ACAMS CAMS7 (Certified Anti-Money Laundering Specialist (the 7th edition)) Practice Test 52

Question 510

After digital identity liveness control weakness was identified, the corrective plan required steps to require an appropriate presentation-attack-resistant liveness check. Governance now needs an operational owner with decision rights. Who should own the corrective response, with other functions providing challenge as needed?

  1. Ongoing CDD and monitoring review team
  2. Digital onboarding identity assurance owner
  3. Trust and legal-arrangement CDD specialist
  4. Beneficial ownership specialist team

Explanation

Correct Answer

B:

The central responsibility is to require an appropriate presentation-attack-resistant liveness check and retain evidence of completion, not simply offer second opinions. That aligns with the work needed to resolve digital identity liveness control weakness and maintain liveness test result and human exception review.

Incorrect Answers

A:

Given the contrast between lack of ongoing consistency review against expected activity and digital identity liveness control weakness as the distinguishing point, its normal responsibility would be addressing lack of ongoing consistency review against expected activity. It may advise or review here, but the accountable execution of measures to require an appropriate presentation-attack-resistant liveness check belongs in the process identified by this case.

C:

With the contrast between incomplete legal-arrangement due diligence and digital identity liveness control weakness in view, the alternative's control domain is incomplete legal-arrangement due diligence, generally corrected through steps to identify parties exercising relevant ownership and control before activation. Here the relevant weakness is digital identity liveness control weakness, requiring a different remediation ownership and workplan.

D:

This function has a remit connected with the duty to examine voting rights and other means of effective control, and the associated problem is beneficial control missed by equity-only checks. The current repair requires the responsible team to require an appropriate presentation-attack-resistant liveness check, so it should not be allocated to a team without direct control over that work.

Question 511

A case was escalated for concern about agent-level fragmentation in remittance networks, but whether one originator controls apparently separate transfers remains unverified. The investigator must choose the most probative corroboration. Which evidence is most probative of the unresolved link?

  1. Wallet network and payer complaint analysis
  2. Order-to-payment-instrument reconciliation
  3. Agent KYC files and sampled remittance records
  4. Agent and sender identifier aggregation

Explanation

Correct Answer

D:

This material provides a practical way to establish whether one originator controls apparently separate transfers. In assessing the need to establish whether one originator controls apparently separate transfers, its value is in linking the customer's asserted purpose to observed facts, so investigators can articulate a reasoned conclusion.

Incorrect Answers

A:

The document helps with investigations focused on whether senders were recruited to move third-party funds. In this case the evidential gap lies with whether one originator controls apparently separate transfers, so the reviewer needs a more targeted source before reaching a conclusion.

B:

Such records could help establish whether refunded recipients originally funded the purchases in a different investigation. Here the precise evidential question involves establishing whether one originator controls apparently separate transfers, so the suggested material would be indirect and may not resolve the decisive uncertainty.

C:

When examining the distinction between establishing whether the agent collected required originator information and establishing whether one originator controls apparently separate transfers, the proposed source is most informative for a question about whether the agent collected required originator information. The current case calls for establishing whether one originator controls apparently separate transfers; using this instead could leave the customer explanation largely untested.

Question 512

A challenge panel will not accept a sign-off for digital identity liveness control weakness based only on policy language. The institution says it can now require an appropriate presentation-attack-resistant liveness check; an operating record is necessary. What would substantiate resolution of the identified AFC weakness?

  1. Source-of-wealth dossier and approval evidence
  2. Liveness test result and human exception review
  3. Ownership chart, voting agreements, and verification
  4. Customer profile refresh linked to unusual transfer analysis

Explanation

Correct Answer

B:

This artifact would show whether require an appropriate presentation-attack-resistant liveness check was executed and whether digital identity liveness control weakness was reduced in practice. Given the deficiency of digital identity liveness control weakness as the distinguishing point, A signed policy without operating evidence would be an insufficient effectiveness test.

Incorrect Answers

A:

With the contrast between insufficient EDD for a higher-risk PEP relationship and digital identity liveness control weakness in view, the artifact tests a different process led by PEP enhanced due diligence decision owner. It does not adequately demonstrate that digital identity liveness control weakness is now controlled, even if it could support wider AFC assurance.

