Question 390
A challenge panel will not accept a sign-off for undocumented no-file decisions based only on policy language. The institution says it can now document defensible investigation conclusions and retention under local policy; an operating record is necessary. What would substantiate resolution of the identified AFC weakness?
- Regulatory filing confirmation and supporting case chronology
- Approved case closure notes with reporting rationale
- Policy hierarchy linking principles, standards, and procedures
- Country-by-country filing decision and submission records
Explanation
Correct Answer
B:This artifact would show whether document defensible investigation conclusions and retention under local policy was executed and whether undocumented no-file decisions was reduced in practice. With the deficiency of undocumented no-file decisions in view, A signed policy without operating evidence would be an insufficient effectiveness test.
Incorrect Answers
A:The artifact tests a different process led by designated regulatory reporting officer. It does not adequately demonstrate that undocumented no-file decisions is now controlled, even if it could support wider AFC assurance.
C:The proposed evidence corresponds to oversight of confusing procedure instructions with policy requirements. It would leave the actual remediation, document defensible investigation conclusions and retention under local policy, without a clear operational test in this case.
D:When examining the contrast between incorrect entity-specific reporting jurisdiction and undocumented no-file decisions, that documentation is meaningful where measures to map local STR obligations for each regulated entity and activity are the expected control. The present issue is undocumented no-file decisions, and the reviewer needs records specifically tracing the chosen remedy.
Question 391
A risk owner is designing safeguards against charity channels facilitating off-purpose asset transfers in cases associated with nonprofit accounts used for undisclosed third-party exchange. Broad restrictions on unrelated customers would not address the particular weakness. Which safeguard most directly addresses this exposure?
- Third-party payer scrutiny for high-value sales
- Restricted-purpose disbursement checks for virtual assets
- Proportionate charity partner monitoring and delivery controls
- Enhanced due diligence for bullion merchants
Explanation
Correct Answer
B:The case needs a control aimed at charity channels facilitating off-purpose asset transfers, not a generic restriction on all customers. When examining the exposure to charity channels facilitating off-purpose asset transfers, the proposed design introduces that verification or detection step so staff can prevent, identify, and escalate exceptions consistently.
Incorrect Answers
A:This control addresses concealed purchase funding through unrelated accounts, a different vulnerability. The current exposure is charity channels facilitating off-purpose asset transfers; installing the alternative without a tailored check would leave the key failure path substantially open.
C:The alternative would mitigate risks involving misdirected humanitarian payments without field assurance, not the principal failure here. The relevant control design must be built around charity channels facilitating off-purpose asset transfers, with appropriate evidence and exceptions.
D:That safeguard is appropriate for a setting where the exposure is anonymous high-value commodity payments. This scenario instead exposes charity channels facilitating off-purpose asset transfers; a control operating on the other mechanism would not be the most proportionate response.
Question 392
The fraud team detects takeover patterns, but the AML team never receives associated mule account information. Which program weakness is most directly exposed?
- Training that omits operational escalation
- Lack of role-based financial-crime training
- Compliance team reporting structure that weakens independence
- Missing cross-functional escalation for material reputational threats
- Siloed fraud and AML risk management
Explanation
Correct Answer
E:With the need to create controlled intelligence flows between fraud and AFC teams in view, the situation reveals this defect because the existing workflow does not reliably achieve the relevant AFC objective. The corresponding repair is to create controlled intelligence flows between fraud and AFC teams, with ownership resting in fraud-AML joint risk coordination lead.
Incorrect Answers
A:This weakness would appear in a process requiring staff to practice reporting workflows and provide usable escalation guidance. It is not the defining break in the present case, where the remediation must be designed to create controlled intelligence flows between fraud and AFC teams to address the observed behavior.
B:When examining the contrast between lack of role-based financial-crime training and siloed fraud and AML risk management, the alternative diagnosis describes an issue corrected through steps to deliver modules matched to job risk and control responsibilities. The scenario instead points to a failure requiring the team to create controlled intelligence flows between fraud and AFC teams; confusing the two would send corrective effort to the wrong workflow.
C:The corresponding consequence of this alternative would be evidenced through organization chart and conflict-of-interest escalation design. The stated control problem has a different operating symptom, addressed by measures to create controlled intelligence flows between fraud and AFC teams.
D:In assessing the contrast between missing cross-functional escalation for material reputational threats and siloed fraud and AML risk management, that deficiency is typically owned by reputational-risk and AFC senior governance liaison and rectified through measures to route relevant adverse media to reputational and AFC risk owners. This case calls for steps to create controlled intelligence flows between fraud and AFC teams, meaning the alternative misses the central governance or process gap.
