ACAMS CGSS (Certified Global Sanctions Specialist) Practice Test 100

Question 990

A quarterly review concerns control effectiveness when the institution must identify potential blocked property interests under the relevant law. The remediation plan specifies: Examine rights to trust assets, distributions and control before deciding treatment. The auditor needs a relevant retrospective test. Which follow-up audit procedure most directly tests the intended control?

  1. validate cap tables and ownership paths against entity identifiers
  2. test ownership dates against settlement timestamps
  3. review distributions and beneficial interests periodically
  4. test ownership decisions for confusion between legal regimes

Explanation

Correct Answer

C:

Sanctions analysis must consider substantive interests in property, not only account titles. The selected check provides continuing verification of control results associated with the requirement to identify potential blocked property interests under the relevant law; it should be recorded with identified exceptions and remediation.

Incorrect Answers

A:

The option might produce useful assurance about the ability to avoid double counting and trace qualifying indirect interests, but not the weakness requiring proof that staff can identify potential blocked property interests under the relevant law. Records including trust deed, beneficiary rights and payment instruction matter here.

B:

The proposed check measures a risk connected with the need to assess effective ownership rather than announcement. It does not directly retest whether the institution now can identify potential blocked property interests under the relevant law, using trust deed, beneficiary rights and payment instruction.

D:

For the distinct task to separate AML ownership collection thresholds from sanctions blocking, CDD identification thresholds and OFAC's automatic blocking threshold serve different purposes; this question instead requires a decision to identify potential blocked property interests under the relevant law. That observation does not measure the control outcome that matters here: whether staff can identify potential blocked property interests under the relevant law. A closer test would inspect trust deed, beneficiary rights and payment instruction.

Question 991

A sanctions-control issue concerning the ability to enforce completeness requirements was marked remediated. The agreed intervention is: Flag missing ownership proportions for investigation before automated threshold decisions. The assurance function will test actual cases rather than management attestations. Which follow-up audit procedure most directly tests the intended control?

  1. run field-level integrity checks for each list revision
  2. test reversible lineage for critical identity fields
  3. monitor missingness by customer segment and source
  4. replay past payment decisions against recorded configurations

Explanation

Correct Answer

C:

Blank equity data is not evidence that sanctioned ownership is absent. The follow-up directly tests whether staff can enforce completeness requirements when the risk returns.

Incorrect Answers

A:

Matching overall counts can conceal significant missed designations. That observation does not measure the control outcome that matters here: whether staff can enforce completeness requirements. A closer test would inspect ownership schema validation and shareholder documents.

B:

This tests the capability to retain raw source identities alongside normalized values, not the control gap in deciding to enforce completeness requirements. A targeted assurance procedure should inspect outcomes involving ownership schema validation and shareholder documents.

D:

This tests the capability to preserve temporal reproducibility, not the control gap in deciding to enforce completeness requirements. A targeted assurance procedure should inspect outcomes involving ownership schema validation and shareholder documents; in this assurance inquiry, the probative records are ownership schema validation and shareholder documents.

Question 992

A sanctions program remediation concerning the ability to evaluate actual pseudonymity and available analytics is complete on paper. The procedure implemented by management is: Correlate addresses with transaction records and independently verified identity information. Its continuing effectiveness remains unproven. Which follow-up audit procedure most directly tests the intended control?

  1. review sanctions exposure at available service-control points
  2. test cross-chain visibility and alert coverage
  3. validate attribution confidence and changes over time
  4. audit blocked-asset access and conversion authorizations

Explanation

Correct Answer

C:

When evaluating evaluate actual pseudonymity and available analytics, public ledgers expose transaction links even though addresses do not inherently reveal real names; this should be tested against chain data and exchange KYC links. The selected check provides continuing verification of control results associated with the requirement to evaluate actual pseudonymity and available analytics; it should be recorded with identified exceptions and remediation.

Incorrect Answers

A:

The proposed check measures a risk connected with the need to analyze the actual regulated participant and prohibited service. It does not directly retest whether the institution now can evaluate actual pseudonymity and available analytics, using chain data and exchange KYC links.

B:

The proposed check measures a risk connected with the need to investigate cross-chain tracing and identity continuity. It does not directly retest whether the institution now can evaluate actual pseudonymity and available analytics, using chain data and exchange KYC links; in this assurance inquiry, the probative records are chain data and exchange KYC links.

D:

The proposed check measures a risk connected with the need to apply the correct holding requirements for blocked virtual currency. The principle for assessing evaluate actual pseudonymity and available analytics is as follows: it does not directly retest whether the institution now can evaluate actual pseudonymity and available analytics, using chain data and exchange KYC links.

Question 993

A sanctions program remediation concerning the ability to assess client and trust-account property interests is complete on paper. The procedure implemented by management is: Identify the economic owners and legal status of held client funds. Its continuing effectiveness remains unproven. Which follow-up audit procedure most directly tests the intended control?