C:

The proposed evidence corresponds to oversight of beneficial control missed by equity-only checks. It would leave the actual remediation, require an appropriate presentation-attack-resistant liveness check, without a clear operational test in this case.

D:

That documentation is meaningful where measures to reassess the profile and investigate deviations from stated purpose are the expected control. The present issue is digital identity liveness control weakness, and the reviewer needs records specifically tracing the chosen remedy.

Question 513

An AFC reviewer is assessing 2 distinct situations. Situation 1: The required operating or regulatory task is to update exposure assumptions, controls, and board reporting for the corridor. Situation 2: The required operating or regulatory task is to mandate prompt reporting of suspicion under domestic requirements. Which authorities or functions have the described responsibility for one of these cases? Choose TWO.

  1. Bank enterprise risk assessment owner
  2. FATF or relevant FATF-style regional body
  3. National competent authority designating reporting obligations
  4. National competent authority governing company transparency

Explanation

Correct Answers

A:

For situation 1, responsibility follows the power to direct or oversee work to update exposure assumptions, controls, and board reporting for the corridor. Given the compliance duty to update exposure assumptions, controls, and board reporting for the corridor as the distinguishing point, assigning it elsewhere could produce advice or intelligence without a valid accountable regulatory or institutional decision.

C:

For situation 2, the requested task is linked to the obligation to mandate prompt reporting of suspicion under domestic requirements, which falls within this function's described remit. With the compliance duty to mandate prompt reporting of suspicion under domestic requirements in view, the responsibility is not interchangeable with external standards setters, private advisers, or unrelated enforcement functions.

Incorrect Answers

B:

The alternative is associated with FATF mutual evaluation and follow-up process and the duty to participate in peer review and address prioritized recommendations. In assessing the separate duty to participate in peer review and address prioritized recommendations as opposed to the current duty to update exposure assumptions, controls, and board reporting for the corridor, in this item, situation 1 calls for action to update exposure assumptions, controls, and board reporting for the corridor; situation 2 calls for action to mandate prompt reporting of suspicion under domestic requirements. Regarding the duty to update exposure assumptions, controls, and board reporting for the corridor while considering FATF mutual evaluation and follow-up process in this responsible function decision, it does not perform the particular actor role tested by these cases.

D:

The alternative is associated with FATF beneficial-ownership transparency expectations and the duty to improve access to adequate, accurate, up-to-date ownership evidence. When examining the separate duty to improve access to adequate, accurate, up-to-date ownership evidence as opposed to the current duty to update exposure assumptions, controls, and board reporting for the corridor, in this item, situation 1 calls for action to update exposure assumptions, controls, and board reporting for the corridor; situation 2 calls for action to mandate prompt reporting of suspicion under domestic requirements. Regarding the duty to update exposure assumptions, controls, and board reporting for the corridor while considering FATF beneficial-ownership transparency expectations in this responsible function decision, it does not perform the particular actor role tested by these cases.

Question 514

An AFC reviewer is assessing 2 distinct situations. Situation 1: No reconciliation checked the screened customer count against the active customer base. Situation 2: A new sanctions designation was missing from the daily screening run. Which technical weaknesses each best explain a different observed failure? Choose TWO.

  1. Uncontrolled screening refresh interval and list-update trigger
  2. Incomplete population coverage in ongoing sanctions screening
  3. Excessive fuzzy-match suppression for common or short names
  4. Low rule precision due to missing customer context

Explanation

Correct Answers

A:

For situation 2, the observed result points to a failure in the underlying data or control process, rather than necessarily to wrongdoing by a customer. The targeted fix is initiate appropriate rescreening when relevant lists change, relying on list delta feed and customer screening population snapshot and a check such as measure list-publication-to-rescreening completion time.

B:

For situation 1, in assessing the proposed capability of reconcile active accounts and beneficial owners into each screening run, this defect explains why the current tool misses or misclassifies the described activity. The remediation, reconcile active accounts and beneficial owners into each screening run, requires source population counts and included ownership relationships and should be verified through quantify omissions and retry failed customer records.

