Question 470
Independent testing has confirmed CDD scope limited to identity only. Management agrees that restating the existing policy will not resolve the process breakdown. Which corrective measure most directly closes this gap?
- Collect expected activity and purpose information sufficient for risk-based monitoring
- Identify parties exercising relevant ownership and control before activation
- Require an appropriate presentation-attack-resistant liveness check
- Validate the change and determine whether risk level is affected
Explanation
Correct Answer
A:This responds to the identified weakness, CDD scope limited to identity only, at the point where the process breaks down. Assigning the change to customer due diligence onboarding owner and testing customer activity profile and purpose-of-account record makes remediation verifiable rather than aspirational.
Incorrect Answers
B:The proposed step is appropriate when incomplete legal-arrangement due diligence is observed. The case instead concerns CDD scope limited to identity only; the alternative would not repair the particular failing in time or at the correct control point.
C:With the contrast between digital identity liveness control weakness and CDD scope limited to identity only in view, this approach is usually evidenced by liveness test result and human exception review, addressing digital identity liveness control weakness. It is not a substitute for the targeted corrective action needed to resolve CDD scope limited to identity only in this workflow.
D:When examining the contrast between unverified change to material customer identification data and CDD scope limited to identity only, the alternative may improve a different part of AFC governance, but it primarily tackles unverified change to material customer identification data. The actual defect, CDD scope limited to identity only, requires a different control intervention.
Question 471
A case was escalated for concern about nominee aggregation in pooled investment subscriptions, but the underlying investors behind nominee subscribers remains unverified. The investigator must choose the most probative corroboration. Which evidence is most probative of the unresolved link?
- Trading account beneficial ownership and order records
- Verified beneficiary designation and payout instructions
- Look-through beneficial ownership of subscribing vehicles
- Omnibus intermediary CDD and subaccount records
Explanation
Correct Answer
C:The central evidential gap concerns establishing the underlying investors behind nominee subscribers; this material is designed to resolve that specific uncertainty. Given the need to establish the underlying investors behind nominee subscribers as the distinguishing point, it should be checked against account-level events and independent sources, not accepted solely because the customer supplies it.
Incorrect Answers
A:In assessing the distinction between establishing whether both sides of the trades share a controller and establishing the underlying investors behind nominee subscribers, the document helps with investigations focused on whether both sides of the trades share a controller. In this case the evidential gap lies with the underlying investors behind nominee subscribers, so the reviewer needs a more targeted source before reaching a conclusion.
B:Such records could help establish whether the recipient was nominated by the member in a different investigation. Here the precise evidential question involves establishing the underlying investors behind nominee subscribers, so the suggested material would be indirect and may not resolve the decisive uncertainty.
D:Given the distinction between establishing the identities of underlying beneficial investors and establishing the underlying investors behind nominee subscribers as the distinguishing point, this can support due diligence on the identities of underlying beneficial investors, a separate risk dimension. It is not the primary independent check for the underlying investors behind nominee subscribers, which is the missing link in the described funds movement.
Question 472
Accountability for work to collect expected activity and purpose information sufficient for risk-based monitoring is disputed following a finding of CDD scope limited to identity only. The owner must have control over execution. Where should primary ownership for resolving the weakness sit?
- Customer due diligence onboarding owner
- Trust and legal-arrangement CDD specialist
- Ongoing CDD and monitoring review team
- PEP enhanced due diligence decision owner
Explanation
Correct Answer
A:The central responsibility is to collect expected activity and purpose information sufficient for risk-based monitoring and retain evidence of completion, not simply offer second opinions. That aligns with the work needed to resolve CDD scope limited to identity only and maintain customer activity profile and purpose-of-account record.
Incorrect Answers
B:When examining the contrast between incomplete legal-arrangement due diligence and CDD scope limited to identity only, the alternative's control domain is incomplete legal-arrangement due diligence, generally corrected through steps to identify parties exercising relevant ownership and control before activation. Here the relevant weakness is CDD scope limited to identity only, requiring a different remediation ownership and workplan.
C:Given the contrast between lack of ongoing consistency review against expected activity and CDD scope limited to identity only as the distinguishing point, this function has a remit connected with the duty to reassess the profile and investigate deviations from stated purpose, and the associated problem is lack of ongoing consistency review against expected activity. The current repair requires the responsible team to collect expected activity and purpose information sufficient for risk-based monitoring, so it should not be allocated to a team without direct control over that work.
D:In assessing the contrast between insufficient EDD for a higher-risk PEP relationship and CDD scope limited to identity only, its normal responsibility would be addressing insufficient EDD for a higher-risk PEP relationship. It may advise or review here, but the accountable execution of measures to collect expected activity and purpose information sufficient for risk-based monitoring belongs in the process identified by this case.
