Question 170
Independent testing has confirmed understated residual risk due to open deficiencies. Management agrees that restating the existing policy will not resolve the process breakdown. Which corrective measure most directly closes this gap?
- Validate screening performance before applying mitigation credit
- Score exposure before controls, then separately evaluate control effectiveness
- Assess each relevant threat separately and reconcile shared controls
- Use transparent ownership, geography, delivery channel, and activity inputs
- Reassess control effectiveness and reflect material unresolved issues
Explanation
Correct Answer
E:This responds to the identified weakness, understated residual risk due to open deficiencies, at the point where the process breaks down. Assigning the change to enterprise risk reporting and second-line challenge function and testing updated residual-risk analysis linked to issue severity makes remediation verifiable rather than aspirational.
Incorrect Answers
A:Given the contrast between unsupported control-effectiveness assumption and understated residual risk due to open deficiencies as the distinguishing point, this intervention solves a different weakness, namely unsupported control-effectiveness assumption. It leaves the current understated residual risk due to open deficiencies substantially unresolved because the broken process here requires reassess control effectiveness and reflect material unresolved issues.
B:The proposed step is appropriate when conflating inherent risk with residual risk is observed. The case instead concerns understated residual risk due to open deficiencies; the alternative would not repair the particular failing in time or at the correct control point.
C:With the contrast between narrowly scoped enterprise financial-crime risk inventory and understated residual risk due to open deficiencies in view, this approach is usually evidenced by integrated AFC taxonomy and documented coverage map, addressing narrowly scoped enterprise financial-crime risk inventory. It is not a substitute for the targeted corrective action needed to resolve understated residual risk due to open deficiencies in this workflow.
D:The alternative may improve a different part of AFC governance, but it primarily tackles customer risk assessment that ignores material exposure drivers. The actual defect, understated residual risk due to open deficiencies, requires a different control intervention.
Question 171
Control mapping has identified fabricated trade flows without physical goods movement as a vulnerability associated with phantom shipments used to justify funds transfers. The design must be proportionate and leave an audit trail. Which safeguard is the strongest match to the particular risk?
- Independent inspection for material trade discrepancies
- Trade-price reasonableness review for abnormal shipments
- Beneficiary and commercial-purpose review of intermediaries
- Document-to-physical-delivery verification in trade finance
Explanation
Correct Answer
D:This directly reduces the chance of fabricated trade flows without physical goods movement by placing a relevant check in the affected process. In assessing the exposure to fabricated trade flows without physical goods movement, its effectiveness should be measured against real exceptions, without assuming that a risk indicator proves criminal conduct.
Incorrect Answers
A:That safeguard is appropriate for a setting where the exposure is hidden value transfers through false goods descriptions. This scenario instead exposes fabricated trade flows without physical goods movement; a control operating on the other mechanism would not be the most proportionate response.
B:With the distinction between exposure to value transfer through unjustified import or export prices and exposure to fabricated trade flows without physical goods movement in view, this control addresses value transfer through unjustified import or export prices, a different vulnerability. The current exposure is fabricated trade flows without physical goods movement; installing the alternative without a tailored check would leave the key failure path substantially open.
C:When examining the distinction between exposure to fees paid to shell intermediaries without real function and exposure to fabricated trade flows without physical goods movement, the measure is more suited to limiting fees paid to shell intermediaries without real function. It does not directly test or prevent fabricated trade flows without physical goods movement in the described customer or transaction process, even if it might help elsewhere in the AFC program.
Question 172
Accountability for work to reassess control effectiveness and reflect material unresolved issues is disputed following a finding of understated residual risk due to open deficiencies. The owner must have control over execution. Where should primary ownership for resolving the weakness sit?
- Enterprise financial-crime risk assessment team
- Enterprise risk reporting and second-line challenge function
- Enterprise multi-risk assessment coordinator
- New-product AFC risk assessment owner
Explanation
Correct Answer
B:When examining the need to reassess control effectiveness and reflect material unresolved issues, primary accountability belongs with the function able to execute the described process repair. Here that means ensuring the responsible team can reassess control effectiveness and reflect material unresolved issues, with the result demonstrated by updated residual-risk analysis linked to issue severity and challenged by appropriate assurance functions.
Incorrect Answers
A:That group is suited to producing inherent-risk, control-effectiveness, and residual-risk worksheets for another control issue. In the present case ownership must support measures to reassess control effectiveness and reflect material unresolved issues and closure of understated residual risk due to open deficiencies, not an unrelated assurance task.