Incorrect Answers

C:

The alternative tackles excessive fuzzy-match suppression for common or short names by using calibrate thresholds using risk-weighted matches and missed-hit testing and true-match challenge set for short names and aliases. When examining the competing solutions of calibrate thresholds using risk-weighted matches and missed-hit testing and reconcile active accounts and beneficial owners into each screening run, in the cases under review, situation 1 must address incomplete population coverage in ongoing sanctions screening; situation 2 must address uncontrolled screening refresh interval and list-update trigger. This gap response targets a separate technical failure.

D:

The alternative tackles low rule precision due to missing customer context by using add payroll pattern recognition and tune controls using outcomes and employer and payroll indicators with investigator feedback. Given the competing solutions of add payroll pattern recognition and tune controls using outcomes and reconcile active accounts and beneficial owners into each screening run as the distinguishing point, in the cases under review, situation 1 must address incomplete population coverage in ongoing sanctions screening; situation 2 must address uncontrolled screening refresh interval and list-update trigger. This gap response targets a separate technical failure.

Question 515

Control mapping has identified structuring across remittance agents as a vulnerability associated with agent-level fragmentation in remittance networks. The design must be proportionate and leave an audit trail. Which safeguard is the strongest match to the particular risk?

  1. Network-wide linked-originator monitoring
  2. Agent supervision and sampled CDD testing
  3. Original-payment-method refund controls and exceptions
  4. Mule-behavior monitoring in peer-to-peer transfers
  5. Submerchant identifier retention and look-through reporting

Explanation

Correct Answer

A:

This measure addresses structuring across remittance agents, rather than a different typology. With the exposure to structuring across remittance agents in view, staff should apply it to the relevant customer, product, or transaction stage and preserve evidence of challenge and follow-up.

Incorrect Answers

B:

With the distinction between exposure to transactions accepted without sender identification and exposure to structuring across remittance agents in view, this control addresses transactions accepted without sender identification, a different vulnerability. The current exposure is structuring across remittance agents; installing the alternative without a tailored check would leave the key failure path substantially open.

C:

When examining the distinction between exposure to refunds redirected to unrelated payment credentials and exposure to structuring across remittance agents, the measure is more suited to limiting refunds redirected to unrelated payment credentials. It does not directly test or prevent structuring across remittance agents in the described customer or transaction process, even if it might help elsewhere in the AFC program.

D:

The alternative would mitigate risks involving pass-through wallets used to consolidate third-party funds, not the principal failure here. The relevant control design must be built around structuring across remittance agents, with appropriate evidence and exceptions.

E:

That safeguard is appropriate for a setting where the exposure is loss of traceability in aggregate merchant payouts. This scenario instead exposes structuring across remittance agents; a control operating on the other mechanism would not be the most proportionate response.

Question 516

A commercial customer's business profile predicts domestic transfers, but the account immediately starts high-volume overseas payments. Which defect should be recorded in the AFC program assessment?

  1. Lack of ongoing consistency review against expected activity
  2. Digital identity liveness control weakness
  3. Incomplete legal-arrangement due diligence
  4. Insufficient EDD for a higher-risk PEP relationship
  5. Beneficial control missed by equity-only checks

Explanation

Correct Answer

A:

With the need to reassess the profile and investigate deviations from stated purpose in view, this weakness explains how the observed business process failed to control the risk. Addressing it calls for steps to reassess the profile and investigate deviations from stated purpose and evidence beyond management's assurance that a policy exists.

Incorrect Answers

B:

When examining the contrast between digital identity liveness control weakness and lack of ongoing consistency review against expected activity, that deficiency is typically owned by digital onboarding identity assurance owner and rectified through measures to require an appropriate presentation-attack-resistant liveness check. This case calls for steps to reassess the profile and investigate deviations from stated purpose, meaning the alternative misses the central governance or process gap.

