Question 520
An internal audit identifies lack of ongoing consistency review against expected activity in a process whose remedial ownership sits with ongoing CDD and monitoring review team. The reviewer requires an executable, testable correction. Which change best addresses the stated compliance-program problem?
- Identify parties exercising relevant ownership and control before activation
- Examine voting rights and other means of effective control
- Reassess the profile and investigate deviations from stated purpose
- Collect expected activity and purpose information sufficient for risk-based monitoring
Explanation
Correct Answer
C:This responds to the identified weakness, lack of ongoing consistency review against expected activity, at the point where the process breaks down. Assigning the change to ongoing CDD and monitoring review team and testing customer profile refresh linked to unusual transfer analysis makes remediation verifiable rather than aspirational.
Incorrect Answers
A:This approach is usually evidenced by trust parties register with verification evidence, addressing incomplete legal-arrangement due diligence. It is not a substitute for the targeted corrective action needed to resolve lack of ongoing consistency review against expected activity in this workflow.
B:The alternative may improve a different part of AFC governance, but it primarily tackles beneficial control missed by equity-only checks. The actual defect, lack of ongoing consistency review against expected activity, requires a different control intervention.
D:The proposed step is appropriate when CDD scope limited to identity only is observed. The case instead concerns lack of ongoing consistency review against expected activity; the alternative would not repair the particular failing in time or at the correct control point.
Question 521
An AFC reviewer is assessing 2 distinct situations. Situation 1: The review concerns merchant aggregation concealing common ownership but cannot yet establish whether the storefronts are actually operated by one party. Situation 2: The review concerns agent-level fragmentation in remittance networks but cannot yet establish whether one originator controls apparently separate transfers. Which proposed records directly address the distinctive unanswered question in one of these situations? Choose TWO.
- Agent KYC files and sampled remittance records
- Seller ownership and payout-account authorization
- Agent and sender identifier aggregation
- Merchant onboarding records and settlement account links
Explanation
Correct Answers
C:For situation 2, this material provides a practical way to establish whether one originator controls apparently separate transfers. With the need to establish whether one originator controls apparently separate transfers in view, its value is in linking the customer's asserted purpose to observed facts, so investigators can articulate a reasoned conclusion.
D:For situation 1, this source can help answer the pivotal question of establishing whether the storefronts are actually operated by one party. When examining the need to establish whether the storefronts are actually operated by one party, A documented comparison to the transaction trail gives the investigator a stronger basis for disposition than transaction size or appearance by itself.
Incorrect Answers
A:This record would be useful when investigating remittance-agent CDD failure. Given the distinction between establishing whether the agent collected required originator information and establishing whether the storefronts are actually operated by one party as the distinguishing point, here situation 1 needs to establish whether the storefronts are actually operated by one party; situation 2 needs to establish whether one originator controls apparently separate transfers. Regarding establishing whether the storefronts are actually operated by one party when evaluating remittance-agent CDD failure in this diagnostic evidence decision, it does not directly resolve any of those distinct evidentiary gaps.
B:Given the distinction between establishing the commercial justification for the alternative beneficiary and establishing whether the storefronts are actually operated by one party as the distinguishing point, this record would be useful when investigating marketplace diversion to off-platform settlement. In assessing the distinction between establishing the commercial justification for the alternative beneficiary and establishing whether the storefronts are actually operated by one party, here situation 1 needs to establish whether the storefronts are actually operated by one party; situation 2 needs to establish whether one originator controls apparently separate transfers. Regarding establishing whether the storefronts are actually operated by one party when evaluating marketplace diversion to off-platform settlement in this diagnostic evidence decision, it does not directly resolve any of those distinct evidentiary gaps.
Question 522
Following a finding of lack of ongoing consistency review against expected activity, a committee approves the need to reassess the profile and investigate deviations from stated purpose. Primary remediation responsibility is still unassigned. Which accountable function should lead the documented remediation?
- PEP enhanced due diligence decision owner
- Digital onboarding identity assurance owner
- Trust and legal-arrangement CDD specialist
- Ongoing CDD and monitoring review team
Explanation
Correct Answer
D:When examining the need to reassess the profile and investigate deviations from stated purpose, primary accountability belongs with the function able to execute the described process repair. Here that means ensuring the responsible team can reassess the profile and investigate deviations from stated purpose, with the result demonstrated by customer profile refresh linked to unusual transfer analysis and challenged by appropriate assurance functions.