C:This function has a remit connected with the duty to assess each relevant threat separately and reconcile shared controls, and the associated problem is narrowly scoped enterprise financial-crime risk inventory. The current repair requires the responsible team to reassess control effectiveness and reflect material unresolved issues, so it should not be allocated to a team without direct control over that work.
D:In assessing the contrast between failure to consider frequency, impact, and control vulnerabilities and understated residual risk due to open deficiencies, its normal responsibility would be addressing failure to consider frequency, impact, and control vulnerabilities. It may advise or review here, but the accountable execution of measures to reassess control effectiveness and reflect material unresolved issues belongs in the process identified by this case.
Question 173
A governance decision is needed for a task to use official UN counter-terrorism material while checking national implementing duties. The correct body must have the mandate to perform or oversee that task. Who should be responsible for performing the designated regulatory or governance role?
- National sanctions competent authority implementing UN designations
- UN counter-terrorism bodies in their relevant mandates
- National sanctions and export-control enforcement authority
- National competent authority governing company transparency
Explanation
Correct Answer
B:The requested task is linked to the obligation to use official UN counter-terrorism material while checking national implementing duties, which falls within this function's described remit. In assessing the compliance duty to use official UN counter-terrorism material while checking national implementing duties, the responsibility is not interchangeable with external standards setters, private advisers, or unrelated enforcement functions.
Incorrect Answers
A:That organization may contribute relevant information but primarily handles apply applicable asset-freeze and non-availability restrictions through domestic law. It cannot replace the proper lead for use official UN counter-terrorism material while checking national implementing duties and its associated review record.
C:Its proper remit concerns UN proliferation-related sanctions obligations and implementation of check applicable designations, prohibitions, and the end user before processing. It could supply input, but the named task is owned by the body or team responsible for use official UN counter-terrorism material while checking national implementing duties.
D:With the separate duty to improve access to adequate, accurate, up-to-date ownership evidence as opposed to the current duty to use official UN counter-terrorism material while checking national implementing duties in view, the alternative is associated with beneficial ownership data quality and verification plan for another kind of obligation. It is not the authority chiefly accountable for use official UN counter-terrorism material while checking national implementing duties in the circumstances described.
Question 174
An implementation team needs to pilot targeted risk-based questions and measure their control value after identifying unvalidated friction from uniform extra screening. The team is reviewing the source attributes and data lineage on which the remedy depends. Which source or attribute is essential to correct performance?
- Risk tier and completion-stage telemetry
- Customer risk segmentation and answer usefulness data
- Reliable external corporate appointment events
- False rejection rates across relevant customer groups
Explanation
Correct Answer
B:In assessing the technical failure of unvalidated friction from uniform extra screening, the data dependency must be traceable to the source and the corrected processing step. Control owners need to test its accuracy and availability before judging pilot targeted risk-based questions and measure their control value effective.
Incorrect Answers
A:Given the difference between excessive customer friction unrelated to risk and unvalidated friction from uniform extra screening as the distinguishing point, these attributes help evaluate compare abandonment and identity-fraud rates by risk tier in another workflow. The present failure involves unvalidated friction from uniform extra screening, making customer risk segmentation and answer usefulness data the more direct dependency to verify.
C:That information underpins trigger reassessment from significant customer-role changes when the problem is missing event-driven KYC refresh. The case instead depends on customer risk segmentation and answer usefulness data, which is necessary to correct the stated failure and make the output auditable.
D:When examining the difference between biometric friction and unequal error impact and unvalidated friction from uniform extra screening, the alternative dataset is relevant to biometric friction and unequal error impact. It would not provide the key input required for pilot targeted risk-based questions and measure their control value in this case, so apparent model performance could still be misleading.
Question 175
An exporter draws two loans against different copies of a single bill of lading, with each bank unaware of the other. Which distinct threat pattern is most consistent with the observed facts?
- Duplicate financing of one shipment
- Layering through circular trade intermediaries
- Trade misdescription masking value movement
- Trade-based laundering through price manipulation
Explanation
Correct Answer
A:The key issue is the unresolved relationship, which requires establishing whether the underlying shipping document has been financed before. That inquiry is consistent with the indicated financial-crime pattern and matters because it can expose multiple disbursements against the same trade collateral; an assessment should document evidence both for and against suspicion.
Incorrect Answers
B:The alternative addresses activity that might produce fees paid to shell intermediaries without real function and would require evidence about whether each intermediary supplied an economic service. Those are not the facts that drive this scenario, whose defining task is to establish whether the underlying shipping document has been financed before.