C:

Given the contrast between incomplete legal-arrangement due diligence and lack of ongoing consistency review against expected activity as the distinguishing point, this weakness would appear in a process requiring staff to identify parties exercising relevant ownership and control before activation. It is not the defining break in the present case, where the remediation must be designed to reassess the profile and investigate deviations from stated purpose to address the observed behavior.

D:

In assessing the contrast between insufficient EDD for a higher-risk PEP relationship and lack of ongoing consistency review against expected activity, the alternative diagnosis describes an issue corrected through steps to obtain independent wealth provenance and appropriate senior approval. The scenario instead points to a failure requiring the team to reassess the profile and investigate deviations from stated purpose; confusing the two would send corrective effort to the wrong workflow.

E:

The corresponding consequence of this alternative would be evidenced through ownership chart, voting agreements, and verification. The stated control problem has a different operating symptom, addressed by measures to reassess the profile and investigate deviations from stated purpose.

Question 517

A regulatory team states that it has fulfilled the duty to update exposure assumptions, controls, and board reporting for the corridor. The auditor requests an artifact that substantiates implementation under using national risk assessments for enterprise recalibration. Which artifact best substantiates that the action was carried out appropriately?

  1. Suspicious transaction reports with recorded grounds for suspicion
  2. National risk assessment linked to supervised controls
  3. Risk model change record tied to official national findings
  4. Beneficial ownership data quality and verification plan

Explanation

Correct Answer

C:

This record links the obligation to update exposure assumptions, controls, and board reporting for the corridor with actual execution and provides a verifiable basis for review. It also helps demonstrate that bank enterprise risk assessment owner acted within the appropriate scope.

Incorrect Answers

A:

When examining the separate duty to mandate prompt reporting of suspicion under domestic requirements as opposed to the current duty to update exposure assumptions, controls, and board reporting for the corridor, the record supports another process: mandate prompt reporting of suspicion under domestic requirements. The reviewer needs evidence of work to update exposure assumptions, controls, and board reporting for the corridor, and the proposed record would leave that operational requirement unproven.

B:

That artifact shows activity in the remit of national AML policy authority implementing FATF standards, not the performance of the required step. It would be an indirect reference rather than defensible proof that the necessary work to update exposure assumptions, controls, and board reporting for the corridor happened.

D:

With the separate duty to improve access to adequate, accurate, up-to-date ownership evidence as opposed to the current duty to update exposure assumptions, controls, and board reporting for the corridor in view, this documentation is linked to FATF beneficial-ownership transparency expectations and work performed by national competent authority governing company transparency. It does not directly demonstrate the implementation of the obligation to update exposure assumptions, controls, and board reporting for the corridor in this case.

Question 518

Diagnostics confirm incomplete population coverage in ongoing sanctions screening. The technology owner needs a sustainable corrective capability rather than an ad hoc downstream workaround. Which solution design most directly corrects the defect?

  1. Calibrate thresholds using risk-weighted matches and missed-hit testing
  2. Initiate appropriate rescreening when relevant lists change
  3. Reconcile active accounts and beneficial owners into each screening run
  4. Tune risk-specific scenarios using behavior and expected activity
  5. Add linkage and aggregated-flow scenarios for controlled accounts

Explanation

Correct Answer

C:

The proposed capability is fitted to the identified failure mode, incomplete population coverage in ongoing sanctions screening. It should be implemented with dependable source population counts and included ownership relationships and independently challenged using quantify omissions and retry failed customer records.

Incorrect Answers

A:

Given the difference between excessive fuzzy-match suppression for common or short names and incomplete population coverage in ongoing sanctions screening as the distinguishing point, this capability addresses excessive fuzzy-match suppression for common or short names and relies on true-match challenge set for short names and aliases. In assessing the difference between excessive fuzzy-match suppression for common or short names and incomplete population coverage in ongoing sanctions screening, the current failure is incomplete population coverage in ongoing sanctions screening; deploying it would not fix the broken data or decision path described in the case.

B:

In assessing the difference between uncontrolled screening refresh interval and list-update trigger and incomplete population coverage in ongoing sanctions screening, the alternative is useful for uncontrolled screening refresh interval and list-update trigger, but it acts on a different technical mechanism. Correcting the stated weakness requires reconcile active accounts and beneficial owners into each screening run and dependable source population counts and included ownership relationships.

