Question 210
An AFC reviewer is assessing 2 distinct situations. Situation 1: The identified failure is misinterpretation of proportional controls as no controls; the agreed correction is to retain mandatory baseline CDD while simplifying appropriate lower-risk steps. Situation 2: The identified failure is failure to tailor controls to product and geographic risk; the agreed correction is to design corridor-specific monitoring and onboarding requirements. Which functions have primary remedial responsibility for one of these situations? Choose TWO.
- Product financial-crime risk owner
- Second-line customer due diligence standards team
- Customer exit operations coordinator
- Enterprise financial-crime risk assessment team
- CDD policy and risk-methodology owners
Explanation
Correct Answers
A:For situation 2, the named function is positioned to deliver the necessary change: design corridor-specific monitoring and onboarding requirements. It can coordinate other teams while remaining responsible for closing failure to tailor controls to product and geographic risk and producing new-product risk assessment and linked monitoring coverage.
B:For situation 1, the central responsibility is to retain mandatory baseline CDD while simplifying appropriate lower-risk steps and retain evidence of completion, not simply offer second opinions. That aligns with the work needed to resolve misinterpretation of proportional controls as no controls and maintain approved simplified-diligence criteria and control sample.
Incorrect Answers
C:With the contrast between incomplete customer exit control execution and misinterpretation of proportional controls as no controls in view, the alternative concerns incomplete customer exit control execution, typically addressed through steps to coordinate account, channel, and product closure with legal holds considered. When examining the contrast between incomplete customer exit control execution and misinterpretation of proportional controls as no controls, for the presented control failures, situation 1 requires measures to retain mandatory baseline CDD while simplifying appropriate lower-risk steps; situation 2 requires measures to design corridor-specific monitoring and onboarding requirements. The alternative owner would not meet those requirements.
D:When examining the contrast between conflating inherent risk with residual risk and misinterpretation of proportional controls as no controls, the alternative concerns conflating inherent risk with residual risk, typically addressed through steps to score exposure before controls, then separately evaluate control effectiveness. Given the contrast between conflating inherent risk with residual risk and misinterpretation of proportional controls as no controls as the distinguishing point, for the presented control failures, situation 1 requires measures to retain mandatory baseline CDD while simplifying appropriate lower-risk steps; situation 2 requires measures to design corridor-specific monitoring and onboarding requirements. The alternative owner would not meet those requirements.
E:The alternative concerns misallocation of diligence under a risk-based approach, typically addressed through steps to match enhanced measures to high-risk complexity and reduce needless low-risk friction where permitted. In assessing the contrast between misallocation of diligence under a risk-based approach and misinterpretation of proportional controls as no controls, for the presented control failures, situation 1 requires measures to retain mandatory baseline CDD while simplifying appropriate lower-risk steps; situation 2 requires measures to design corridor-specific monitoring and onboarding requirements. The alternative owner would not meet those requirements.
Question 211
An individual receives many small incoming wires from unrelated overseas senders and sends a near-identical aggregate amount onward the same day. Which distinct threat pattern is most consistent with the observed facts?
- Third-party diversion of investment subscriptions
- Consumer investment fraud generating laundering exposure
- Rapid pass-through layering in an individual account
- Circular movement of funds to create an appearance of turnover
- Coordinated transaction fragmentation
Explanation
Correct Answer
C:The case hinges on establishing whether counterparties have a genuine relationship to the customer; that unresolved link is the distinguishing clue for this risk interpretation. The associated exposure is opaque aggregation and onward dispersal of funds, so the suspicion needs corroboration rather than an automatic finding of wrongdoing.
Incorrect Answers
A:The relevant clue for this alternative would be the need to establish whether each outflow was approved by the actual investor. With the distinction between exposure to redirection of invested funds to unapproved beneficiaries and exposure to opaque aggregation and onward dispersal of funds in view, no comparable fact is central to this case; the key unresolved link is establishing whether counterparties have a genuine relationship to the customer, making the proposed characterization weaker.
B:With the distinction between exposure to collection of fraud receipts through merchant accounts and exposure to opaque aggregation and onward dispersal of funds in view, the alternative addresses activity that might produce collection of fraud receipts through merchant accounts and would require evidence about whether promised investments existed and customers consented. Those are not the facts that drive this scenario, whose defining task is to establish whether counterparties have a genuine relationship to the customer.
