Question 370
Independent testing has confirmed confusing internal review with external reporting. Management agrees that restating the existing policy will not resolve the process breakdown. Which corrective measure most directly closes this gap?
- Document defensible investigation conclusions and retention under local policy
- Apply documented external filing decisions and required submission routes
- Publish testable minimum criteria shared across business units
- Map local STR obligations for each regulated entity and activity
Explanation
Correct Answer
B:The proposed intervention closes the specific gap in this case: confusing internal review with external reporting. It should be implemented by designated regulatory reporting officer, with regulatory filing confirmation and supporting case chronology used to check that the new control operates as designed.
Incorrect Answers
A:Given the contrast between undocumented no-file decisions and confusing internal review with external reporting as the distinguishing point, this intervention solves a different weakness, namely undocumented no-file decisions. It leaves the current confusing internal review with external reporting substantially unresolved because the broken process here requires apply documented external filing decisions and required submission routes.
C:With the contrast between missing enterprise control standard and confusing internal review with external reporting in view, this approach is usually evidenced by version-controlled standards and consistency testing, addressing missing enterprise control standard. It is not a substitute for the targeted corrective action needed to resolve confusing internal review with external reporting in this workflow.
D:The alternative may improve a different part of AFC governance, but it primarily tackles incorrect entity-specific reporting jurisdiction. The actual defect, confusing internal review with external reporting, requires a different control intervention.
Question 371
After a thematic review of high-value goods purchased through opaque third parties, the compliance committee prioritizes reducing concealed purchase funding through unrelated accounts. The control should work at the relevant entry point. What targeted measure should reduce the identified vulnerability?
- Beneficial-owner and service-validation checks on vendors
- Dual-use goods end-user escalation before shipment
- Proportionate charity partner monitoring and delivery controls
- Enhanced due diligence for bullion merchants
- Third-party payer scrutiny for high-value sales
Explanation
Correct Answer
E:This directly reduces the chance of concealed purchase funding through unrelated accounts by placing a relevant check in the affected process. With the exposure to concealed purchase funding through unrelated accounts in view, its effectiveness should be measured against real exceptions, without assuming that a risk indicator proves criminal conduct.
Incorrect Answers
A:The alternative would mitigate risks involving contract kickbacks masked as subcontract expenses, not the principal failure here. The relevant control design must be built around concealed purchase funding through unrelated accounts, with appropriate evidence and exceptions.
B:That safeguard is appropriate for a setting where the exposure is unverified transshipment of sensitive industrial goods. This scenario instead exposes concealed purchase funding through unrelated accounts; a control operating on the other mechanism would not be the most proportionate response.
C:When examining the distinction between exposure to misdirected humanitarian payments without field assurance and exposure to concealed purchase funding through unrelated accounts, this control addresses misdirected humanitarian payments without field assurance, a different vulnerability. The current exposure is concealed purchase funding through unrelated accounts; installing the alternative without a tailored check would leave the key failure path substantially open.
D:The measure is more suited to limiting anonymous high-value commodity payments. It does not directly test or prevent concealed purchase funding through unrelated accounts in the described customer or transaction process, even if it might help elsewhere in the AFC program.
Question 372
Accountability for work to apply documented external filing decisions and required submission routes is disputed following a finding of confusing internal review with external reporting. The owner must have control over execution. Where should primary ownership for resolving the weakness sit?
- AML investigations quality assurance owner
- Designated regulatory reporting officer
- Group AFC standards owner
- Local MLRO supported by group AFC reporting
Explanation
Correct Answer
B:When examining the need to apply documented external filing decisions and required submission routes, primary accountability belongs with the function able to execute the described process repair. Here that means ensuring the responsible team can apply documented external filing decisions and required submission routes, with the result demonstrated by regulatory filing confirmation and supporting case chronology and challenged by appropriate assurance functions.
Incorrect Answers
A:That group is suited to producing approved case closure notes with reporting rationale for another control issue. In the present case ownership must support measures to apply documented external filing decisions and required submission routes and closure of confusing internal review with external reporting, not an unrelated assurance task.
C:This function has a remit connected with the duty to publish testable minimum criteria shared across business units, and the associated problem is missing enterprise control standard. The current repair requires the responsible team to apply documented external filing decisions and required submission routes, so it should not be allocated to a team without direct control over that work.
