Question 200
Following a finding of failure to tailor controls to product and geographic risk, a committee approves the need to design corridor-specific monitoring and onboarding requirements. Primary remediation responsibility is still unassigned. Which accountable function should lead the documented remediation?
- Second-line customer due diligence standards team
- CDD policy and risk-methodology owners
- Product financial-crime risk owner
- Customer risk-scoring methodology lead
Explanation
Correct Answer
C:The central responsibility is to design corridor-specific monitoring and onboarding requirements and retain evidence of completion, not simply offer second opinions. That aligns with the work needed to resolve failure to tailor controls to product and geographic risk and maintain new-product risk assessment and linked monitoring coverage.
Incorrect Answers
A:This function has a remit connected with the duty to retain mandatory baseline CDD while simplifying appropriate lower-risk steps, and the associated problem is misinterpretation of proportional controls as no controls. The current repair requires the responsible team to design corridor-specific monitoring and onboarding requirements, so it should not be allocated to a team without direct control over that work.
B:Its normal responsibility would be addressing misallocation of diligence under a risk-based approach. It may advise or review here, but the accountable execution of measures to design corridor-specific monitoring and onboarding requirements belongs in the process identified by this case.
D:In assessing the contrast between customer risk assessment that ignores material exposure drivers and failure to tailor controls to product and geographic risk, the alternative's control domain is customer risk assessment that ignores material exposure drivers, generally corrected through steps to use transparent ownership, geography, delivery channel, and activity inputs. Here the relevant weakness is failure to tailor controls to product and geographic risk, requiring a different remediation ownership and workplan.
Question 201
A customer receives an export payment from a country unrelated to the buyer or destination and cannot explain the payer. What financial-crime risk should be the starting hypothesis for the review?
- Unexplained third-party trade settlement
- Trade-based laundering through price manipulation
- Trade misdescription masking value movement
- Layering through circular trade intermediaries
Explanation
Correct Answer
A:This characterization follows from the particular flow and relationships described, especially the need to establish why a nonparty funded the shipment. If substantiated, the resulting vulnerability is trade payments from unverified outside parties; investigators should separate the alert from proof of the underlying offense.
Incorrect Answers
B:The relevant clue for this alternative would be the need to establish whether invoiced values match comparable market values. No comparable fact is central to this case; the key unresolved link is establishing why a nonparty funded the shipment, making the proposed characterization weaker.
C:The alternative addresses activity that might produce hidden value transfers through false goods descriptions and would require evidence about whether shipped material matches the described grade. Those are not the facts that drive this scenario, whose defining task is to establish why a nonparty funded the shipment.
D:That interpretation is associated with a different situation where investigators must establish whether each intermediary supplied an economic service. It would direct attention toward fees paid to shell intermediaries without real function, whereas this case principally calls for establishing why a nonparty funded the shipment; the signals should not be treated as interchangeable.
Question 202
A team removes all checks from customers labeled low risk after introducing simplified due diligence. What is the principal control-design or governance failure?
- Insufficient EDD for a higher-risk PEP relationship
- Misinterpretation of proportional controls as no controls
- Misallocation of diligence under a risk-based approach
- Failure to tailor controls to product and geographic risk
- Inadequate enhanced control for sensitive trade destinations
Explanation
Correct Answer
B:In assessing the need to retain mandatory baseline CDD while simplifying appropriate lower-risk steps, this weakness explains how the observed business process failed to control the risk. Addressing it calls for steps to retain mandatory baseline CDD while simplifying appropriate lower-risk steps and evidence beyond management's assurance that a policy exists.
Incorrect Answers
A:Given the contrast between insufficient EDD for a higher-risk PEP relationship and misinterpretation of proportional controls as no controls as the distinguishing point, the alternative diagnosis describes an issue corrected through steps to obtain independent wealth provenance and appropriate senior approval. In assessing the contrast between insufficient EDD for a higher-risk PEP relationship and misinterpretation of proportional controls as no controls, the scenario instead points to a failure requiring the team to retain mandatory baseline CDD while simplifying appropriate lower-risk steps; confusing the two would send corrective effort to the wrong workflow.
C:That deficiency is typically owned by CDD policy and risk-methodology owners and rectified through measures to match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted. This case calls for steps to retain mandatory baseline CDD while simplifying appropriate lower-risk steps, meaning the alternative misses the central governance or process gap.