C:When examining the distinction between exposure to hidden value transfers through false goods descriptions and exposure to multiple disbursements against the same trade collateral, that interpretation is associated with a different situation where investigators must establish whether shipped material matches the described grade. It would direct attention toward hidden value transfers through false goods descriptions, whereas this case principally calls for establishing whether the underlying shipping document has been financed before; the signals should not be treated as interchangeable.
D:This typology would be worth testing when the issue is establishing whether invoiced values match comparable market values, leading to exposure from value transfer through unjustified import or export prices. The present facts instead call for establishing whether the underlying shipping document has been financed before, so choosing it would send the investigation toward a different mechanism.
Question 176
Before closing an audit finding of understated residual risk due to open deficiencies, the assurance team needs evidence that measures to reassess control effectiveness and reflect material unresolved issues were actually executed. Which record best demonstrates execution rather than merely policy intent?
- Updated residual-risk analysis linked to issue severity
- End-to-end sanctions test cases and gap ratings
- Inherent-risk, control-effectiveness, and residual-risk worksheets
- Integrated AFC taxonomy and documented coverage map
Explanation
Correct Answer
A:With the deficiency of understated residual risk due to open deficiencies in view, this is the strongest proof of operating effectiveness because it records the relevant control action. It provides a check on the response to understated residual risk due to open deficiencies, not just management's stated intention.
Incorrect Answers
B:When examining the contrast between incomplete sanctions control effectiveness assessment and understated residual risk due to open deficiencies, the artifact tests a different process led by sanctions risk assessment and control assurance team. It does not adequately demonstrate that understated residual risk due to open deficiencies is now controlled, even if it could support wider AFC assurance.
C:This record would help assess whether steps to score exposure before controls, then separately evaluate control effectiveness worked in a different scenario. The current test needs to establish whether measures to reassess control effectiveness and reflect material unresolved issues corrected understated residual risk due to open deficiencies; the suggested artifact cannot show that directly.
D:The proposed evidence corresponds to oversight of narrowly scoped enterprise financial-crime risk inventory. It would leave the actual remediation, reassess control effectiveness and reflect material unresolved issues, without a clear operational test in this case.
Question 177
A formal report says the organization complies with UN Counter-Terrorism Committee support and assessment functions by taking steps to use official UN counter-terrorism material while checking national implementing duties. The reviewer will accept only traceable proof of what occurred. What evidence should be available to demonstrate operational compliance?
- Consignee screening and end-use assessment record
- Domestic sanctions instrument and effective-date mapping
- Country-specific regulatory calendar and STR procedures
- Official UN assessment and implementation publications
- Sanctions match disposition and documented asset-freeze action
Explanation
Correct Answer
D:With the compliance duty to use official UN counter-terrorism material while checking national implementing duties in view, an audit trail has to tie the recorded outcome to the relevant legal or governance requirement. It allows supervisors or auditors to assess whether the required team acted to use official UN counter-terrorism material while checking national implementing duties under UN counter-terrorism bodies in their relevant mandates.
Incorrect Answers
A:When examining the separate duty to check applicable designations, prohibitions, and the end user before processing as opposed to the current duty to use official UN counter-terrorism material while checking national implementing duties, that artifact shows activity in the remit of national sanctions and export-control enforcement authority, not the performance of the required step. Given the separate duty to check applicable designations, prohibitions, and the end user before processing as opposed to the current duty to use official UN counter-terrorism material while checking national implementing duties as the distinguishing point, it would be an indirect reference rather than defensible proof that the necessary work to use official UN counter-terrorism material while checking national implementing duties happened.
B:Given the separate duty to identify the domestic legal measures giving effect to relevant UN obligations as opposed to the current duty to use official UN counter-terrorism material while checking national implementing duties as the distinguishing point, such evidence is useful when checking whether identify the domestic legal measures giving effect to relevant UN obligations occurred. The scenario instead requires proof that the responsible team acted to use official UN counter-terrorism material while checking national implementing duties, so the proposed artifact would not show the relevant control or decision.
C:This documentation is linked to jurisdiction-specific reporting duties and work performed by locally designated AML reporting authority. It does not directly demonstrate the implementation of the obligation to use official UN counter-terrorism material while checking national implementing duties in this case.
E:That artifact shows activity in the remit of national sanctions competent authority implementing UN designations, not the performance of the required step. Given the separate duty to apply applicable asset-freeze and non-availability restrictions through domestic law as opposed to the current duty to use official UN counter-terrorism material while checking national implementing duties as the distinguishing point, it would be an indirect reference rather than defensible proof that the necessary work to use official UN counter-terrorism material while checking national implementing duties happened.
