Question 430
A long-standing customer acquires a high-risk offshore subsidiary but no CDD refresh occurs because the calendar review is months away. What failure explains the described breakdown?
- Exit decision lacking lawful authority coordination
- Missing event-driven customer review
- Incomplete customer exit control execution
- Onboarding before required beneficial ownership resolution
Explanation
Correct Answer
B:In assessing the need to trigger KYC refresh on material ownership or risk changes, the situation reveals this defect because the existing workflow does not reliably achieve the relevant AFC objective. The corresponding repair is to trigger KYC refresh on material ownership or risk changes, with ownership resting in customer lifecycle due diligence team.
Incorrect Answers
A:Given the contrast between exit decision lacking lawful authority coordination and missing event-driven customer review as the distinguishing point, that deficiency is typically owned by MLRO and legal hold coordination function and rectified through measures to consult legal and designated authorities before action within applicable rules. This case calls for steps to trigger KYC refresh on material ownership or risk changes, meaning the alternative misses the central governance or process gap.
C:The alternative diagnosis describes an issue corrected through steps to coordinate account, channel, and product closure with legal holds considered. The scenario instead points to a failure requiring the team to trigger KYC refresh on material ownership or risk changes; confusing the two would send corrective effort to the wrong workflow.
D:When examining the contrast between onboarding before required beneficial ownership resolution and missing event-driven customer review, the corresponding consequence of this alternative would be evidenced through onboarding gating log and verified ownership file. The stated control problem has a different operating symptom, addressed by measures to trigger KYC refresh on material ownership or risk changes.
Question 431
A senior official's account receives a payment from a government contractor shortly after a tender decision. What is the most defensible risk characterization at this stage?
- Revolving-door corruption and influence risk
- PEP family-member wealth opacity
- Failure to refresh PEP status and exposure
- Treating PEP status as automatic evidence of crime
- Potential kickback payment to a public official
Explanation
Correct Answer
E:The pivotal investigative task is to establish whether the transfer is connected to contract consideration. Examining that uncertainty is how the investigator distinguishes this scenario from adjacent typologies and evaluates the exposure to unexplained contractor transfers to decision-makers.
Incorrect Answers
A:The alternative addresses activity that might produce payments tied to influence over government awards and would require evidence about whether advisory fees correspond to genuine services. Those are not the facts that drive this scenario, whose defining task is to establish whether the transfer is connected to contract consideration.
B:That interpretation is associated with a different situation where investigators must establish whether the assets derive from independent legitimate activity. It would direct attention toward unverified public-office-linked wealth, whereas this case principally calls for establishing whether the transfer is connected to contract consideration; the signals should not be treated as interchangeable.
C:This typology would be worth testing when the issue is establishing whether current public roles change the customer's risk, leading to exposure from stale classification of politically exposed customers. The present facts instead call for establishing whether the transfer is connected to contract consideration, so choosing it would send the investigation toward a different mechanism.
D:The relevant clue for this alternative would be the need to establish whether individual risk factors justify enhanced controls. No comparable fact is central to this case; the key unresolved link is establishing whether the transfer is connected to contract consideration, making the proposed characterization weaker.
Question 432
An AFC control owner acknowledges missing event-driven customer review, and assurance requests an implementable correction at the point of failure. What intervention should be prioritized to repair the deficient control?
- Consult legal and designated authorities before action within applicable rules
- Stop activation until mandatory identification and verification are satisfied or authorized exceptions apply
- Trigger KYC refresh on material ownership or risk changes
- Reassess control effectiveness and reflect material unresolved issues
Explanation
Correct Answer
C:Given the deficiency of missing event-driven customer review as the distinguishing point, the correction belongs to the deficient operational or governance process rather than an unrelated control. It reduces missing event-driven customer review when customer lifecycle due diligence team implements it and collects change event record and renewed customer risk assessment.
Incorrect Answers
A:With the contrast between exit decision lacking lawful authority coordination and missing event-driven customer review in view, the proposed step is appropriate when exit decision lacking lawful authority coordination is observed. The case instead concerns missing event-driven customer review; the alternative would not repair the particular failing in time or at the correct control point.