Incorrect Answers
A:Given the contrast between insufficient EDD for a higher-risk PEP relationship and lack of ongoing consistency review against expected activity as the distinguishing point, this function has a remit connected with the duty to obtain independent wealth provenance and appropriate senior approval, and the associated problem is insufficient EDD for a higher-risk PEP relationship. The current repair requires the responsible team to reassess the profile and investigate deviations from stated purpose, so it should not be allocated to a team without direct control over that work.
B:In assessing the contrast between digital identity liveness control weakness and lack of ongoing consistency review against expected activity, its normal responsibility would be addressing digital identity liveness control weakness. It may advise or review here, but the accountable execution of measures to reassess the profile and investigate deviations from stated purpose belongs in the process identified by this case.
C:With the contrast between incomplete legal-arrangement due diligence and lack of ongoing consistency review against expected activity in view, that group is suited to producing trust parties register with verification evidence for another control issue. In the present case ownership must support measures to reassess the profile and investigate deviations from stated purpose and closure of lack of ongoing consistency review against expected activity, not an unrelated assurance task.
Question 523
Authorities assess a whole sector's AML exposure by weighing threat likelihood, vulnerabilities, and consequences. What regulatory concept should guide the initial assessment?
- Proportionate simplified due diligence under FATF standards
- FATF mutual evaluation and follow-up process
- Using national risk assessments for enterprise recalibration
- FATF effectiveness assessment as distinct from technical compliance
- Sectoral financial-crime risk assessment methodology
Explanation
Correct Answer
E:The decisive feature is the kind of obligation imposed, which requires the responsible party to combine sector data, known typologies, and mitigation capacity. It is distinguished by the responsible function, sector supervisor or designated national assessment body, and by the records used to demonstrate compliance.
Incorrect Answers
A:This authority supports retain essential identification and apply relief only where permitted and produces evidence such as risk justification and approved simplified CDD procedure. The required response here is combine sector data, known typologies, and mitigation capacity, so the legal or governance route is not the same.
B:This principle is relevant where the obligation is to participate in peer review and address prioritized recommendations, under FATF or relevant FATF-style regional body. The present case instead requires combine sector data, known typologies, and mitigation capacity, so it addresses a different legal or operational question.
C:The alternative governs a different activity: update exposure assumptions, controls, and board reporting for the corridor. Although related to financial-crime compliance, it does not establish the precise duty that sector supervisor or designated national assessment body must perform here.
D:Its main application involves FATF-style mutual evaluation assessment team and an implementation such as evaluate real operational outcomes alongside legal framework adoption. The facts in this scenario call for combine sector data, known typologies, and mitigation capacity, making that framework secondary rather than controlling.
Question 524
An implementation team needs to reconcile active accounts and beneficial owners into each screening run after identifying incomplete population coverage in ongoing sanctions screening. The team is reviewing the source attributes and data lineage on which the remedy depends. Which source or attribute is essential to correct performance?
- List delta feed and customer screening population snapshot
- Source population counts and included ownership relationships
- True-match challenge set for short names and aliases
- List version, publication time, and change record
Explanation
Correct Answer
B:When examining the technical failure of incomplete population coverage in ongoing sanctions screening, the data dependency must be traceable to the source and the corrected processing step. Control owners need to test its accuracy and availability before judging reconcile active accounts and beneficial owners into each screening run effective.
Incorrect Answers
A:These attributes help evaluate measure list-publication-to-rescreening completion time in another workflow. The present failure involves incomplete population coverage in ongoing sanctions screening, making source population counts and included ownership relationships the more direct dependency to verify.
C:Given the difference between excessive fuzzy-match suppression for common or short names and incomplete population coverage in ongoing sanctions screening as the distinguishing point, that information underpins calibrate thresholds using risk-weighted matches and missed-hit testing when the problem is excessive fuzzy-match suppression for common or short names. The case instead depends on source population counts and included ownership relationships, which is necessary to correct the stated failure and make the output auditable.
D:Regarding the need to address incomplete population coverage in ongoing sanctions screening when assessing implement controlled list ingestion with timestamps and integrity checks in this data dependency decision, the alternative dataset is relevant to sanctions list freshness and lineage gap. It would not provide the key input required for reconcile active accounts and beneficial owners into each screening run in this case, so apparent model performance could still be misleading.
Question 525
A risk owner is designing safeguards against multiple store identities evading merchant risk controls in cases associated with merchant aggregation concealing common ownership. Broad restrictions on unrelated customers would not address the particular weakness. Which safeguard most directly addresses this exposure?