D:When examining the contrast between failure to tailor controls to product and geographic risk and misinterpretation of proportional controls as no controls, this weakness would appear in a process requiring staff to design corridor-specific monitoring and onboarding requirements. It is not the defining break in the present case, where the remediation must be designed to retain mandatory baseline CDD while simplifying appropriate lower-risk steps to address the observed behavior.
E:The alternative diagnosis describes an issue corrected through steps to verify end users, shipment routing, and applicable prohibitions before payment. In assessing the contrast between inadequate enhanced control for sensitive trade destinations and misinterpretation of proportional controls as no controls, the scenario instead points to a failure requiring the team to retain mandatory baseline CDD while simplifying appropriate lower-risk steps; confusing the two would send corrective effort to the wrong workflow.
Question 203
A financial regulator inspects whether a bank's AML controls work and orders an improvement plan. What regulatory concept should guide the initial assessment?
- Financial intelligence unit receipt and analysis of suspicious reports
- Civil-society research as a typology input
- Supervisory examination and remedial authority
- Private-sector association guidance rather than regulation
Explanation
Correct Answer
C:This is the most direct governing concept because the required response is to provide evidence of control design, operation, and timely remediation. The accountability of financial-sector prudential or conduct supervisor and the expected evidence, regulatory findings and tracked remedial action closure, clarify its practical scope.
Incorrect Answers
A:In assessing the separate duty to file with the designated FIU under applicable law as opposed to the current duty to provide evidence of control design, operation, and timely remediation, this authority supports file with the designated FIU under applicable law and produces evidence such as acknowledged STR submission and internal supporting case file. The required response here is provide evidence of control design, operation, and timely remediation, so the legal or governance route is not the same.
B:With the separate duty to use findings as corroborative context, not a binding legal obligation as opposed to the current duty to provide evidence of control design, operation, and timely remediation in view, this principle is relevant where the obligation is to use findings as corroborative context, not a binding legal obligation, under non-governmental research organization. The present case instead requires provide evidence of control design, operation, and timely remediation, so it addresses a different legal or operational question.
D:Its main application involves industry standards and professional association and an implementation such as evaluate guidance against binding local requirements and adopted policy. The facts in this scenario call for provide evidence of control design, operation, and timely remediation, making that framework secondary rather than controlling.
Question 204
A production issue has been traced to missing identity document-to-person binding. The solution must repair the underlying detection or processing mechanism. Which capability would most effectively reduce the observed risk?
- Pair document validation with identity-holder matching
- Use document authenticity checks and trusted issuer verification where available
- Use presentation-attack-resistant liveness verification and review
- Standardize data types and apply tested transformation rules
Explanation
Correct Answer
A:The proposed capability is fitted to the identified failure mode, missing identity document-to-person binding. It should be implemented with dependable high-quality portrait and verified document attributes and independently challenged using test genuine-document impersonation attempts.
Incorrect Answers
B:The technology is fitted to OCR extraction mistaken for document authentication, not the observed missing identity document-to-person binding. Given the difference between OCR extraction mistaken for document authentication and missing identity document-to-person binding as the distinguishing point, its benefit would be indirect without the focused remedy and validation described in the correct approach.
C:This capability addresses presentation attack against facial verification and relies on live capture metadata with spoof-detection signals. The current failure is missing identity document-to-person binding; deploying it would not fix the broken data or decision path described in the case.
D:In assessing the difference between inconsistent identity attribute normalization and missing identity document-to-person binding, the alternative is useful for inconsistent identity attribute normalization, but it acts on a different technical mechanism. Correcting the stated weakness requires pair document validation with identity-holder matching and dependable high-quality portrait and verified document attributes.
Question 205
An analyst challenges a working hypothesis of unexplained third-party trade settlement because the file lacks verification of why a nonparty funded the shipment. Independent source material is needed before disposition. Which source should the analyst check to settle the disputed fact?
- Independent commodity inspection and packing lists
- Buyer contracts and third-party payer authorization
- Vessel movement and warehouse receipt corroboration
- Independent unit-price benchmarks and commercial invoices
Explanation
Correct Answer
B:This material provides a practical way to establish why a nonparty funded the shipment. In assessing the need to establish why a nonparty funded the shipment, its value is in linking the customer's asserted purpose to observed facts, so investigators can articulate a reasoned conclusion.
Incorrect Answers
A:The proposed source is most informative for a question about whether shipped material matches the described grade. The current case calls for establishing why a nonparty funded the shipment; using this instead could leave the customer explanation largely untested.