Question 473
A compliance task requires an organization to determine the legally applicable reporting threshold and duty. The steering committee has not identified the function with the relevant authority or responsibility. Which body or function has the specifically described lead responsibility?
- Wolfsberg Group industry standards participants
- National AML coordination authority
- Institution's compliance legal-advisory function
- FIU strategic analysis and reporting function
- Sector's competent supervisory regulator
Explanation
Correct Answer
C:Responsibility follows the power to direct or oversee work to determine the legally applicable reporting threshold and duty. With the compliance duty to determine the legally applicable reporting threshold and duty in view, assigning it elsewhere could produce advice or intelligence without a valid accountable regulatory or institutional decision.
Incorrect Answers
A:This function normally leads work such as use structured respondent due diligence while confirming legal minima separately, which is distinct from the issue at hand. Given the separate duty to use structured respondent due diligence while confirming legal minima separately as opposed to the current duty to determine the legally applicable reporting threshold and duty as the distinguishing point, the current responsibility relates to determine the legally applicable reporting threshold and duty, so routing it here would misassign accountability.
B:Given the separate duty to recalibrate location and delivery-channel risk factors as opposed to the current duty to determine the legally applicable reporting threshold and duty as the distinguishing point, its proper remit concerns national risk assessment as input to entity-level risk and implementation of recalibrate location and delivery-channel risk factors. It could supply input, but the named task is owned by the body or team responsible for determine the legally applicable reporting threshold and duty.
D:That organization may contribute relevant information but primarily handles translate typology signals into an institutional exposure review. It cannot replace the proper lead for determine the legally applicable reporting threshold and duty and its associated review record.
E:This function normally leads work such as benchmark internal CDD failures against identified sector weaknesses, which is distinct from the issue at hand. Given the separate duty to benchmark internal CDD failures against identified sector weaknesses as opposed to the current duty to determine the legally applicable reporting threshold and duty as the distinguishing point, the current responsibility relates to determine the legally applicable reporting threshold and duty, so routing it here would misassign accountability.
Question 474
A bank screens customers once daily, but a newly issued sanctions designation does not appear in that day's batch. Which failure mode should the control owner investigate first?
- Lack of below-the-line testing for missed suspicious activity
- Uncontrolled screening refresh interval and list-update trigger
- Incomplete population coverage in ongoing sanctions screening
- Excessive fuzzy-match suppression for common or short names
Explanation
Correct Answer
B:In assessing the proposed capability of initiate appropriate rescreening when relevant lists change, the observed system behavior is consistent with the specifically identified control defect. The relevant remedy is initiate appropriate rescreening when relevant lists change, backed by reliable list delta feed and customer screening population snapshot and validation through measure list-publication-to-rescreening completion time.
Incorrect Answers
A:That defect is most directly corrected by sample below-threshold activity for typology coverage, whose inputs include transactions surrounding cutoff values and labeled investigations. Here the observed behavior calls for initiate appropriate rescreening when relevant lists change, so the alternative would misdirect the technical fix.
C:With the competing solutions of reconcile active accounts and beneficial owners into each screening run and initiate appropriate rescreening when relevant lists change in view, this problem is normally investigated with reconcile active accounts and beneficial owners into each screening run and validated through quantify omissions and retry failed customer records. Those activities address a different failure mode; the case requires initiate appropriate rescreening when relevant lists change supported by list delta feed and customer screening population snapshot.
D:The alternative would explain a setting that needs true-match challenge set for short names and aliases. The present tool's failure is different and should instead be tested through measure list-publication-to-rescreening completion time, making this diagnosis less defensible.
Question 475
Control mapping has identified hidden fund investors behind layered nominees as a vulnerability associated with nominee aggregation in pooled investment subscriptions. The design must be proportionate and leave an audit trail. Which safeguard is the strongest match to the particular risk?
- Beneficial-owner verification for pooled investment inflows
- Risk-based transparency requirements for omnibus relationships
- Connected-account surveillance for wash trades
- Independent verification of benefit destination changes
Explanation
Correct Answer
A:This measure addresses hidden fund investors behind layered nominees, rather than a different typology. With the exposure to hidden fund investors behind layered nominees in view, staff should apply it to the relevant customer, product, or transaction stage and preserve evidence of challenge and follow-up.
Incorrect Answers
B:This control addresses unidentified investors sheltered by nominee execution, a different vulnerability. The current exposure is hidden fund investors behind layered nominees; installing the alternative without a tailored check would leave the key failure path substantially open.