Question 393
A compliance task requires an organization to translate typology signals into an institutional exposure review. The steering committee has not identified the function with the relevant authority or responsibility. Which body or function has the specifically described lead responsibility?
- Institution's compliance legal-advisory function
- National AML coordination authority
- Sector's competent supervisory regulator
- Enterprise AFC risk-intelligence function
- FIU strategic analysis and reporting function
Explanation
Correct Answer
E:The requested task is linked to the obligation to translate typology signals into an institutional exposure review, which falls within this function's described remit. Given the compliance duty to translate typology signals into an institutional exposure review as the distinguishing point, the responsibility is not interchangeable with external standards setters, private advisers, or unrelated enforcement functions.
Incorrect Answers
A:When examining the separate duty to determine the legally applicable reporting threshold and duty as opposed to the current duty to translate typology signals into an institutional exposure review, this function normally leads work such as determine the legally applicable reporting threshold and duty, which is distinct from the issue at hand. The current responsibility relates to translate typology signals into an institutional exposure review, so routing it here would misassign accountability.
B:Given the separate duty to recalibrate location and delivery-channel risk factors as opposed to the current duty to translate typology signals into an institutional exposure review as the distinguishing point, its proper remit concerns national risk assessment as input to entity-level risk and implementation of recalibrate location and delivery-channel risk factors. It could supply input, but the named task is owned by the body or team responsible for translate typology signals into an institutional exposure review.
C:The alternative is associated with control self-assessment linked to supervisory findings for another kind of obligation. It is not the authority chiefly accountable for translate typology signals into an institutional exposure review in the circumstances described.
D:With the separate duty to treat perception ratings as one risk input and screen against official lists as opposed to the current duty to translate typology signals into an institutional exposure review in view, that organization may contribute relevant information but primarily handles treat perception ratings as one risk input and screen against official lists. It cannot replace the proper lead for translate typology signals into an institutional exposure review and its associated review record.
Question 394
A team has introduced a solution to schedule review intensity based on risk and material events in response to poor refresh prioritization by risk. Independent assurance requests a repeatable test using dependable current customer risk tier and outstanding refresh age. What acceptance test best demonstrates control effectiveness?
- Test risk-change triggers from event capture to review completion
- Measure overdue refresh rates weighted by risk severity
- Test update latency from public record to new risk classification
- Check that triggered reviews have traceable underlying events
Explanation
Correct Answer
B:The test measures whether schedule review intensity based on risk and material events actually addresses poor refresh prioritization by risk, using current customer risk tier and outstanding refresh age as a controlled input. With the technical failure of poor refresh prioritization by risk in view, it is more probative than high-level volume statistics or an unchallenged vendor demonstration.
Incorrect Answers
A:This would be useful when implementing link onboarding records to periodic and event-triggered reassessment workflows, but the key failure here is poor refresh prioritization by risk. In assessing the difference between point-in-time onboarding tools without ongoing lifecycle review and poor refresh prioritization by risk, it may pass even if the present defect persists, so it is not the most probative test.
C:The alternative is tailored to trigger reassessment from significant customer-role changes and its separate data requirement. It would not provide decisive evidence that the remedy in this scenario eliminates poor refresh prioritization by risk.
D:That exercise tests a different analytical risk, uninterpretable pKYC refresh triggers. The acceptance test for this case should measure the actual outcome of schedule review intensity based on risk and material events, rather than a nearby but unrelated metric.
Question 395
A minister's adult relative seeks a large account while declining to describe the source of personal wealth. What is the most defensible risk characterization at this stage?
- Failure to refresh PEP status and exposure
- Close-associate PEP concealment of beneficial ownership
- PEP family-member wealth opacity
- Revolving-door corruption and influence risk
Explanation
Correct Answer
C:This characterization follows from the particular flow and relationships described, especially the need to establish whether the assets derive from independent legitimate activity. If substantiated, the resulting vulnerability is unverified public-office-linked wealth; investigators should separate the alert from proof of the underlying offense.
Incorrect Answers
A:In assessing the distinction between exposure to stale classification of politically exposed customers and exposure to unverified public-office-linked wealth, the alternative addresses activity that might produce stale classification of politically exposed customers and would require evidence about whether current public roles change the customer's risk. Those are not the facts that drive this scenario, whose defining task is to establish whether the assets derive from independent legitimate activity.