D:Its normal responsibility would be addressing incorrect entity-specific reporting jurisdiction. It may advise or review here, but the accountable execution of measures to apply documented external filing decisions and required submission routes belongs in the process identified by this case.
Question 373
A supervisory question concerns who is accountable for the obligation to follow the applicable formal international evidence-request process. Staff need to distinguish the executing authority from advisers and standards setters. Who is the most relevant accountable authority or function for this task?
- Central authority for mutual legal assistance
- Home and host financial supervisors
- PPP data-governance and privacy oversight function
- Financial intelligence units of the relevant jurisdictions
Explanation
Correct Answer
A:This body or team has the relevant authority or duty for the action in this case: follow the applicable formal international evidence-request process. The distinction matters because validated MLA request and evidence provenance must be accountable to the proper decision maker.
Incorrect Answers
B:The alternative is associated with joint examination terms and approved information-sharing record for another kind of obligation. It is not the authority chiefly accountable for follow the applicable formal international evidence-request process in the circumstances described.
C:That organization may contribute relevant information but primarily handles restrict personal information to lawful, necessary, proportionate uses. It cannot replace the proper lead for follow the applicable formal international evidence-request process and its associated review record.
D:With the separate duty to use authorized secure FIU channels within applicable legal limitations as opposed to the current duty to follow the applicable formal international evidence-request process in view, this function normally leads work such as use authorized secure FIU channels within applicable legal limitations, which is distinct from the issue at hand. The current responsibility relates to follow the applicable formal international evidence-request process, so routing it here would misassign accountability.
Question 374
A new capability to trigger reassessment from significant customer-role changes has been deployed using reliable external corporate appointment events. The prior defect was missing event-driven KYC refresh, and the owner needs an outcome-based acceptance test. Which validation exercise would provide the strongest evidence of improved performance?
- Measure overdue refresh rates weighted by risk severity
- Challenge merged profiles against known distinct-person samples
- Trace an end-to-end multi-risk case across integrated systems
- Test update latency from public record to new risk classification
- Evaluate legitimate-user failures and fraud capture together
- Check that triggered reviews have traceable underlying events
Explanation
Correct Answer
D:This test links a measurable result to missing event-driven KYC refresh and the corrective design, trigger reassessment from significant customer-role changes. Given the technical failure of missing event-driven KYC refresh as the distinguishing point, reproducing the historical defect is an important safeguard against a superficial system change.
Incorrect Answers
A:This check would reveal failures like poor refresh prioritization by risk, not whether trigger reassessment from significant customer-role changes corrects the problem in this case. In assessing the difference between poor refresh prioritization by risk and missing event-driven KYC refresh, the relevant validation must challenge missing event-driven KYC refresh using reliable external corporate appointment events.
B:The alternative is tailored to build a mastered identifier with verified source lineage and its separate data requirement. With the difference between identifier collisions and entity resolution failure and missing event-driven KYC refresh in view, it would not provide decisive evidence that the remedy in this scenario eliminates missing event-driven KYC refresh.
C:That exercise tests a different analytical risk, disconnected detection and investigation tools. The acceptance test for this case should measure the actual outcome of trigger reassessment from significant customer-role changes, rather than a nearby but unrelated metric.
E:This check would reveal failures like biometric friction and unequal error impact, not whether trigger reassessment from significant customer-role changes corrects the problem in this case. In assessing the difference between biometric friction and unequal error impact and missing event-driven KYC refresh, the relevant validation must challenge missing event-driven KYC refresh using reliable external corporate appointment events.
F:In assessing the difference between uninterpretable pKYC refresh triggers and missing event-driven KYC refresh, the alternative is tailored to capture model reasons and require explainable review decisions and its separate data requirement. With the difference between uninterpretable pKYC refresh triggers and missing event-driven KYC refresh in view, it would not provide decisive evidence that the remedy in this scenario eliminates missing event-driven KYC refresh.