- Mule-behavior monitoring in peer-to-peer transfers
- Original-payment-method refund controls and exceptions
- Network-wide linked-originator monitoring
- Consolidated merchant-beneficial-owner risk scoring
Explanation
Correct Answer
D:This measure addresses multiple store identities evading merchant risk controls, rather than a different typology. When examining the exposure to multiple store identities evading merchant risk controls, staff should apply it to the relevant customer, product, or transaction stage and preserve evidence of challenge and follow-up.
Incorrect Answers
A:This control addresses pass-through wallets used to consolidate third-party funds, a different vulnerability. The current exposure is multiple store identities evading merchant risk controls; installing the alternative without a tailored check would leave the key failure path substantially open.
B:Given the distinction between exposure to refunds redirected to unrelated payment credentials and exposure to multiple store identities evading merchant risk controls as the distinguishing point, the measure is more suited to limiting refunds redirected to unrelated payment credentials. It does not directly test or prevent multiple store identities evading merchant risk controls in the described customer or transaction process, even if it might help elsewhere in the AFC program.
C:The alternative would mitigate risks involving structuring across remittance agents, not the principal failure here. The relevant control design must be built around multiple store identities evading merchant risk controls, with appropriate evidence and exceptions.
Question 526
An institution reports that it has taken measures to reassess the profile and investigate deviations from stated purpose following the detection of lack of ongoing consistency review against expected activity. Assurance needs operational evidence rather than a completion statement. Which evidence would most convincingly show that remediation works?
- Source-of-wealth dossier and approval evidence
- Liveness test result and human exception review
- Customer profile refresh linked to unusual transfer analysis
- Customer activity profile and purpose-of-account record
Explanation
Correct Answer
C:With the deficiency of lack of ongoing consistency review against expected activity in view, this is the strongest proof of operating effectiveness because it records the relevant control action. It provides a check on the response to lack of ongoing consistency review against expected activity, not just management's stated intention.
Incorrect Answers
A:Given the contrast between insufficient EDD for a higher-risk PEP relationship and lack of ongoing consistency review against expected activity as the distinguishing point, this record would help assess whether steps to obtain independent wealth provenance and appropriate senior approval worked in a different scenario. The current test needs to establish whether measures to reassess the profile and investigate deviations from stated purpose corrected lack of ongoing consistency review against expected activity; the suggested artifact cannot show that directly.
B:The proposed evidence corresponds to oversight of digital identity liveness control weakness. It would leave the actual remediation, reassess the profile and investigate deviations from stated purpose, without a clear operational test in this case.
D:The artifact tests a different process led by customer due diligence onboarding owner. It does not adequately demonstrate that lack of ongoing consistency review against expected activity is now controlled, even if it could support wider AFC assurance.
Question 527
A governance review finds that sectoral financial-crime risk assessment methodology is recognized but has not been implemented in ordinary workflows. The next decision concerns the required action. What is the most appropriate regulatory response within the stated remit?
- Require documented assessment and proportionate mitigation of ML and TF exposure
- Combine sector data, known typologies, and mitigation capacity
- Retain essential identification and apply relief only where permitted
- Mandate prompt reporting of suspicion under domestic requirements
Explanation
Correct Answer
B:With the mandate of sector supervisor or designated national assessment body in view, the described requirement calls for an implementable action, not only a statement of policy. In this situation it addresses the core problem directly, with sector supervisor or designated national assessment body responsible and sectoral risk assessment with evidence-based drivers providing an audit trail.
Incorrect Answers
A:In assessing the separate duty to require documented assessment and proportionate mitigation of ML and TF exposure as opposed to the current duty to combine sector data, known typologies, and mitigation capacity, this intervention relates to national risk assessment linked to supervised controls in a separate regulatory setting. It cannot substitute for combine sector data, known typologies, and mitigation capacity here because the scenario involves a different obligation and authority.
C:When examining the separate duty to retain essential identification and apply relief only where permitted as opposed to the current duty to combine sector data, known typologies, and mitigation capacity, the alternative concerns a different risk overseen by domestic AML supervisor setting proportional requirements. It would not implement the specific requirement in the case, which requires the responsible party to combine sector data, known typologies, and mitigation capacity and an associated record.
D:Given the separate duty to mandate prompt reporting of suspicion under domestic requirements as opposed to the current duty to combine sector data, known typologies, and mitigation capacity as the distinguishing point, its purpose is to address FATF suspicious transaction reporting principle; that does not complete the practical duty described. The requested outcome requires combine sector data, known typologies, and mitigation capacity, not merely another compliance activity.