D:This typology would be worth testing when the issue is establishing whether control of originating and receiving entities overlaps, leading to exposure from circular transfers disguised as commercial volume. The present facts instead call for establishing whether counterparties have a genuine relationship to the customer, so choosing it would send the investigation toward a different mechanism.
E:In assessing the distinction between exposure to group structuring that avoids individual transaction scrutiny and exposure to opaque aggregation and onward dispersal of funds, the relevant clue for this alternative would be the need to establish whether the senders are connected to a single controller. With the distinction between exposure to group structuring that avoids individual transaction scrutiny and exposure to opaque aggregation and onward dispersal of funds in view, no comparable fact is central to this case; the key unresolved link is establishing whether counterparties have a genuine relationship to the customer, making the proposed characterization weaker.
Question 212
A challenge panel will not accept a sign-off for misinterpretation of proportional controls as no controls based only on policy language. The institution says it can now retain mandatory baseline CDD while simplifying appropriate lower-risk steps; an operating record is necessary. What would substantiate resolution of the identified AFC weakness?
- Risk-tiered CDD standard and exception testing
- New-product risk assessment and linked monitoring coverage
- Individualized risk-review outcomes and access impact
- Approved simplified-diligence criteria and control sample
Explanation
Correct Answer
D:In assessing the deficiency of misinterpretation of proportional controls as no controls, this is the strongest proof of operating effectiveness because it records the relevant control action. It provides a check on the response to misinterpretation of proportional controls as no controls, not just management's stated intention.
Incorrect Answers
A:The artifact tests a different process led by CDD policy and risk-methodology owners. It does not adequately demonstrate that misinterpretation of proportional controls as no controls is now controlled, even if it could support wider AFC assurance.
B:When examining the contrast between failure to tailor controls to product and geographic risk and misinterpretation of proportional controls as no controls, this record would help assess whether steps to design corridor-specific monitoring and onboarding requirements worked in a different scenario. The current test needs to establish whether measures to retain mandatory baseline CDD while simplifying appropriate lower-risk steps corrected misinterpretation of proportional controls as no controls; the suggested artifact cannot show that directly.
C:Given the contrast between wholesale de-risking instead of proportionate assessment and misinterpretation of proportional controls as no controls as the distinguishing point, the proposed evidence corresponds to oversight of wholesale de-risking instead of proportionate assessment. It would leave the actual remediation, retain mandatory baseline CDD while simplifying appropriate lower-risk steps, without a clear operational test in this case.
Question 213
A supervisory question concerns who is accountable for the obligation to provide evidence of control design, operation, and timely remediation. Staff need to distinguish the executing authority from advisers and standards setters. Who is the most relevant accountable authority or function for this task?
- Financial-sector prudential or conduct supervisor
- Competent criminal-investigation authority
- Industry standards and professional association
- Domestic FIU coordinating foreign FIU requests
Explanation
Correct Answer
A:This body or team has the relevant authority or duty for the action in this case: provide evidence of control design, operation, and timely remediation. The distinction matters because regulatory findings and tracked remedial action closure must be accountable to the proper decision maker.
Incorrect Answers
B:Given the separate duty to follow lawful compulsory process and preserve the responsive records as opposed to the current duty to provide evidence of control design, operation, and timely remediation as the distinguishing point, the alternative is associated with validated production records and chain-of-custody log for another kind of obligation. It is not the authority chiefly accountable for provide evidence of control design, operation, and timely remediation in the circumstances described.
C:That organization may contribute relevant information but primarily handles evaluate guidance against binding local requirements and adopted policy. It cannot replace the proper lead for provide evidence of control design, operation, and timely remediation and its associated review record.
D:With the separate duty to route appropriate intelligence through authorized international channels as opposed to the current duty to provide evidence of control design, operation, and timely remediation in view, this function normally leads work such as route appropriate intelligence through authorized international channels, which is distinct from the issue at hand. The current responsibility relates to provide evidence of control design, operation, and timely remediation, so routing it here would misassign accountability.