Question 375
An AFC reviewer is assessing 3 distinct situations. Situation 1: The unresolved link is whether billed subcontract work actually occurred, and the observed exposure involves contract kickbacks masked as subcontract expenses. Situation 2: The unresolved link is whether each payer is connected to the buyer, and the observed exposure involves concealed purchase funding through unrelated accounts. Situation 3: The unresolved link is whether intended beneficiaries received the funds, and the observed exposure involves misdirected humanitarian payments without field assurance. Which interpretations correctly identify the central financial-crime risk in one of these situations? Choose THREE.
- Nonprofit accounts used for undisclosed third-party exchange
- High-value goods purchased through opaque third parties
- Public-contract proceeds diverted through phantom vendors
- Diversion of charitable funds in conflict zones
- Cash-intensive precious-metals trade exposure
Explanation
Correct Answers
B:For situation 2, the key issue is the unresolved relationship, which requires establishing whether each payer is connected to the buyer. When examining the need to establish whether each payer is connected to the buyer, that inquiry is consistent with the indicated financial-crime pattern and matters because it can expose concealed purchase funding through unrelated accounts; an assessment should document evidence both for and against suspicion.
C:For situation 1, the pivotal investigative task is to establish whether billed subcontract work actually occurred. Examining that uncertainty is how the investigator distinguishes this scenario from adjacent typologies and evaluates the exposure to contract kickbacks masked as subcontract expenses.
D:For situation 3, the case hinges on establishing whether intended beneficiaries received the funds; that unresolved link is the distinguishing clue for this risk interpretation. The associated exposure is misdirected humanitarian payments without field assurance, so the suspicion needs corroboration rather than an automatic finding of wrongdoing.
Incorrect Answers
A:This alternative describes nonprofit accounts used for undisclosed third-party exchange and the exposure to charity channels facilitating off-purpose asset transfers. With the distinction between exposure to charity channels facilitating off-purpose asset transfers and exposure to contract kickbacks masked as subcontract expenses in view, in the given fact patterns, situation 1 concerns establishing whether billed subcontract work actually occurred; situation 2 concerns establishing whether each payer is connected to the buyer; situation 3 concerns establishing whether intended beneficiaries received the funds. None centers on the alternative's defining mechanism.
E:This alternative describes cash-intensive precious-metals trade exposure and the exposure to anonymous high-value commodity payments. With the distinction between exposure to anonymous high-value commodity payments and exposure to contract kickbacks masked as subcontract expenses in view, in the given fact patterns, situation 1 concerns establishing whether billed subcontract work actually occurred; situation 2 concerns establishing whether each payer is connected to the buyer; situation 3 concerns establishing whether intended beneficiaries received the funds. None centers on the alternative's defining mechanism.
Question 376
Before closing an audit finding of confusing internal review with external reporting, the assurance team needs evidence that measures to apply documented external filing decisions and required submission routes were actually executed. Which record best demonstrates execution rather than merely policy intent?
- Country-by-country filing decision and submission records
- Regulatory filing confirmation and supporting case chronology
- Approved case closure notes with reporting rationale
- Current procedure, approvals, and staff acknowledgment
Explanation
Correct Answer
B:When examining the deficiency of confusing internal review with external reporting, the record gives an auditable link between the expected remediation and observed practice. It is especially useful for verifying that confusing internal review with external reporting has not continued under a different workflow.
Incorrect Answers
A:With the contrast between incorrect entity-specific reporting jurisdiction and confusing internal review with external reporting in view, that documentation is meaningful where measures to map local STR obligations for each regulated entity and activity are the expected control. The present issue is confusing internal review with external reporting, and the reviewer needs records specifically tracing the chosen remedy.
C:Given the contrast between undocumented no-file decisions and confusing internal review with external reporting as the distinguishing point, this record would help assess whether steps to document defensible investigation conclusions and retention under local policy worked in a different scenario. The current test needs to establish whether measures to apply documented external filing decisions and required submission routes corrected confusing internal review with external reporting; the suggested artifact cannot show that directly.
D:In assessing the contrast between stale operating procedure and change management and confusing internal review with external reporting, the proposed evidence corresponds to oversight of stale operating procedure and change management. It would leave the actual remediation, apply documented external filing decisions and required submission routes, without a clear operational test in this case.