Question 528
Operations are comparing pre- and post-fix outcomes after adopting a measure to reconcile active accounts and beneficial owners into each screening run. The deficiency being repaired was incomplete population coverage in ongoing sanctions screening. Which outcome test would most directly detect a recurrence of the defect?
- Quantify omissions and retry failed customer records
- Measure list-publication-to-rescreening completion time
- Measure precision and missed suspicious cases after changes
- Test recall separately for short and common-name segments
Explanation
Correct Answer
A:With the technical failure of incomplete population coverage in ongoing sanctions screening in view, the proposed validation directly challenges the weakness, not an unrelated performance statistic. It can reveal whether reconcile active accounts and beneficial owners into each screening run works on the relevant data and exceptions before broader deployment.
Incorrect Answers
B:This would be useful when implementing initiate appropriate rescreening when relevant lists change, but the key failure here is incomplete population coverage in ongoing sanctions screening. Given the difference between uncontrolled screening refresh interval and list-update trigger and incomplete population coverage in ongoing sanctions screening as the distinguishing point, it may pass even if the present defect persists, so it is not the most probative test.
C:This check would reveal failures like low rule precision due to missing customer context, not whether reconcile active accounts and beneficial owners into each screening run corrects the problem in this case. The relevant validation must challenge incomplete population coverage in ongoing sanctions screening using source population counts and included ownership relationships.
D:In assessing the difference between excessive fuzzy-match suppression for common or short names and incomplete population coverage in ongoing sanctions screening, the alternative is tailored to calibrate thresholds using risk-weighted matches and missed-hit testing and its separate data requirement. It would not provide decisive evidence that the remedy in this scenario eliminates incomplete population coverage in ongoing sanctions screening.
Question 529
A prepaid-card program shows many cards loaded by unrelated people and drained at a single cash-out point. What is the most defensible risk characterization at this stage?
- Remittance-agent CDD failure
- Mule-wallet collection and rapid dispersal
- Refund diversion through e-commerce accounts
- Prepaid-value pooling and cash-out layering
Explanation
Correct Answer
D:The key issue is the unresolved relationship, which requires establishing whether cardholders share a common controller. That inquiry is consistent with the indicated financial-crime pattern and matters because it can expose aggregation of prepaid balances into anonymous payouts; an assessment should document evidence both for and against suspicion.
Incorrect Answers
A:The alternative addresses activity that might produce transactions accepted without sender identification and would require evidence about whether the agent collected required originator information. Those are not the facts that drive this scenario, whose defining task is to establish whether cardholders share a common controller.
B:Given the distinction between exposure to pass-through wallets used to consolidate third-party funds and exposure to aggregation of prepaid balances into anonymous payouts as the distinguishing point, that interpretation is associated with a different situation where investigators must establish whether senders were recruited to move third-party funds. It would direct attention toward pass-through wallets used to consolidate third-party funds, whereas this case principally calls for establishing whether cardholders share a common controller; the signals should not be treated as interchangeable.
C:This typology would be worth testing when the issue is establishing whether refunded recipients originally funded the purchases, leading to exposure from refunds redirected to unrelated payment credentials. The present facts instead call for establishing whether cardholders share a common controller, so choosing it would send the investigation toward a different mechanism.
Question 530
A low-risk business's beneficial-owner address changes and the team treats the change as no-risk without verifying the update. What failure explains the described breakdown?
- Incomplete legal-arrangement due diligence
- Beneficial control missed by equity-only checks
- Lack of ongoing consistency review against expected activity
- Unverified change to material customer identification data
Explanation
Correct Answer
D:When examining the need to validate the change and determine whether risk level is affected, this weakness explains how the observed business process failed to control the risk. Addressing it calls for steps to validate the change and determine whether risk level is affected and evidence beyond management's assurance that a policy exists.
Incorrect Answers
A:That deficiency is typically owned by trust and legal-arrangement CDD specialist and rectified through measures to identify parties exercising relevant ownership and control before activation. This case calls for steps to validate the change and determine whether risk level is affected, meaning the alternative misses the central governance or process gap.
B:This weakness would appear in a process requiring staff to examine voting rights and other means of effective control. It is not the defining break in the present case, where the remediation must be designed to validate the change and determine whether risk level is affected to address the observed behavior.
C:The alternative diagnosis describes an issue corrected through steps to reassess the profile and investigate deviations from stated purpose. The scenario instead points to a failure requiring the team to validate the change and determine whether risk level is affected; confusing the two would send corrective effort to the wrong workflow.