B:This approach is usually evidenced by onboarding gating log and verified ownership file, addressing onboarding before required beneficial ownership resolution. It is not a substitute for the targeted corrective action needed to resolve missing event-driven customer review in this workflow.
D:In assessing the contrast between understated residual risk due to open deficiencies and missing event-driven customer review, this intervention solves a different weakness, namely understated residual risk due to open deficiencies. It leaves the current missing event-driven customer review substantially unresolved because the broken process here requires trigger KYC refresh on material ownership or risk changes.
Question 433
An AFC reviewer is assessing 2 distinct situations. Situation 1: The required operating or regulatory task is to recalibrate location and delivery-channel risk factors. Situation 2: The required operating or regulatory task is to use structured respondent due diligence while confirming legal minima separately. Which authorities or functions have the described responsibility for one of these cases? Choose TWO.
- Sector's competent supervisory regulator
- Wolfsberg Group industry standards participants
- Enterprise AFC risk-intelligence function
- National AML coordination authority
- FIU strategic analysis and reporting function
Explanation
Correct Answers
B:For situation 2, given the compliance duty to use structured respondent due diligence while confirming legal minima separately as the distinguishing point, the function matches the precise jurisdictional and operational task in the stem. Its performance is reflected in completed respondent due diligence questionnaire and verification, rather than in a generic statement of standards.
D:For situation 1, this body or team has the relevant authority or duty for the action in this case: recalibrate location and delivery-channel risk factors. The distinction matters because entity risk assessment updated for published country findings must be accountable to the proper decision maker.
Incorrect Answers
A:When examining the separate duty to benchmark internal CDD failures against identified sector weaknesses as opposed to the current duty to recalibrate location and delivery-channel risk factors, the alternative is associated with thematic supervisory findings informing control expectations and the duty to benchmark internal CDD failures against identified sector weaknesses. Given the separate duty to benchmark internal CDD failures against identified sector weaknesses as opposed to the current duty to recalibrate location and delivery-channel risk factors as the distinguishing point, in this item, situation 1 calls for action to recalibrate location and delivery-channel risk factors; situation 2 calls for action to use structured respondent due diligence while confirming legal minima separately. Regarding the duty to recalibrate location and delivery-channel risk factors while considering thematic supervisory findings informing control expectations in this responsible function decision, it does not perform the particular actor role tested by these cases.
C:In assessing the separate duty to treat perception ratings as one risk input and screen against official lists as opposed to the current duty to recalibrate location and delivery-channel risk factors, the alternative is associated with corruption-risk indicator versus legally binding sanctions data and the duty to treat perception ratings as one risk input and screen against official lists. With the separate duty to treat perception ratings as one risk input and screen against official lists as opposed to the current duty to recalibrate location and delivery-channel risk factors in view, in this item, situation 1 calls for action to recalibrate location and delivery-channel risk factors; situation 2 calls for action to use structured respondent due diligence while confirming legal minima separately. Regarding the duty to recalibrate location and delivery-channel risk factors while considering corruption-risk indicator versus legally binding sanctions data in this responsible function decision, it does not perform the particular actor role tested by these cases.
E:The alternative is associated with FIU typology dissemination as a risk intelligence source and the duty to translate typology signals into an institutional exposure review. Given the separate duty to translate typology signals into an institutional exposure review as opposed to the current duty to recalibrate location and delivery-channel risk factors as the distinguishing point, in this item, situation 1 calls for action to recalibrate location and delivery-channel risk factors; situation 2 calls for action to use structured respondent due diligence while confirming legal minima separately. Regarding the duty to recalibrate location and delivery-channel risk factors while considering FIU typology dissemination as a risk intelligence source in this responsible function decision, it does not perform the particular actor role tested by these cases.
Question 434
An acceptance gate for work to use identity context and relevance scoring before escalation must prove that it addresses low-precision adverse-media entity disambiguation. The remedy depends on article entities, subject identifiers, and source reliability, so a result check is required. How should the owner test whether the fix works in realistic conditions?