Question 377
An AFC reviewer is assessing 2 distinct situations. Situation 1: An assessment of mutual legal assistance for obtaining foreign evidence asks whether the duty to follow the applicable formal international evidence-request process was actually discharged. Situation 2: An assessment of egmont-style FIU operational cooperation asks whether the duty to use authorized secure FIU channels within applicable legal limitations was actually discharged. Which records directly evidence fulfillment of an obligation in one of these situations? Choose TWO.
- Authorized intelligence exchange record with sharing restrictions
- Validated MLA request and evidence provenance
- Joint examination terms and approved information-sharing record
- Documented FIU request, consent conditions, and response
- Approval and audit record for exchanged indicators
Explanation
Correct Answers
B:For situation 1, an audit trail has to tie the recorded outcome to the relevant legal or governance requirement. It allows supervisors or auditors to assess whether the required team acted to follow the applicable formal international evidence-request process under central authority for mutual legal assistance.
D:For situation 2, this record links the obligation to use authorized secure FIU channels within applicable legal limitations with actual execution and provides a verifiable basis for review. It also helps demonstrate that financial intelligence units of the relevant jurisdictions acted within the appropriate scope.
Incorrect Answers
A:When examining the separate duty to route appropriate intelligence through authorized international channels as opposed to the current duty to follow the applicable formal international evidence-request process, the alternative is associated with FIU-to-FIU exchange using recognized cooperation channels and the duty to route appropriate intelligence through authorized international channels. Given the separate duty to route appropriate intelligence through authorized international channels as opposed to the current duty to follow the applicable formal international evidence-request process as the distinguishing point, in this item, situation 1 calls for action to follow the applicable formal international evidence-request process; situation 2 calls for action to use authorized secure FIU channels within applicable legal limitations. Regarding the duty to follow the applicable formal international evidence-request process while considering FIU-to-FIU exchange using recognized cooperation channels in this implementation evidence decision, it does not perform the particular proof role tested by these cases.
C:The alternative is associated with cross-border supervisory coordination and the duty to use established regulator-to-regulator channels and sharing safeguards. With the separate duty to use established regulator-to-regulator channels and sharing safeguards as opposed to the current duty to follow the applicable formal international evidence-request process in view, in this item, situation 1 calls for action to follow the applicable formal international evidence-request process; situation 2 calls for action to use authorized secure FIU channels within applicable legal limitations. Regarding the duty to follow the applicable formal international evidence-request process while considering cross-border supervisory coordination in this implementation evidence decision, it does not perform the particular proof role tested by these cases.
E:When examining the separate duty to confirm legal authority, scope, security, and use restrictions as opposed to the current duty to follow the applicable formal international evidence-request process, the alternative is associated with lawful inter-institution financial-crime information exchange and the duty to confirm legal authority, scope, security, and use restrictions. Given the separate duty to confirm legal authority, scope, security, and use restrictions as opposed to the current duty to follow the applicable formal international evidence-request process as the distinguishing point, in this item, situation 1 calls for action to follow the applicable formal international evidence-request process; situation 2 calls for action to use authorized secure FIU channels within applicable legal limitations. Regarding the duty to follow the applicable formal international evidence-request process while considering lawful inter-institution financial-crime information exchange in this implementation evidence decision, it does not perform the particular proof role tested by these cases.
Question 378
An AFC reviewer is assessing 2 distinct situations. Situation 1: Low-risk customers were repeatedly reviewed while high-risk cases waited overdue. Situation 2: A customer became a state-owned enterprise director, but profile refresh was postponed for three years. Which technical weaknesses each best explain a different observed failure? Choose TWO.
- Identifier collisions and entity resolution failure
- Uninterpretable pKYC refresh triggers
- Poor refresh prioritization by risk
- Missing event-driven KYC refresh
Explanation
Correct Answers
C:For situation 1, with the proposed capability of schedule review intensity based on risk and material events in view, this defect explains why the current tool misses or misclassifies the described activity. The remediation, schedule review intensity based on risk and material events, requires current customer risk tier and outstanding refresh age and should be verified through measure overdue refresh rates weighted by risk severity.
D:For situation 2, when examining the proposed capability of trigger reassessment from significant customer-role changes, the case reveals a specific failure mode in monitoring, screening, onboarding, or analytics. Addressing it requires trigger reassessment from significant customer-role changes; independent confirmation should include test update latency from public record to new risk classification instead of vendor claims alone.
