responsible function, UN counter-terrorism bodies in their relevant mandates, and by the records used to demonstrate compliance.
Incorrect Answers
A:The alternative governs a different activity: apply applicable asset-freeze and non-availability restrictions through domestic law. Although related to financial-crime compliance, it does not establish the precise duty that UN counter-terrorism bodies in their relevant mandates must perform here.
B:Its main application involves government body responsible for sanctions implementation and an implementation such as identify the domestic legal measures giving effect to relevant UN obligations. The facts in this scenario call for use official UN counter-terrorism material while checking national implementing duties, making that framework secondary rather than controlling.
D:Given the separate duty to mandate prompt reporting of suspicion under domestic requirements as opposed to the current duty to use official UN counter-terrorism material while checking national implementing duties as the distinguishing point, this principle is relevant where the obligation is to mandate prompt reporting of suspicion under domestic requirements, under national competent authority designating reporting obligations. The present case instead requires use official UN counter-terrorism material while checking national implementing duties, so it addresses a different legal or operational question.
Question 164
A bank adds extra screening questions to all customers after one high-risk typology, without testing whether questions reduce detection gaps. Which technical or analytical weakness explains the observed result?
- Unvalidated friction from uniform extra screening
- Uninterpretable pKYC refresh triggers
- Excessive customer friction unrelated to risk
- Biometric friction and unequal error impact
Explanation
Correct Answer
A:With the proposed capability of pilot targeted risk-based questions and measure their control value in view, the observed result points to a failure in the underlying data or control process, rather than necessarily to wrongdoing by a customer. The targeted fix is pilot targeted risk-based questions and measure their control value, relying on customer risk segmentation and answer usefulness data and a check such as measure risk reduction versus completion-time impact.
Incorrect Answers
B:The alternative would explain a setting that needs feature changes, timestamps, and analyst feedback. The present tool's failure is different and should instead be tested through measure risk reduction versus completion-time impact, making this diagnosis less defensible.
C:Given the competing solutions of apply proportionate verification pathways with documented exceptions and pilot targeted risk-based questions and measure their control value as the distinguishing point, that defect is most directly corrected by apply proportionate verification pathways with documented exceptions, whose inputs include risk tier and completion-stage telemetry. Here the observed behavior calls for pilot targeted risk-based questions and measure their control value, so the alternative would misdirect the technical fix.
D:The problem described by this alternative concerns evaluate legitimate-user failures and fraud capture together and a separate analytical failure. It does not capture the central weakness the institution needs to resolve with pilot targeted risk-based questions and measure their control value.
Question 165
An AFC reviewer is assessing 2 distinct situations. Situation 1: The unresolved link is whether goods actually moved between the named parties, and the observed exposure involves fabricated trade flows without physical goods movement. Situation 2: The unresolved link is whether invoiced values match comparable market values, and the observed exposure involves value transfer through unjustified import or export prices. Which interpretations correctly identify the central financial-crime risk in one of these situations? Choose TWO.
- Trade-based laundering through price manipulation
- Phantom shipments used to justify funds transfers
- Layering through circular trade intermediaries
- Trade misdescription masking value movement
Explanation
Correct Answers
A:For situation 2, this characterization follows from the particular flow and relationships described, especially the need to establish whether invoiced values match comparable market values. If substantiated, the resulting vulnerability is value transfer through unjustified import or export prices; investigators should separate the alert from proof of the underlying offense.
B:For situation 1, the key issue is the unresolved relationship, which requires establishing whether goods actually moved between the named parties. That inquiry is consistent with the indicated financial-crime pattern and matters because it can expose fabricated trade flows without physical goods movement; an assessment should document evidence both for and against suspicion.
Incorrect Answers
C:This alternative describes layering through circular trade intermediaries and the exposure to fees paid to shell intermediaries without real function. With the distinction between exposure to fees paid to shell intermediaries without real function and exposure to fabricated trade flows without physical goods movement in view, in the given fact patterns, situation 1 concerns establishing whether goods actually moved between the named parties; situation 2 concerns establishing whether invoiced values match comparable market values. None centers on the alternative's defining mechanism.