Question 214
A new capability to pair document validation with identity-holder matching has been deployed using high-quality portrait and verified document attributes. The prior defect was missing identity document-to-person binding, and the owner needs an outcome-based acceptance test. Which validation exercise would provide the strongest evidence of improved performance?
- Test recorded-image, printed-photo, and live-user samples
- Challenge the system with forged but text-readable documents
- Test update latency from public record to new risk classification
- Test genuine-document impersonation attempts
Explanation
Correct Answer
D:This test links a measurable result to missing identity document-to-person binding and the corrective design, pair document validation with identity-holder matching. Given the technical failure of missing identity document-to-person binding as the distinguishing point, reproducing the historical defect is an important safeguard against a superficial system change.
Incorrect Answers
A:This check would reveal failures like presentation attack against facial verification, not whether pair document validation with identity-holder matching corrects the problem in this case. The relevant validation must challenge missing identity document-to-person binding using high-quality portrait and verified document attributes.
B:The alternative is tailored to use document authenticity checks and trusted issuer verification where available and its separate data requirement. It would not provide decisive evidence that the remedy in this scenario eliminates missing identity document-to-person binding.
C:With the difference between missing event-driven KYC refresh and missing identity document-to-person binding in view, that exercise tests a different analytical risk, missing event-driven KYC refresh. The acceptance test for this case should measure the actual outcome of pair document validation with identity-holder matching, rather than a nearby but unrelated metric.
Question 215
An evidence review concerning rapid pass-through layering in an individual account finds the file does not establish whether counterparties have a genuine relationship to the customer. The investigator wants a record that can be checked independently. What documentation offers the most direct corroboration?
- Shared-device and common-beneficiary analysis
- Corporate control graph joined to payment routes
- Investor mandate and destination-account verification
- Originator and beneficiary link analysis
Explanation
Correct Answer
D:The central evidential gap concerns establishing whether counterparties have a genuine relationship to the customer; this material is designed to resolve that specific uncertainty. In assessing the need to establish whether counterparties have a genuine relationship to the customer, it should be checked against account-level events and independent sources, not accepted solely because the customer supplies it.
Incorrect Answers
A:In assessing the distinction between establishing whether the senders are connected to a single controller and establishing whether counterparties have a genuine relationship to the customer, this can support due diligence on whether the senders are connected to a single controller, a separate risk dimension. It is not the primary independent check for whether counterparties have a genuine relationship to the customer, which is the missing link in the described funds movement.
B:The document helps with investigations focused on whether control of originating and receiving entities overlaps. In this case the evidential gap lies with whether counterparties have a genuine relationship to the customer, so the reviewer needs a more targeted source before reaching a conclusion.
C:When examining the distinction between establishing whether each outflow was approved by the actual investor and establishing whether counterparties have a genuine relationship to the customer, such records could help establish whether each outflow was approved by the actual investor in a different investigation. Here the precise evidential question involves establishing whether counterparties have a genuine relationship to the customer, so the suggested material would be indirect and may not resolve the decisive uncertainty.
Question 216
A policy document includes keystroke instructions for opening one software screen but no statement of the institution's compliance principles. Which defect should be recorded in the AFC program assessment?
- Regulatory horizon scanning without implementation handoff
- Stale operating procedure and change management
- Confusing procedure instructions with policy requirements
- Missing enterprise control standard
Explanation
Correct Answer
C:Given the need to separate high-level obligations from detailed operational instructions as the distinguishing point, the situation reveals this defect because the existing workflow does not reliably achieve the relevant AFC objective. The corresponding repair is to separate high-level obligations from detailed operational instructions, with ownership resting in AFC policy governance function.
Incorrect Answers
A:With the contrast between regulatory horizon scanning without implementation handoff and confusing procedure instructions with policy requirements in view, the corresponding consequence of this alternative would be evidenced through obligation-to-control change log with effective dates. The stated control problem has a different operating symptom, addressed by measures to separate high-level obligations from detailed operational instructions.
B:When examining the contrast between stale operating procedure and change management and confusing procedure instructions with policy requirements, that deficiency is typically owned by first-line monitoring procedure owner and rectified through measures to update step-by-step alert handling and train affected operators. This case calls for steps to separate high-level obligations from detailed operational instructions, meaning the alternative misses the central governance or process gap.