- Test whether stale stories trigger unnecessary repeat escalations
- Sample precision and missed relevant articles by name frequency
- Measure precision and missed suspicious cases after changes
- Review role-classification errors against labeled articles
Explanation
Correct Answer
B:In assessing the technical failure of low-precision adverse-media entity disambiguation, the proposed validation directly challenges the weakness, not an unrelated performance statistic. It can reveal whether use identity context and relevance scoring before escalation works on the relevant data and exceptions before broader deployment.
Incorrect Answers
A:The alternative is tailored to track publication dates, event dates, and prior case conclusions and its separate data requirement. It would not provide decisive evidence that the remedy in this scenario eliminates low-precision adverse-media entity disambiguation.
C:This would be useful when implementing add payroll pattern recognition and tune controls using outcomes, but the key failure here is low-precision adverse-media entity disambiguation. When examining the difference between low rule precision due to missing customer context and low-precision adverse-media entity disambiguation, it may pass even if the present defect persists, so it is not the most probative test.
D:This check would reveal failures like loss of role and allegation context in media screening, not whether use identity context and relevance scoring before escalation corrects the problem in this case. The relevant validation must challenge low-precision adverse-media entity disambiguation using article entities, subject identifiers, and source reliability.
Question 435
A case was escalated for concern about potential kickback payment to a public official, but whether the transfer is connected to contract consideration remains unverified. The investigator must choose the most probative corroboration. Which evidence is most probative of the unresolved link?
- Individual PEP risk assessment and transaction history
- Service deliverables and procurement history
- Tender chronology and documented payment purpose
- Independent source-of-wealth evidence and relationship mapping
Explanation
Correct Answer
C:The central evidential gap concerns establishing whether the transfer is connected to contract consideration; this material is designed to resolve that specific uncertainty. Given the need to establish whether the transfer is connected to contract consideration as the distinguishing point, it should be checked against account-level events and independent sources, not accepted solely because the customer supplies it.
Incorrect Answers
A:The document helps with investigations focused on whether individual risk factors justify enhanced controls. In this case the evidential gap lies with whether the transfer is connected to contract consideration, so the reviewer needs a more targeted source before reaching a conclusion.
B:Such records could help establish whether advisory fees correspond to genuine services in a different investigation. Here the precise evidential question involves establishing whether the transfer is connected to contract consideration, so the suggested material would be indirect and may not resolve the decisive uncertainty.
D:Given the distinction between establishing whether the assets derive from independent legitimate activity and establishing whether the transfer is connected to contract consideration as the distinguishing point, this can support due diligence on whether the assets derive from independent legitimate activity, a separate risk dimension. It is not the primary independent check for whether the transfer is connected to contract consideration, which is the missing link in the described funds movement.
Question 436
After missing event-driven customer review was identified, the corrective plan required steps to trigger KYC refresh on material ownership or risk changes. Governance now needs an operational owner with decision rights. Who should own the corrective response, with other functions providing challenge as needed?
- Customer lifecycle due diligence team
- First-line onboarding control owner
- MLRO and legal hold coordination function
- Product financial-crime risk owner
Explanation
Correct Answer
A:The named function is positioned to deliver the necessary change: trigger KYC refresh on material ownership or risk changes. It can coordinate other teams while remaining responsible for closing missing event-driven customer review and producing change event record and renewed customer risk assessment.
Incorrect Answers
B:That group is suited to producing onboarding gating log and verified ownership file for another control issue. In the present case ownership must support measures to trigger KYC refresh on material ownership or risk changes and closure of missing event-driven customer review, not an unrelated assurance task.
C:The alternative's control domain is exit decision lacking lawful authority coordination, generally corrected through steps to consult legal and designated authorities before action within applicable rules. Here the relevant weakness is missing event-driven customer review, requiring a different remediation ownership and workplan.
D:This function has a remit connected with the duty to design corridor-specific monitoring and onboarding requirements, and the associated problem is failure to tailor controls to product and geographic risk. The current repair requires the responsible team to trigger KYC refresh on material ownership or risk changes, so it should not be allocated to a team without direct control over that work.
Question 437
A regulatory team states that it has fulfilled the duty to recalibrate location and delivery-channel risk factors. The auditor requests an artifact that substantiates implementation under national risk assessment as input to entity-level risk. Which artifact best substantiates that the action was carried out appropriately?