C:In assessing the distinction between establishing whether goods actually moved between the named parties and establishing why a nonparty funded the shipment, the document helps with investigations focused on whether goods actually moved between the named parties. In this case the evidential gap lies with why a nonparty funded the shipment, so the reviewer needs a more targeted source before reaching a conclusion.
D:Such records could help establish whether invoiced values match comparable market values in a different investigation. Here the precise evidential question involves establishing why a nonparty funded the shipment, so the suggested material would be indirect and may not resolve the decisive uncertainty.
Question 206
An AFC control owner acknowledges misinterpretation of proportional controls as no controls, and assurance requests an implementable correction at the point of failure. What intervention should be prioritized to repair the deficient control?
- Retain mandatory baseline CDD while simplifying appropriate lower-risk steps
- Match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted
- Design corridor-specific monitoring and onboarding requirements
- Coordinate account, channel, and product closure with legal holds considered
Explanation
Correct Answer
A:The proposed intervention closes the specific gap in this case: misinterpretation of proportional controls as no controls. It should be implemented by second-line customer due diligence standards team, with approved simplified-diligence criteria and control sample used to check that the new control operates as designed.
Incorrect Answers
B:This approach is usually evidenced by risk-tiered CDD standard and exception testing, addressing misallocation of diligence under a risk-based approach. It is not a substitute for the targeted corrective action needed to resolve misinterpretation of proportional controls as no controls in this workflow.
C:The alternative may improve a different part of AFC governance, but it primarily tackles failure to tailor controls to product and geographic risk. The actual defect, misinterpretation of proportional controls as no controls, requires a different control intervention.
D:This intervention solves a different weakness, namely incomplete customer exit control execution. It leaves the current misinterpretation of proportional controls as no controls substantially unresolved because the broken process here requires retain mandatory baseline CDD while simplifying appropriate lower-risk steps.
Question 207
A governance review finds that supervisory examination and remedial authority is recognized but has not been implemented in ordinary workflows. The next decision concerns the required action. What is the most appropriate regulatory response within the stated remit?
- Route appropriate intelligence through authorized international channels
- Use findings as corroborative context, not a binding legal obligation
- Follow lawful compulsory process and preserve the responsive records
- Provide evidence of control design, operation, and timely remediation
Explanation
Correct Answer
D:Here the appropriate implementation follows the regulatory or governance remit of financial-sector prudential or conduct supervisor. It creates concrete action on the problem, with regulatory findings and tracked remedial action closure available to demonstrate completion.
Incorrect Answers
A:In assessing the separate duty to route appropriate intelligence through authorized international channels as opposed to the current duty to provide evidence of control design, operation, and timely remediation, this intervention relates to authorized intelligence exchange record with sharing restrictions in a separate regulatory setting. It cannot substitute for provide evidence of control design, operation, and timely remediation here because the scenario involves a different obligation and authority.
B:That step is appropriate for an obligation involving civil-society research as a typology input. In this case the task is provide evidence of control design, operation, and timely remediation, and carrying out the alternative would not satisfy the identified requirement.
C:The alternative concerns a different risk overseen by competent criminal-investigation authority. It would not implement the specific requirement in the case, which requires the responsible party to provide evidence of control design, operation, and timely remediation and an associated record.
Question 208
An implementation team needs to pair document validation with identity-holder matching after identifying missing identity document-to-person binding. The team is reviewing the source attributes and data lineage on which the remedy depends. Which source or attribute is essential to correct performance?
- Live capture metadata with spoof-detection signals
- Document feature evidence and issuer reference data
- Source-to-target field mappings and branch-level counts
- High-quality portrait and verified document attributes
Explanation
Correct Answer
D:The selected data dependency supports the proposed technical control, pair document validation with identity-holder matching. Verifying lineage and completeness is essential because missing identity document-to-person binding will otherwise survive in downstream decisions.
Incorrect Answers
A:These attributes help evaluate test recorded-image, printed-photo, and live-user samples in another workflow. The present failure involves missing identity document-to-person binding, making high-quality portrait and verified document attributes the more direct dependency to verify.
B:The proposed source is appropriate for a tool tackling OCR extraction mistaken for document authentication. It does not supply the information needed to validate pair document validation with identity-holder matching against the current observed issue.