D:In assessing the contrast between missing enterprise control standard and confusing procedure instructions with policy requirements, the alternative diagnosis describes an issue corrected through steps to publish testable minimum criteria shared across business units. The scenario instead points to a failure requiring the team to separate high-level obligations from detailed operational instructions; confusing the two would send corrective effort to the wrong workflow.
Question 217
A supervisory review challenges whether the accountable party actually acted to provide evidence of control design, operation, and timely remediation. Compliance claims alignment with supervisory examination and remedial authority, but objective evidence is required. What record would be most directly probative in a supervisory review?
- Validated production records and chain-of-custody log
- Gap assessment against internal trade-control standards
- Acknowledged STR submission and internal supporting case file
- Regulatory findings and tracked remedial action closure
- Source-quality assessment and incorporation into risk intelligence
Explanation
Correct Answer
D:This record links the obligation to provide evidence of control design, operation, and timely remediation with actual execution and provides a verifiable basis for review. It also helps demonstrate that financial-sector prudential or conduct supervisor acted within the appropriate scope.
Incorrect Answers
A:When examining the separate duty to follow lawful compulsory process and preserve the responsive records as opposed to the current duty to provide evidence of control design, operation, and timely remediation, this documentation is linked to law-enforcement investigative powers subject to local law and work performed by competent criminal-investigation authority. Given the separate duty to follow lawful compulsory process and preserve the responsive records as opposed to the current duty to provide evidence of control design, operation, and timely remediation as the distinguishing point, it does not directly demonstrate the implementation of the obligation to provide evidence of control design, operation, and timely remediation in this case.
B:Given the separate duty to evaluate guidance against binding local requirements and adopted policy as opposed to the current duty to provide evidence of control design, operation, and timely remediation as the distinguishing point, the record supports another process: evaluate guidance against binding local requirements and adopted policy. The reviewer needs evidence of work to provide evidence of control design, operation, and timely remediation, and the proposed record would leave that operational requirement unproven.
C:That artifact shows activity in the remit of jurisdiction's financial intelligence unit, not the performance of the required step. It would be an indirect reference rather than defensible proof that the necessary work to provide evidence of control design, operation, and timely remediation happened.
E:When examining the separate duty to use findings as corroborative context, not a binding legal obligation as opposed to the current duty to provide evidence of control design, operation, and timely remediation, this documentation is linked to civil-society research as a typology input and work performed by non-governmental research organization. Given the separate duty to use findings as corroborative context, not a binding legal obligation as opposed to the current duty to provide evidence of control design, operation, and timely remediation as the distinguishing point, it does not directly demonstrate the implementation of the obligation to provide evidence of control design, operation, and timely remediation in this case.
Question 218
An AFC reviewer is assessing 2 distinct situations. Situation 1: Document ingestion extracted text but never verified document security features. Situation 2: A facial presence check accepted a printed photograph as a live applicant. Which technical weaknesses each best explain a different observed failure? Choose TWO.
- OCR extraction mistaken for document authentication
- Missing identity document-to-person binding
- Presentation attack against facial verification
- Missing event-driven KYC refresh
Explanation
Correct Answers
A:For situation 1, given the proposed capability of use document authenticity checks and trusted issuer verification where available as the distinguishing point, the observed system behavior is consistent with the specifically identified control defect. The relevant remedy is use document authenticity checks and trusted issuer verification where available, backed by reliable document feature evidence and issuer reference data and validation through challenge the system with forged but text-readable documents.
C:For situation 2, with the proposed capability of use presentation-attack-resistant liveness verification and review in view, this defect explains why the current tool misses or misclassifies the described activity. The remediation, use presentation-attack-resistant liveness verification and review, requires live capture metadata with spoof-detection signals and should be verified through test recorded-image, printed-photo, and live-user samples.
Incorrect Answers
B:The alternative tackles missing identity document-to-person binding by using pair document validation with identity-holder matching and high-quality portrait and verified document attributes. With the competing solutions of pair document validation with identity-holder matching and use document authenticity checks and trusted issuer verification where available in view, in the cases under review, situation 1 must address OCR extraction mistaken for document authentication; situation 2 must address presentation attack against facial verification. This gap response targets a separate technical failure.