D:This alternative describes trade misdescription masking value movement and the exposure to hidden value transfers through false goods descriptions. When examining the distinction between exposure to hidden value transfers through false goods descriptions and exposure to fabricated trade flows without physical goods movement, in the given fact patterns, situation 1 concerns establishing whether goods actually moved between the named parties; situation 2 concerns establishing whether invoiced values match comparable market values. None centers on the alternative's defining mechanism.
Question 166
A board report shows a low residual risk score even though major monitoring defects remain unresolved. Which program weakness is most directly exposed?
- Failure to consider frequency, impact, and control vulnerabilities
- Understated residual risk due to open deficiencies
- Narrowly scoped enterprise financial-crime risk inventory
- Customer risk assessment that ignores material exposure drivers
Explanation
Correct Answer
B:In assessing the need to reassess control effectiveness and reflect material unresolved issues, the breakdown is evident in the facts of the case, not merely in a missing policy label. It requires the team to reassess control effectiveness and reflect material unresolved issues; a review can then use updated residual-risk analysis linked to issue severity to confirm actual execution.
Incorrect Answers
A:This weakness would appear in a process requiring staff to assess severity and multiple risk pathways for the product. It is not the defining break in the present case, where the remediation must be designed to reassess control effectiveness and reflect material unresolved issues to address the observed behavior.
C:With the contrast between narrowly scoped enterprise financial-crime risk inventory and understated residual risk due to open deficiencies in view, the corresponding consequence of this alternative would be evidenced through integrated AFC taxonomy and documented coverage map. The stated control problem has a different operating symptom, addressed by measures to reassess control effectiveness and reflect material unresolved issues.
D:When examining the contrast between customer risk assessment that ignores material exposure drivers and understated residual risk due to open deficiencies, that deficiency is typically owned by customer risk-scoring methodology lead and rectified through measures to use transparent ownership, geography, delivery channel, and activity inputs. This case calls for steps to reassess control effectiveness and reflect material unresolved issues, meaning the alternative misses the central governance or process gap.
Question 167
A compliance implementation note cites UN Counter-Terrorism Committee support and assessment functions but lacks an operational action plan. The responsible function must deliver a traceable response. What should the responsible institution implement to address the described requirement?
- Verify participation requirements and purpose limitations before sharing
- Apply applicable asset-freeze and non-availability restrictions through domestic law
- Check applicable designations, prohibitions, and the end user before processing
- Use official UN counter-terrorism material while checking national implementing duties
Explanation
Correct Answer
D:Given the mandate of UN counter-terrorism bodies in their relevant mandates as the distinguishing point, the described requirement calls for an implementable action, not only a statement of policy. In this situation it addresses the core problem directly, with UN counter-terrorism bodies in their relevant mandates responsible and official UN assessment and implementation publications providing an audit trail.
Incorrect Answers
A:The alternative concerns a different risk overseen by participating institutions under FinCEN 314(b) framework. It would not implement the specific requirement in the case, which requires the responsible party to use official UN counter-terrorism material while checking national implementing duties and an associated record.
B:Its purpose is to address UN targeted financial sanctions implementation; that does not complete the practical duty described. The requested outcome requires use official UN counter-terrorism material while checking national implementing duties, not merely another compliance activity.
C:When examining the separate duty to check applicable designations, prohibitions, and the end user before processing as opposed to the current duty to use official UN counter-terrorism material while checking national implementing duties, this intervention relates to consignee screening and end-use assessment record in a separate regulatory setting. It cannot substitute for use official UN counter-terrorism material while checking national implementing duties here because the scenario involves a different obligation and authority.
Question 168
Diagnostics confirm unvalidated friction from uniform extra screening. The technology owner needs a sustainable corrective capability rather than an ad hoc downstream workaround. Which solution design most directly corrects the defect?
- Verify source freshness and resolve conflicts using authoritative evidence
- Calibrate checks and provide secure alternative verification routes
- Apply proportionate verification pathways with documented exceptions
- Pilot targeted risk-based questions and measure their control value
Explanation
Correct Answer
D:This targets the operational mechanism behind unvalidated friction from uniform extra screening. The institution also needs customer risk segmentation and answer usefulness data and evidence from measure risk reduction versus completion-time impact to avoid a nominal fix that performs poorly in production.
Incorrect Answers
A:This capability addresses stale external ownership data and relies on data publication dates and corporate event history. The current failure is unvalidated friction from uniform extra screening; deploying it would not fix the broken data or decision path described in the case.