Incorrect Answers
A:The alternative tackles identifier collisions and entity resolution failure by using build a mastered identifier with verified source lineage and unique cross-system identity keys and entity merge decisions. In assessing the competing solutions of build a mastered identifier with verified source lineage and schedule review intensity based on risk and material events, in the cases under review, situation 1 must address poor refresh prioritization by risk; situation 2 must address missing event-driven KYC refresh. This gap response targets a separate technical failure.
B:The alternative tackles uninterpretable pKYC refresh triggers by using capture model reasons and require explainable review decisions and feature changes, timestamps, and analyst feedback. With the competing solutions of capture model reasons and require explainable review decisions and schedule review intensity based on risk and material events in view, in the cases under review, situation 1 must address poor refresh prioritization by risk; situation 2 must address missing event-driven KYC refresh. This gap response targets a separate technical failure.
Question 379
An analyst challenges a working hypothesis of public-contract proceeds diverted through phantom vendors because the file lacks verification of whether billed subcontract work actually occurred. Independent source material is needed before disposition. Which source should the analyst check to settle the disputed fact?
- Wallet attribution and donor purpose records
- Work completion certificates and vendor ownership
- Partner verification and independently corroborated delivery reports
- End-use declaration and final consignee confirmation
- Inventory movement and authenticated sales receipts
Explanation
Correct Answer
B:This material provides a practical way to establish whether billed subcontract work actually occurred. When examining the need to establish whether billed subcontract work actually occurred, its value is in linking the customer's asserted purpose to observed facts, so investigators can articulate a reasoned conclusion.
Incorrect Answers
A:The proposed source is most informative for a question about who controls the wallets receiving converted assets. With the distinction between establishing who controls the wallets receiving converted assets and establishing whether billed subcontract work actually occurred in view, the current case calls for establishing whether billed subcontract work actually occurred; using this instead could leave the customer explanation largely untested.
C:When examining the distinction between establishing whether intended beneficiaries received the funds and establishing whether billed subcontract work actually occurred, the document helps with investigations focused on whether intended beneficiaries received the funds. In this case the evidential gap lies with whether billed subcontract work actually occurred, so the reviewer needs a more targeted source before reaching a conclusion.
D:Such records could help establish the end user's intended application for the machinery in a different investigation. Here the precise evidential question involves establishing whether billed subcontract work actually occurred, so the suggested material would be indirect and may not resolve the decisive uncertainty.
E:In assessing the distinction between establishing whether sale proceeds correspond to actual bullion transactions and establishing whether billed subcontract work actually occurred, the proposed source is most informative for a question about whether sale proceeds correspond to actual bullion transactions. With the distinction between establishing whether sale proceeds correspond to actual bullion transactions and establishing whether billed subcontract work actually occurred in view, the current case calls for establishing whether billed subcontract work actually occurred; using this instead could leave the customer explanation largely untested.
Question 380
A bank submits required suspicious activity reports but does not retain the basis for decisions not to file on escalated cases. What is the principal control-design or governance failure?
- Undocumented no-file decisions
- Incorrect entity-specific reporting jurisdiction
- Undefined committee decision rights
- Confusing internal review with external reporting
Explanation
Correct Answer
A:With the need to document defensible investigation conclusions and retention under local policy in view, the breakdown is evident in the facts of the case, not merely in a missing policy label. When examining the need to document defensible investigation conclusions and retention under local policy, it requires the team to document defensible investigation conclusions and retention under local policy; a review can then use approved case closure notes with reporting rationale to confirm actual execution.
Incorrect Answers
B:The corresponding consequence of this alternative would be evidenced through country-by-country filing decision and submission records. The stated control problem has a different operating symptom, addressed by measures to document defensible investigation conclusions and retention under local policy.
C:That deficiency is typically owned by committee chair and corporate governance secretariat and rectified through measures to establish terms of reference specifying membership, quorum, and escalation. This case calls for steps to document defensible investigation conclusions and retention under local policy, meaning the alternative misses the central governance or process gap.
D:This weakness would appear in a process requiring staff to apply documented external filing decisions and required submission routes. It is not the defining break in the present case, where the remediation must be designed to document defensible investigation conclusions and retention under local policy to address the observed behavior.