D:

The technology is fitted to inadequate transaction-monitoring segmentation, not the observed incomplete population coverage in ongoing sanctions screening. Given the difference between inadequate transaction-monitoring segmentation and incomplete population coverage in ongoing sanctions screening as the distinguishing point, its benefit would be indirect without the focused remedy and validation described in the correct approach.

E:

Given the difference between single-account rules miss connected movement patterns and incomplete population coverage in ongoing sanctions screening as the distinguishing point, this capability addresses single-account rules miss connected movement patterns and relies on shared ownership indicators and interaccount transfer graph. In assessing the difference between single-account rules miss connected movement patterns and incomplete population coverage in ongoing sanctions screening, the current failure is incomplete population coverage in ongoing sanctions screening; deploying it would not fix the broken data or decision path described in the case.

Question 519

A payment processor discovers one online merchant uses several seemingly independent storefronts that settle to the same account. Which distinct threat pattern is most consistent with the observed facts?

  1. Agent-level fragmentation in remittance networks
  2. Merchant aggregation concealing common ownership
  3. Mule-wallet collection and rapid dispersal
  4. Remittance-agent CDD failure

Explanation

Correct Answer

B:

The pivotal investigative task is to establish whether the storefronts are actually operated by one party. Examining that uncertainty is how the investigator distinguishes this scenario from adjacent typologies and evaluates the exposure to multiple store identities evading merchant risk controls.

Incorrect Answers

A:

In assessing the distinction between exposure to structuring across remittance agents and exposure to multiple store identities evading merchant risk controls, the relevant clue for this alternative would be the need to establish whether one originator controls apparently separate transfers. No comparable fact is central to this case; the key unresolved link is establishing whether the storefronts are actually operated by one party, making the proposed characterization weaker.

C:

When examining the distinction between exposure to pass-through wallets used to consolidate third-party funds and exposure to multiple store identities evading merchant risk controls, that interpretation is associated with a different situation where investigators must establish whether senders were recruited to move third-party funds. It would direct attention toward pass-through wallets used to consolidate third-party funds, whereas this case principally calls for establishing whether the storefronts are actually operated by one party; the signals should not be treated as interchangeable.

D:

This typology would be worth testing when the issue is establishing whether the agent collected required originator information, leading to exposure from transactions accepted without sender identification. The present facts instead call for establishing whether the storefronts are actually operated by one party, so choosing it would send the investigation toward a different mechanism.

Question 520

An internal audit identifies lack of ongoing consistency review against expected activity in a process whose remedial ownership sits with ongoing CDD and monitoring review team. The reviewer requires an executable, testable correction. Which change best addresses the stated compliance-program problem?

  1. Identify parties exercising relevant ownership and control before activation
  2. Examine voting rights and other means of effective control
  3. Reassess the profile and investigate deviations from stated purpose
  4. Collect expected activity and purpose information sufficient for risk-based monitoring

Explanation

Correct Answer

C:

This responds to the identified weakness, lack of ongoing consistency review against expected activity, at the point where the process breaks down. Assigning the change to ongoing CDD and monitoring review team and testing customer profile refresh linked to unusual transfer analysis makes remediation verifiable rather than aspirational.

Incorrect Answers

A:

This approach is usually evidenced by trust parties register with verification evidence, addressing incomplete legal-arrangement due diligence. It is not a substitute for the targeted corrective action needed to resolve lack of ongoing consistency review against expected activity in this workflow.

B:

The alternative may improve a different part of AFC governance, but it primarily tackles beneficial control missed by equity-only checks. The actual defect, lack of ongoing consistency review against expected activity, requires a different control intervention.

D:

The proposed step is appropriate when CDD scope limited to identity only is observed. The case instead concerns lack of ongoing consistency review against expected activity; the alternative would not repair the particular failing in time or at the correct control point.

Certified Anti-Money Laundering Specialist (the 7th edition) (CAMS7) Practice Tests