C:When examining the distinction between exposure to manipulative cross-trades hiding beneficial ownership and exposure to hidden fund investors behind layered nominees, the measure is more suited to limiting manipulative cross-trades hiding beneficial ownership. It does not directly test or prevent hidden fund investors behind layered nominees in the described customer or transaction process, even if it might help elsewhere in the AFC program.
D:The alternative would mitigate risks involving benefits sent to unauthorized corporate recipients, not the principal failure here. The relevant control design must be built around hidden fund investors behind layered nominees, with appropriate evidence and exceptions.
Question 476
Before closing an audit finding of CDD scope limited to identity only, the assurance team needs evidence that measures to collect expected activity and purpose information sufficient for risk-based monitoring were actually executed. Which record best demonstrates execution rather than merely policy intent?
- Trust parties register with verification evidence
- Customer activity profile and purpose-of-account record
- Liveness test result and human exception review
- Source-of-wealth dossier and approval evidence
Explanation
Correct Answer
B:When examining the deficiency of CDD scope limited to identity only, the record gives an auditable link between the expected remediation and observed practice. It is especially useful for verifying that CDD scope limited to identity only has not continued under a different workflow.
Incorrect Answers
A:That documentation is meaningful where measures to identify parties exercising relevant ownership and control before activation are the expected control. The present issue is CDD scope limited to identity only, and the reviewer needs records specifically tracing the chosen remedy.
C:This record would help assess whether steps to require an appropriate presentation-attack-resistant liveness check worked in a different scenario. The current test needs to establish whether measures to collect expected activity and purpose information sufficient for risk-based monitoring corrected CDD scope limited to identity only; the suggested artifact cannot show that directly.
D:The proposed evidence corresponds to oversight of insufficient EDD for a higher-risk PEP relationship. It would leave the actual remediation, collect expected activity and purpose information sufficient for risk-based monitoring, without a clear operational test in this case.
Question 477
An AFC reviewer is assessing 2 distinct situations. Situation 1: An assessment of difference between voluntary guidance and mandatory reporting law asks whether the duty to determine the legally applicable reporting threshold and duty was actually discharged. Situation 2: An assessment of corruption-risk indicator versus legally binding sanctions data asks whether the duty to treat perception ratings as one risk input and screen against official lists was actually discharged. Which records directly evidence fulfillment of an obligation in one of these situations? Choose TWO.
- Completed respondent due diligence questionnaire and verification
- Jurisdiction-specific reporting requirements mapping
- Control self-assessment linked to supervisory findings
- Source inventory separating risk indices from sanctions lists
Explanation
Correct Answers
B:For situation 1, the artifact shows whether the required response was performed, not just whether a policy exists. Reviewers can trace efforts to determine the legally applicable reporting threshold and duty to the responsible institution's compliance legal-advisory function through the recorded decision or result.
D:For situation 2, with the compliance duty to treat perception ratings as one risk input and screen against official lists in view, this is the best operational audit trail because it captures the relevant control or decision. When examining the compliance duty to treat perception ratings as one risk input and screen against official lists, it can be reconciled to the duty to treat perception ratings as one risk input and screen against official lists and the mandate of enterprise AFC risk-intelligence function without mistaking guidance for proof.
Incorrect Answers
A:The alternative is associated with wolfsberg correspondent-banking due diligence guidance and the duty to use structured respondent due diligence while confirming legal minima separately. Given the separate duty to use structured respondent due diligence while confirming legal minima separately as opposed to the current duty to determine the legally applicable reporting threshold and duty as the distinguishing point, in this item, situation 1 calls for action to determine the legally applicable reporting threshold and duty; situation 2 calls for action to treat perception ratings as one risk input and screen against official lists. Regarding the duty to determine the legally applicable reporting threshold and duty while considering wolfsberg correspondent-banking due diligence guidance in this implementation evidence decision, it does not perform the particular proof role tested by these cases.
C:In assessing the separate duty to benchmark internal CDD failures against identified sector weaknesses as opposed to the current duty to determine the legally applicable reporting threshold and duty, the alternative is associated with thematic supervisory findings informing control expectations and the duty to benchmark internal CDD failures against identified sector weaknesses. With the separate duty to benchmark internal CDD failures against identified sector weaknesses as opposed to the current duty to determine the legally applicable reporting threshold and duty in view, in this item, situation 1 calls for action to determine the legally applicable reporting threshold and duty; situation 2 calls for action to treat perception ratings as one risk input and screen against official lists. Regarding the duty to determine the legally applicable reporting threshold and duty while considering thematic supervisory findings informing control expectations in this implementation evidence decision, it does not perform the particular proof role tested by these cases.