Question 178
Operations are comparing pre- and post-fix outcomes after adopting a measure to pilot targeted risk-based questions and measure their control value. The deficiency being repaired was unvalidated friction from uniform extra screening. Which outcome test would most directly detect a recurrence of the defect?
- Measure risk reduction versus completion-time impact
- Measure overdue refresh rates weighted by risk severity
- Measure mismatches before and after identity normalization
- Compare abandonment and identity-fraud rates by risk tier
Explanation
Correct Answer
A:Given the technical failure of unvalidated friction from uniform extra screening as the distinguishing point, the proposed validation directly challenges the weakness, not an unrelated performance statistic. It can reveal whether pilot targeted risk-based questions and measure their control value works on the relevant data and exceptions before broader deployment.
Incorrect Answers
B:This would be useful when implementing schedule review intensity based on risk and material events, but the key failure here is unvalidated friction from uniform extra screening. With the difference between poor refresh prioritization by risk and unvalidated friction from uniform extra screening in view, it may pass even if the present defect persists, so it is not the most probative test.
C:This check would reveal failures like inconsistent identity attribute normalization, not whether pilot targeted risk-based questions and measure their control value corrects the problem in this case. The relevant validation must challenge unvalidated friction from uniform extra screening using customer risk segmentation and answer usefulness data.
D:The alternative is tailored to apply proportionate verification pathways with documented exceptions and its separate data requirement. It would not provide decisive evidence that the remedy in this scenario eliminates unvalidated friction from uniform extra screening.
Question 179
An evidence review concerning duplicate financing of one shipment finds the file does not establish whether the underlying shipping document has been financed before. The investigator wants a record that can be checked independently. What documentation offers the most direct corroboration?
- Document identifiers verified across financing records
- Independent commodity inspection and packing lists
- Buyer contracts and third-party payer authorization
- Independent unit-price benchmarks and commercial invoices
Explanation
Correct Answer
A:This material provides a practical way to establish whether the underlying shipping document has been financed before. With the need to establish whether the underlying shipping document has been financed before in view, its value is in linking the customer's asserted purpose to observed facts, so investigators can articulate a reasoned conclusion.
Incorrect Answers
B:With the distinction between establishing whether shipped material matches the described grade and establishing whether the underlying shipping document has been financed before in view, the document helps with investigations focused on whether shipped material matches the described grade. In this case the evidential gap lies with whether the underlying shipping document has been financed before, so the reviewer needs a more targeted source before reaching a conclusion.
C:When examining the distinction between establishing why a nonparty funded the shipment and establishing whether the underlying shipping document has been financed before, such records could help establish why a nonparty funded the shipment in a different investigation. Here the precise evidential question involves establishing whether the underlying shipping document has been financed before, so the suggested material would be indirect and may not resolve the decisive uncertainty.
D:The proposed source is most informative for a question about whether invoiced values match comparable market values. The current case calls for establishing whether the underlying shipping document has been financed before; using this instead could leave the customer explanation largely untested.
Question 180
A firm applies intensive identity interviews to every low-risk customer while exempting a complex high-risk trust from added scrutiny. What is the principal control-design or governance failure?
- Poor business-specific risk identification
- Misallocation of diligence under a risk-based approach
- Misinterpretation of proportional controls as no controls
- Failure to tailor controls to product and geographic risk
Explanation
Correct Answer
B:When examining the need to match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted, this weakness explains how the observed business process failed to control the risk. Addressing it calls for steps to match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted and evidence beyond management's assurance that a policy exists.
Incorrect Answers
A:The alternative diagnosis describes an issue corrected through steps to assess agent networks, destinations, volumes, and product vulnerabilities. The scenario instead points to a failure requiring the team to match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted; confusing the two would send corrective effort to the wrong workflow.
C:That deficiency is typically owned by second-line customer due diligence standards team and rectified through measures to retain mandatory baseline CDD while simplifying appropriate lower-risk steps. This case calls for steps to match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted, meaning the alternative misses the central governance or process gap.
D:In assessing the contrast between failure to tailor controls to product and geographic risk and misallocation of diligence under a risk-based approach, this weakness would appear in a process requiring staff to design corridor-specific monitoring and onboarding requirements. It is not the defining break in the present case, where the remediation must be designed to match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted to address the observed behavior.