B:With the distinction between exposure to public-sector funds routed to concealed associates and exposure to unverified public-office-linked wealth in view, that interpretation is associated with a different situation where investigators must establish whether the intermediary is controlled by a PEP associate. It would direct attention toward public-sector funds routed to concealed associates, whereas this case principally calls for establishing whether the assets derive from independent legitimate activity; the signals should not be treated as interchangeable.
D:Given the distinction between exposure to payments tied to influence over government awards and exposure to unverified public-office-linked wealth as the distinguishing point, the relevant clue for this alternative would be the need to establish whether advisory fees correspond to genuine services. No comparable fact is central to this case; the key unresolved link is establishing whether the assets derive from independent legitimate activity, making the proposed characterization weaker.
Question 396
Independent testing has confirmed siloed fraud and AML risk management. Management agrees that restating the existing policy will not resolve the process breakdown. Which corrective measure most directly closes this gap?
- Create controlled intelligence flows between fraud and AFC teams
- Enforce conflict disclosure, segregation, and privileged action review
- Define control standards, exception SLAs, and oversight sampling
- Route relevant adverse media to reputational and AFC risk owners
Explanation
Correct Answer
A:This responds to the identified weakness, siloed fraud and AML risk management, at the point where the process breaks down. Assigning the change to fraud-AML joint risk coordination lead and testing cross-team referrals linked to AML investigations makes remediation verifiable rather than aspirational.
Incorrect Answers
B:When examining the contrast between insider conflict and unauthorized alert override risk and siloed fraud and AML risk management, the proposed step is appropriate when insider conflict and unauthorized alert override risk is observed. The case instead concerns siloed fraud and AML risk management; the alternative would not repair the particular failing in time or at the correct control point.
C:This approach is usually evidenced by vendor service-level tests and exception remediation log, addressing outsourced onboarding assurance gap. It is not a substitute for the targeted corrective action needed to resolve siloed fraud and AML risk management in this workflow.
D:The alternative may improve a different part of AFC governance, but it primarily tackles missing cross-functional escalation for material reputational threats. The actual defect, siloed fraud and AML risk management, requires a different control intervention.
Question 397
An independent review is verifying FIU typology dissemination as a risk intelligence source. The expected action is to translate typology signals into an institutional exposure review, and the reviewer needs a record of performance rather than a statement of policy. Which documentation best shows that the relevant requirement was implemented?
- Control self-assessment linked to supervisory findings
- Completed respondent due diligence questionnaire and verification
- Jurisdiction-specific reporting requirements mapping
- Documented scenario gap review against published typology
Explanation
Correct Answer
D:With the compliance duty to translate typology signals into an institutional exposure review in view, this is the best operational audit trail because it captures the relevant control or decision. It can be reconciled to the duty to translate typology signals into an institutional exposure review and the mandate of FIU strategic analysis and reporting function without mistaking guidance for proof.
Incorrect Answers
A:When examining the separate duty to benchmark internal CDD failures against identified sector weaknesses as opposed to the current duty to translate typology signals into an institutional exposure review, such evidence is useful when checking whether benchmark internal CDD failures against identified sector weaknesses occurred. The scenario instead requires proof that the responsible team acted to translate typology signals into an institutional exposure review, so the proposed artifact would not show the relevant control or decision.
B:Given the separate duty to use structured respondent due diligence while confirming legal minima separately as opposed to the current duty to translate typology signals into an institutional exposure review as the distinguishing point, this documentation is linked to wolfsberg correspondent-banking due diligence guidance and work performed by wolfsberg Group industry standards participants. It does not directly demonstrate the implementation of the obligation to translate typology signals into an institutional exposure review in this case.
C:The record supports another process: determine the legally applicable reporting threshold and duty. The reviewer needs evidence of work to translate typology signals into an institutional exposure review, and the proposed record would leave that operational requirement unproven.
Question 398
A machine-learning service flags customers for KYC refresh but analysts cannot tell which changes produced the recommendation. Which failure mode should the control owner investigate first?
- OCR extraction mistaken for document authentication
- Stale external ownership data
- Missing event-driven KYC refresh
- Uninterpretable pKYC refresh triggers
- Poor refresh prioritization by risk
Explanation
Correct Answer
D:When examining the proposed capability of capture model reasons and require explainable review decisions, this defect explains why the current tool misses or misclassifies the described activity. The remediation, capture model reasons and require explainable review decisions, requires feature changes, timestamps, and analyst feedback and should be verified through check that triggered reviews have traceable underlying events.