C:Given the difference between incomplete transaction data ingestion and missing identity document-to-person binding as the distinguishing point, that information underpins reconcile source population to monitoring population with exception alerts when the problem is incomplete transaction data ingestion. The case instead depends on high-quality portrait and verified document attributes, which is necessary to correct the stated failure and make the output auditable.
Question 209
A product team asks how to mitigate trade payments from unverified outside parties without assuming that all activity linked to unexplained third-party trade settlement is unlawful. A targeted check is preferred. Which control should the team implement at this risk point?
- Beneficiary and commercial-purpose review of intermediaries
- Independent inspection for material trade discrepancies
- Third-party settlement approval with provenance checks
- Document-to-physical-delivery verification in trade finance
Explanation
Correct Answer
C:This measure addresses trade payments from unverified outside parties, rather than a different typology. With the exposure to trade payments from unverified outside parties in view, staff should apply it to the relevant customer, product, or transaction stage and preserve evidence of challenge and follow-up.
Incorrect Answers
A:When examining the distinction between exposure to fees paid to shell intermediaries without real function and exposure to trade payments from unverified outside parties, the measure is more suited to limiting fees paid to shell intermediaries without real function. It does not directly test or prevent trade payments from unverified outside parties in the described customer or transaction process, even if it might help elsewhere in the AFC program.
B:The alternative would mitigate risks involving hidden value transfers through false goods descriptions, not the principal failure here. The relevant control design must be built around trade payments from unverified outside parties, with appropriate evidence and exceptions.
D:This control addresses fabricated trade flows without physical goods movement, a different vulnerability. The current exposure is trade payments from unverified outside parties; installing the alternative without a tailored check would leave the key failure path substantially open.
Question 210
An AFC reviewer is assessing 2 distinct situations. Situation 1: The identified failure is misinterpretation of proportional controls as no controls; the agreed correction is to retain mandatory baseline CDD while simplifying appropriate lower-risk steps. Situation 2: The identified failure is failure to tailor controls to product and geographic risk; the agreed correction is to design corridor-specific monitoring and onboarding requirements. Which functions have primary remedial responsibility for one of these situations? Choose TWO.
- Product financial-crime risk owner
- Second-line customer due diligence standards team
- Customer exit operations coordinator
- Enterprise financial-crime risk assessment team
- CDD policy and risk-methodology owners
Explanation
Correct Answers
A:For situation 2, the named function is positioned to deliver the necessary change: design corridor-specific monitoring and onboarding requirements. It can coordinate other teams while remaining responsible for closing failure to tailor controls to product and geographic risk and producing new-product risk assessment and linked monitoring coverage.
B:For situation 1, the central responsibility is to retain mandatory baseline CDD while simplifying appropriate lower-risk steps and retain evidence of completion, not simply offer second opinions. That aligns with the work needed to resolve misinterpretation of proportional controls as no controls and maintain approved simplified-diligence criteria and control sample.
Incorrect Answers
C:With the contrast between incomplete customer exit control execution and misinterpretation of proportional controls as no controls in view, the alternative concerns incomplete customer exit control execution, typically addressed through steps to coordinate account, channel, and product closure with legal holds considered. When examining the contrast between incomplete customer exit control execution and misinterpretation of proportional controls as no controls, for the presented control failures, situation 1 requires measures to retain mandatory baseline CDD while simplifying appropriate lower-risk steps; situation 2 requires measures to design corridor-specific monitoring and onboarding requirements. The alternative owner would not meet those requirements.
D:When examining the contrast between conflating inherent risk with residual risk and misinterpretation of proportional controls as no controls, the alternative concerns conflating inherent risk with residual risk, typically addressed through steps to score exposure before controls, then separately evaluate control effectiveness. Given the contrast between conflating inherent risk with residual risk and misinterpretation of proportional controls as no controls as the distinguishing point, for the presented control failures, situation 1 requires measures to retain mandatory baseline CDD while simplifying appropriate lower-risk steps; situation 2 requires measures to design corridor-specific monitoring and onboarding requirements. The alternative owner would not meet those requirements.
E:The alternative concerns misallocation of diligence under a risk-based approach, typically addressed through steps to match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted. In assessing the contrast between misallocation of diligence under a risk-based approach and misinterpretation of proportional controls as no controls, for the presented control failures, situation 1 requires measures to retain mandatory baseline CDD while simplifying appropriate lower-risk steps; situation 2 requires measures to design corridor-specific monitoring and onboarding requirements. The alternative owner would not meet those requirements.