Question 478
A production issue has been traced to uncontrolled screening refresh interval and list-update trigger. The solution must repair the underlying detection or processing mechanism. Which capability would most effectively reduce the observed risk?
- Initiate appropriate rescreening when relevant lists change
- Parse and screen all required structured and relevant narrative fields
- Reconcile active accounts and beneficial owners into each screening run
- Apply risk-based multi-hop graph analysis with confidence thresholds
- Calibrate thresholds using risk-weighted matches and missed-hit testing
Explanation
Correct Answer
A:The proposed capability is fitted to the identified failure mode, uncontrolled screening refresh interval and list-update trigger. It should be implemented with dependable list delta feed and customer screening population snapshot and independently challenged using measure list-publication-to-rescreening completion time.
Incorrect Answers
B:The technology is fitted to payment screening that ignores relevant message fields, not the observed uncontrolled screening refresh interval and list-update trigger. With the difference between payment screening that ignores relevant message fields and uncontrolled screening refresh interval and list-update trigger in view, its benefit would be indirect without the focused remedy and validation described in the correct approach.
C:This capability addresses incomplete population coverage in ongoing sanctions screening and relies on source population counts and included ownership relationships. The current failure is uncontrolled screening refresh interval and list-update trigger; deploying it would not fix the broken data or decision path described in the case.
D:When examining the difference between overly shallow wallet exposure tracing and uncontrolled screening refresh interval and list-update trigger, the alternative is useful for overly shallow wallet exposure tracing, but it acts on a different technical mechanism. Correcting the stated weakness requires initiate appropriate rescreening when relevant lists change and dependable list delta feed and customer screening population snapshot.
E:That improvement can be tested through test recall separately for short and common-name segments, in a setting with excessive fuzzy-match suppression for common or short names. Here the relevant acceptance criterion is measure list-publication-to-rescreening completion time, so the alternative leaves the principal control gap open.
Question 479
A finance company purchases receivables from a related merchant whose invoices appear to have no real customers. Which distinct threat pattern is most consistent with the observed facts?
- Third-party diversion of pension distributions
- Fictitious receivables used to raise financing
- Opaque acquisition of transferable investment instruments
- Omnibus account look-through uncertainty
Explanation
Correct Answer
B:The pivotal investigative task is to establish whether the underlying receivables represent genuine sales. Examining that uncertainty is how the investigator distinguishes this scenario from adjacent typologies and evaluates the exposure to lending against fabricated or duplicate invoices.
Incorrect Answers
A:The relevant clue for this alternative would be the need to establish whether the recipient was nominated by the member. No comparable fact is central to this case; the key unresolved link is establishing whether the underlying receivables represent genuine sales, making the proposed characterization weaker.
C:That interpretation is associated with a different situation where investigators must establish the provenance and holder history of the instruments. It would direct attention toward unverified instrument ownership used to move value, whereas this case principally calls for establishing whether the underlying receivables represent genuine sales; the signals should not be treated as interchangeable.
D:This typology would be worth testing when the issue is establishing the identities of underlying beneficial investors, leading to exposure from unidentified investors sheltered by nominee execution. The present facts instead call for establishing whether the underlying receivables represent genuine sales, so choosing it would send the investigation toward a different mechanism.
Question 480
A corporation has a transparent registered shareholder but voting agreements suggest another person controls major decisions. What is the principal control-design or governance failure?
- Incomplete legal-arrangement due diligence
- Beneficial control missed by equity-only checks
- CDD scope limited to identity only
- Lack of ongoing consistency review against expected activity
Explanation
Correct Answer
B:When examining the need to examine voting rights and other means of effective control, this weakness explains how the observed business process failed to control the risk. Addressing it calls for steps to examine voting rights and other means of effective control and evidence beyond management's assurance that a policy exists.
Incorrect Answers
A:The alternative diagnosis describes an issue corrected through steps to identify parties exercising relevant ownership and control before activation. The scenario instead points to a failure requiring the team to examine voting rights and other means of effective control; confusing the two would send corrective effort to the wrong workflow.
C:That deficiency is typically owned by customer due diligence onboarding owner and rectified through measures to collect expected activity and purpose information sufficient for risk-based monitoring. This case calls for steps to examine voting rights and other means of effective control, meaning the alternative misses the central governance or process gap.
D:In assessing the contrast between lack of ongoing consistency review against expected activity and beneficial control missed by equity-only checks, this weakness would appear in a process requiring staff to reassess the profile and investigate deviations from stated purpose. It is not the defining break in the present case, where the remediation must be designed to examine voting rights and other means of effective control to address the observed behavior.