- Source inventory separating risk indices from sanctions lists
- Entity risk assessment updated for published country findings
- Control self-assessment linked to supervisory findings
- Documented scenario gap review against published typology
Explanation
Correct Answer
B:Given the compliance duty to recalibrate location and delivery-channel risk factors as the distinguishing point, this is the best operational audit trail because it captures the relevant control or decision. It can be reconciled to the duty to recalibrate location and delivery-channel risk factors and the mandate of national AML coordination authority without mistaking guidance for proof.
Incorrect Answers
A:The record supports another process: treat perception ratings as one risk input and screen against official lists. The reviewer needs evidence of work to recalibrate location and delivery-channel risk factors, and the proposed record would leave that operational requirement unproven.
C:In assessing the separate duty to benchmark internal CDD failures against identified sector weaknesses as opposed to the current duty to recalibrate location and delivery-channel risk factors, such evidence is useful when checking whether benchmark internal CDD failures against identified sector weaknesses occurred. The scenario instead requires proof that the responsible team acted to recalibrate location and delivery-channel risk factors, so the proposed artifact would not show the relevant control or decision.
D:With the separate duty to translate typology signals into an institutional exposure review as opposed to the current duty to recalibrate location and delivery-channel risk factors in view, this documentation is linked to FIU typology dissemination as a risk intelligence source and work performed by FIU strategic analysis and reporting function. It does not directly demonstrate the implementation of the obligation to recalibrate location and delivery-channel risk factors in this case.
Question 438
A screening provider classifies any mention of a company in a negative news story as an allegation of wrongdoing by the company. Which technical or analytical weakness explains the observed result?
- Low-precision adverse-media entity disambiguation
- Failure to preserve event timing and disposition
- Loss of role and allegation context in media screening
- Uncontrolled screening refresh interval and list-update trigger
- Insufficient model explainability and decision governance
Explanation
Correct Answer
C:With the proposed capability of distinguish subject, victim, witness, and unrelated mention in view, the case reveals a specific failure mode in monitoring, screening, onboarding, or analytics. Addressing it requires distinguish subject, victim, witness, and unrelated mention; independent confirmation should include review role-classification errors against labeled articles instead of vendor claims alone.
Incorrect Answers
A:Given the competing solutions of use identity context and relevance scoring before escalation and distinguish subject, victim, witness, and unrelated mention as the distinguishing point, this problem is normally investigated with use identity context and relevance scoring before escalation and validated through sample precision and missed relevant articles by name frequency. In assessing the competing solutions of use identity context and relevance scoring before escalation and distinguish subject, victim, witness, and unrelated mention, those activities address a different failure mode; the case requires distinguish subject, victim, witness, and unrelated mention supported by entity-role labels and allegation extraction evidence.
B:The alternative would explain a setting that needs article chronology and case resolution status. The present tool's failure is different and should instead be tested through review role-classification errors against labeled articles, making this diagnosis less defensible.
D:When examining the competing solutions of initiate appropriate rescreening when relevant lists change and distinguish subject, victim, witness, and unrelated mention, the problem described by this alternative concerns measure list-publication-to-rescreening completion time and a separate analytical failure. It does not capture the central weakness the institution needs to resolve with distinguish subject, victim, witness, and unrelated mention.
E:This problem is normally investigated with provide interpretable reasons, validation, and human oversight and validated through test whether independent reviewers can reproduce key decisions. In assessing the competing solutions of provide interpretable reasons, validation, and human oversight and distinguish subject, victim, witness, and unrelated mention, those activities address a different failure mode; the case requires distinguish subject, victim, witness, and unrelated mention supported by entity-role labels and allegation extraction evidence.
Question 439
An AFC reviewer is assessing 2 distinct situations. Situation 1: A business unit is exposed to unexplained contractor transfers to decision-makers connected with potential kickback payment to a public official. Situation 2: A business unit is exposed to public-sector funds routed to concealed associates connected with close-associate PEP concealment of beneficial ownership. Which safeguards directly mitigate the distinctive exposure in one of these situations? Choose TWO.