Incorrect Answers
A:Given the competing solutions of use document authenticity checks and trusted issuer verification where available and capture model reasons and require explainable review decisions as the distinguishing point, that defect is most directly corrected by use document authenticity checks and trusted issuer verification where available, whose inputs include document feature evidence and issuer reference data. In assessing the competing solutions of use document authenticity checks and trusted issuer verification where available and capture model reasons and require explainable review decisions, here the observed behavior calls for capture model reasons and require explainable review decisions, so the alternative would misdirect the technical fix.
B:The problem described by this alternative concerns sample recently changed firms for ownership accuracy and a separate analytical failure. It does not capture the central weakness the institution needs to resolve with capture model reasons and require explainable review decisions.
C:This problem is normally investigated with trigger reassessment from significant customer-role changes and validated through test update latency from public record to new risk classification. Those activities address a different failure mode; the case requires capture model reasons and require explainable review decisions supported by feature changes, timestamps, and analyst feedback.
E:That defect is most directly corrected by schedule review intensity based on risk and material events, whose inputs include current customer risk tier and outstanding refresh age. In assessing the competing solutions of schedule review intensity based on risk and material events and capture model reasons and require explainable review decisions, here the observed behavior calls for capture model reasons and require explainable review decisions, so the alternative would misdirect the technical fix.
Question 399
A case was escalated for concern about PEP family-member wealth opacity, but whether the assets derive from independent legitimate activity remains unverified. The investigator must choose the most probative corroboration. Which evidence is most probative of the unresolved link?
- Tender chronology and documented payment purpose
- Beneficial ownership network and relationship checks
- Updated public-office information and customer profile
- Independent source-of-wealth evidence and relationship mapping
Explanation
Correct Answer
D:This material provides a practical way to establish whether the assets derive from independent legitimate activity. In assessing the need to establish whether the assets derive from independent legitimate activity, its value is in linking the customer's asserted purpose to observed facts, so investigators can articulate a reasoned conclusion.
Incorrect Answers
A:In assessing the distinction between establishing whether the transfer is connected to contract consideration and establishing whether the assets derive from independent legitimate activity, the document helps with investigations focused on whether the transfer is connected to contract consideration. In this case the evidential gap lies with whether the assets derive from independent legitimate activity, so the reviewer needs a more targeted source before reaching a conclusion.
B:With the distinction between establishing whether the intermediary is controlled by a PEP associate and establishing whether the assets derive from independent legitimate activity in view, such records could help establish whether the intermediary is controlled by a PEP associate in a different investigation. Here the precise evidential question involves establishing whether the assets derive from independent legitimate activity, so the suggested material would be indirect and may not resolve the decisive uncertainty.
C:The proposed source is most informative for a question about whether current public roles change the customer's risk. The current case calls for establishing whether the assets derive from independent legitimate activity; using this instead could leave the customer explanation largely untested.
Question 400
Following a finding of siloed fraud and AML risk management, a committee approves the need to create controlled intelligence flows between fraud and AFC teams. Primary remediation responsibility is still unassigned. Which accountable function should lead the documented remediation?
- Fraud-AML joint risk coordination lead
- AFC learning and competency owner
- Reputational-risk and AFC senior governance liaison
- Head of AFC organizational planning
- First-line staff training and incident escalation lead
Explanation
Correct Answer
A:Primary ownership needs to sit with the function able to ensure that the organization can create controlled intelligence flows between fraud and AFC teams. The problem identified as siloed fraud and AML risk management requires accountability for actual process change; advice and independent testing are supporting, separate duties.
Incorrect Answers
B:Its normal responsibility would be addressing lack of role-based financial-crime training. It may advise or review here, but the accountable execution of measures to create controlled intelligence flows between fraud and AFC teams belongs in the process identified by this case.
C:That group is suited to producing escalation trace from screening finding to risk committee for another control issue. In the present case ownership must support measures to create controlled intelligence flows between fraud and AFC teams and closure of siloed fraud and AML risk management, not an unrelated assurance task.
D:The alternative's control domain is unbalanced compliance team capabilities, generally corrected through steps to build complementary prevention, detection, reporting, and assurance functions. Here the relevant weakness is siloed fraud and AML risk management, requiring a different remediation ownership and workplan.
E:This function has a remit connected with the duty to practice reporting workflows and provide usable escalation guidance, and the associated problem is training that omits operational escalation. The current repair requires the responsible team to create controlled intelligence flows between fraud and AFC teams, so it should not be allocated to a team without direct control over that work.