B:The alternative is useful for biometric friction and unequal error impact, but it acts on a different technical mechanism. Correcting the stated weakness requires pilot targeted risk-based questions and measure their control value and dependable customer risk segmentation and answer usefulness data.
C:That improvement can be tested through compare abandonment and identity-fraud rates by risk tier, in a setting with excessive customer friction unrelated to risk. Here the relevant acceptance criterion is measure risk reduction versus completion-time impact, so the alternative leaves the principal control gap open.
Question 169
An analyst challenges a working hypothesis of phantom shipments used to justify funds transfers because the file lacks verification of whether goods actually moved between the named parties. Independent source material is needed before disposition. Which source should the analyst check to settle the disputed fact?
- Document identifiers verified across financing records
- Vessel movement and warehouse receipt corroboration
- Buyer contracts and third-party payer authorization
- Independent commodity inspection and packing lists
- Contracts and service evidence for intermediary fees
Explanation
Correct Answer
B:This material provides a practical way to establish whether goods actually moved between the named parties. In assessing the need to establish whether goods actually moved between the named parties, its value is in linking the customer's asserted purpose to observed facts, so investigators can articulate a reasoned conclusion.
Incorrect Answers
A:When examining the distinction between establishing whether the underlying shipping document has been financed before and establishing whether goods actually moved between the named parties, the proposed source is most informative for a question about whether the underlying shipping document has been financed before. Given the distinction between establishing whether the underlying shipping document has been financed before and establishing whether goods actually moved between the named parties as the distinguishing point, the current case calls for establishing whether goods actually moved between the named parties; using this instead could leave the customer explanation largely untested.
C:The document helps with investigations focused on why a nonparty funded the shipment. In this case the evidential gap lies with whether goods actually moved between the named parties, so the reviewer needs a more targeted source before reaching a conclusion.
D:Such records could help establish whether shipped material matches the described grade in a different investigation. Here the precise evidential question involves establishing whether goods actually moved between the named parties, so the suggested material would be indirect and may not resolve the decisive uncertainty.
E:The proposed source is most informative for a question about whether each intermediary supplied an economic service. Given the distinction between establishing whether each intermediary supplied an economic service and establishing whether goods actually moved between the named parties as the distinguishing point, the current case calls for establishing whether goods actually moved between the named parties; using this instead could leave the customer explanation largely untested.
Question 170
Independent testing has confirmed understated residual risk due to open deficiencies. Management agrees that restating the existing policy will not resolve the process breakdown. Which corrective measure most directly closes this gap?
- Validate screening performance before applying mitigation credit
- Score exposure before controls, then separately evaluate control effectiveness
- Assess each relevant threat separately and reconcile shared controls
- Use transparent ownership, geography, delivery channel, and activity inputs
- Reassess control effectiveness and reflect material unresolved issues
Explanation
Correct Answer
E:This responds to the identified weakness, understated residual risk due to open deficiencies, at the point where the process breaks down. Assigning the change to enterprise risk reporting and second-line challenge function and testing updated residual-risk analysis linked to issue severity makes remediation verifiable rather than aspirational.
Incorrect Answers
A:Given the contrast between unsupported control-effectiveness assumption and understated residual risk due to open deficiencies as the distinguishing point, this intervention solves a different weakness, namely unsupported control-effectiveness assumption. It leaves the current understated residual risk due to open deficiencies substantially unresolved because the broken process here requires reassess control effectiveness and reflect material unresolved issues.
B:The proposed step is appropriate when conflating inherent risk with residual risk is observed. The case instead concerns understated residual risk due to open deficiencies; the alternative would not repair the particular failing in time or at the correct control point.
C:With the contrast between narrowly scoped enterprise financial-crime risk inventory and understated residual risk due to open deficiencies in view, this approach is usually evidenced by integrated AFC taxonomy and documented coverage map, addressing narrowly scoped enterprise financial-crime risk inventory. It is not a substitute for the targeted corrective action needed to resolve understated residual risk due to open deficiencies in this workflow.
D:The alternative may improve a different part of AFC governance, but it primarily tackles customer risk assessment that ignores material exposure drivers. The actual defect, understated residual risk due to open deficiencies, requires a different control intervention.