D:The alternative tackles missing event-driven KYC refresh by using trigger reassessment from significant customer-role changes and reliable external corporate appointment events. Given the competing solutions of trigger reassessment from significant customer-role changes and use document authenticity checks and trusted issuer verification where available as the distinguishing point, in the cases under review, situation 1 must address OCR extraction mistaken for document authentication; situation 2 must address presentation attack against facial verification. This gap response targets a separate technical failure.
Question 219
After a thematic review of rapid pass-through layering in an individual account, the compliance committee prioritizes reducing opaque aggregation and onward dispersal of funds. The control should work at the relevant entry point. What targeted measure should reduce the identified vulnerability?
- Merchant underwriting and scam-complaint escalation
- Independent callback for changes to investor payout details
- Related-party circular-flow detection
- Pass-through and velocity monitoring tied to profile
- Linked-party aggregation and channel-wide monitoring
Explanation
Correct Answer
D:The case needs a control aimed at opaque aggregation and onward dispersal of funds, not a generic restriction on all customers. In assessing the exposure to opaque aggregation and onward dispersal of funds, the proposed design introduces that verification or detection step so staff can prevent, identify, and escalate exceptions consistently.
Incorrect Answers
A:In assessing the distinction between exposure to collection of fraud receipts through merchant accounts and exposure to opaque aggregation and onward dispersal of funds, the alternative would mitigate risks involving collection of fraud receipts through merchant accounts, not the principal failure here. With the distinction between exposure to collection of fraud receipts through merchant accounts and exposure to opaque aggregation and onward dispersal of funds in view, the relevant control design must be built around opaque aggregation and onward dispersal of funds, with appropriate evidence and exceptions.
B:That safeguard is appropriate for a setting where the exposure is redirection of invested funds to unapproved beneficiaries. This scenario instead exposes opaque aggregation and onward dispersal of funds; a control operating on the other mechanism would not be the most proportionate response.
C:This control addresses circular transfers disguised as commercial volume, a different vulnerability. The current exposure is opaque aggregation and onward dispersal of funds; installing the alternative without a tailored check would leave the key failure path substantially open.
E:In assessing the distinction between exposure to group structuring that avoids individual transaction scrutiny and exposure to opaque aggregation and onward dispersal of funds, the alternative would mitigate risks involving group structuring that avoids individual transaction scrutiny, not the principal failure here. With the distinction between exposure to group structuring that avoids individual transaction scrutiny and exposure to opaque aggregation and onward dispersal of funds in view, the relevant control design must be built around opaque aggregation and onward dispersal of funds, with appropriate evidence and exceptions.
Question 220
An internal audit identifies confusing procedure instructions with policy requirements in a process whose remedial ownership sits with AFC policy governance function. The reviewer requires an executable, testable correction. Which change best addresses the stated compliance-program problem?
- Publish testable minimum criteria shared across business units
- Trigger event-driven policy and monitoring review for new threats
- Separate high-level obligations from detailed operational instructions
- Connect legal change tracking to operational impact and tested rollout
Explanation
Correct Answer
C:This responds to the identified weakness, confusing procedure instructions with policy requirements, at the point where the process breaks down. Assigning the change to AFC policy governance function and testing policy hierarchy linking principles, standards, and procedures makes remediation verifiable rather than aspirational.
Incorrect Answers
A:With the contrast between missing enterprise control standard and confusing procedure instructions with policy requirements in view, this approach is usually evidenced by version-controlled standards and consistency testing, addressing missing enterprise control standard. It is not a substitute for the targeted corrective action needed to resolve confusing procedure instructions with policy requirements in this workflow.
B:The alternative may improve a different part of AFC governance, but it primarily tackles emerging-risk intelligence omitted from policy updates. The actual defect, confusing procedure instructions with policy requirements, requires a different control intervention.
D:The proposed step is appropriate when regulatory horizon scanning without implementation handoff is observed. The case instead concerns confusing procedure instructions with policy requirements; the alternative would not repair the particular failing in time or at the correct control point.