- PEP-related conflict-of-interest escalation
- Risk-based PEP-related enhanced due diligence
- EDD on PEP close associates and related entities
- Risk-based acceptance and review rather than automatic exit
- Corruption-triggered transaction review for PEP accounts
Explanation
Correct Answers
C:For situation 2, the case needs a control aimed at public-sector funds routed to concealed associates, not a generic restriction on all customers. Given the exposure to public-sector funds routed to concealed associates as the distinguishing point, the proposed design introduces that verification or detection step so staff can prevent, identify, and escalate exceptions consistently.
E:For situation 1, this measure addresses unexplained contractor transfers to decision-makers, rather than a different typology. With the exposure to unexplained contractor transfers to decision-makers in view, staff should apply it to the relevant customer, product, or transaction stage and preserve evidence of challenge and follow-up.
Incorrect Answers
A:The alternative control is designed for payments tied to influence over government awards. With the distinction between exposure to payments tied to influence over government awards and exposure to unexplained contractor transfers to decision-makers in view, in this set, situation 1 is exposed to unexplained contractor transfers to decision-makers; situation 2 is exposed to public-sector funds routed to concealed associates. Regarding establishing whether the transfer is connected to contract consideration when evaluating revolving-door corruption and influence risk in this risk-mitigating control decision, the proposed safeguard leaves those particular mechanisms unaddressed.
B:The alternative control is designed for unverified public-office-linked wealth. When examining the distinction between exposure to unverified public-office-linked wealth and exposure to unexplained contractor transfers to decision-makers, in this set, situation 1 is exposed to unexplained contractor transfers to decision-makers; situation 2 is exposed to public-sector funds routed to concealed associates. Regarding establishing whether the transfer is connected to contract consideration when evaluating PEP family-member wealth opacity in this risk-mitigating control decision, the proposed safeguard leaves those particular mechanisms unaddressed.
D:The alternative control is designed for indiscriminate de-risking of legitimate PEP customers. In assessing the distinction between exposure to indiscriminate de-risking of legitimate PEP customers and exposure to unexplained contractor transfers to decision-makers, in this set, situation 1 is exposed to unexplained contractor transfers to decision-makers; situation 2 is exposed to public-sector funds routed to concealed associates. Regarding establishing whether the transfer is connected to contract consideration when evaluating treating PEP status as automatic evidence of crime in this risk-mitigating control decision, the proposed safeguard leaves those particular mechanisms unaddressed.
Question 440
Management says that missing event-driven customer review has been addressed through work to trigger KYC refresh on material ownership or risk changes. The reviewer must independently verify how the revised control performed. What artifact would an independent reviewer need to test operating effectiveness?
- Documented agency consultation and authorized exit decision
- Onboarding gating log and verified ownership file
- End-to-end sanctions test cases and gap ratings
- Change event record and renewed customer risk assessment
- Product closure checklist and outstanding obligation reconciliation
Explanation
Correct Answer
D:This artifact would show whether trigger KYC refresh on material ownership or risk changes was executed and whether missing event-driven customer review was reduced in practice. With the deficiency of missing event-driven customer review in view, A signed policy without operating evidence would be an insufficient effectiveness test.
Incorrect Answers
A:The proposed evidence corresponds to oversight of exit decision lacking lawful authority coordination. When examining the contrast between exit decision lacking lawful authority coordination and missing event-driven customer review, it would leave the actual remediation, trigger KYC refresh on material ownership or risk changes, without a clear operational test in this case.
B:When examining the contrast between onboarding before required beneficial ownership resolution and missing event-driven customer review, that documentation is meaningful where measures to stop activation until mandatory identification and verification are satisfied or authorized exceptions apply are the expected control. The present issue is missing event-driven customer review, and the reviewer needs records specifically tracing the chosen remedy.
C:Given the contrast between incomplete sanctions control effectiveness assessment and missing event-driven customer review as the distinguishing point, the artifact tests a different process led by sanctions risk assessment and control assurance team. It does not adequately demonstrate that missing event-driven customer review is now controlled, even if it could support wider AFC assurance.
E:With the contrast between incomplete customer exit control execution and missing event-driven customer review in view, the proposed evidence corresponds to oversight of incomplete customer exit control execution. When examining the contrast between incomplete customer exit control execution and missing event-driven customer review, it would leave the actual remediation, trigger KYC refresh on material ownership or risk changes, without a clear operational test in this case.