  1. test provenance documents for consistency with physical logistics
  2. sample common-name alert decisions for supporting identifiers
  3. re-screen claims payees near disbursement
  4. review trust disbursements for beneficiary restrictions

Explanation

Correct Answer

D:

Professional service providers may hold or transfer assets subject to freezing restrictions. Its results can reveal whether the necessary steps to assess client and trust-account property interests are still being overlooked.

Incorrect Answers

A:

The follow-up is targeted at the separate objective to identify sanctioned supply origins. For the remediated process, professional service providers may hold or transfer assets subject to freezing restrictions. The test should address this mechanism.

B:

The proposed check measures a risk connected with the need to resolve identity using available customer data. It does not directly retest whether the institution now can assess client and trust-account property interests, using client account ledger and beneficiary ownership documents.

C:

Testing that area does not confirm whether this remediation works in the circumstances requiring assess client and trust-account property interests. Professional service providers may hold or transfer assets subject to freezing restrictions. The suggested assurance is insufficiently specific.

Question 994

A sanctions-control issue concerning the ability to resolve freshness of ownership evidence was marked remediated. The agreed intervention is: Seek current beneficial ownership and controlling-person documentation. The assurance function will test actual cases rather than management attestations. Which follow-up audit procedure most directly tests the intended control?

  1. sample keyword alerts against corroborating fields
  2. compare payment descriptions with customer economic activity
  3. set event-driven refresh triggers for material corporate changes
  4. review owners against current sanctions sources and controls

Explanation

Correct Answer

C:

To determine whether the institution consistently can resolve freshness of ownership evidence, audit should inspect actual case outcomes. Changes in shareholders can create sanctions exposure after onboarding. That is what this follow-up is designed to evidence.

Incorrect Answers

A:

The option might produce useful assurance about the ability to avoid treating a keyword as conclusive evidence, but not the weakness requiring proof that staff can resolve freshness of ownership evidence. Records including latest filings and dated ownership attestations matter here.

B:

The option might produce useful assurance about the ability to resolve the economic beneficiary before clearance, but not the weakness requiring proof that staff can resolve freshness of ownership evidence. Records including latest filings and dated ownership attestations matter here.

D:

The option might produce useful assurance about the ability to separate designation findings from broader exposure, but not the weakness requiring proof that staff can resolve freshness of ownership evidence. Records including latest filings and dated ownership attestations matter here.

Question 995

An EU-incorporated business routed a contract through a non-EU office and treated the deal as outside EU sanctions solely because the signature occurred abroad. The review must assess the entity's legal reach and test foreign-branch activity. Which TWO choices together satisfy those duties? Choose TWO.

  1. sample foreign-branch deals for EU-entity nexus
  2. compare customer representations with destination evidence
  3. Document jurisdictional legal requirements and resolve incompatible obligations through counsel
  4. Verify present residence, location and counterparties against the applicable territorial rule
  5. Assess the EU regulation's personal and territorial scope for the contracting entity

Explanation

Correct Answers

A:

EU legal persons incorporated under Member State law can be covered even outside EU territory. Its results can reveal whether the necessary steps to evaluate overseas conduct of an EU entity are still being overlooked.

E:

EU legal persons incorporated under Member State law can be covered even outside EU territory. In this case, the immediate task is to evaluate overseas conduct of an EU entity. The measure addresses that decision at the operative point, and the basis should be checked against incorporation record and operative scope provision.

Incorrect Answers

B:

Transshipment may mask the destination or restricted purpose of the underlying sale. That observation does not measure the control outcome that matters here: whether staff can evaluate overseas conduct of an EU entity. A closer test would inspect incorporation record and operative scope provision.

C:

The alternative control addresses distinguish policy risk appetite from mandatory local law because a voluntary global standard cannot authorize violation of binding local anti-boycott or blocking rules; the current evidence inquiry concerns the need to evaluate overseas conduct of an EU entity. Applying that measure here would help to distinguish policy risk appetite from mandatory local law without establishing the narrower requirement to evaluate overseas conduct of an EU entity. Records such as incorporation record and operative scope provision resolve that gap.

D:

For the distinct task to avoid unsupported territorial assumptions, nationality, origin and physical location are not interchangeable tests of territorial prohibitions; this question instead requires a decision to evaluate overseas conduct of an EU entity. Its focus is on how to avoid unsupported territorial assumptions, not the present need to evaluate overseas conduct of an EU entity. The decisive facts here are found in incorporation record and operative scope provision.

Question 996

The bank has addressed a gap in its ability to weigh identifying data rather than clear by one attribute alone. The implemented measure is: Document the complete identity comparison and remaining uncertainties. An auditor must now look for repeat failure. Which follow-up audit procedure most directly tests the intended control?

  1. audit common-name closures for corroborating data
  2. sample closures for use of multiple consistent identity facts
  3. test both precision and recall on common legal suffix variations
  4. run region-specific parsing regression tests

Explanation

Correct Answer

B:

Independent descriptors can support a false-positive decision when considered together. The proposed review of operational outcomes can reveal recurrence of the failure to weigh identifying data rather than clear by one attribute alone.

Incorrect Answers

A:

The follow-up is targeted at the separate objective to resolve common-name ambiguity by identity rather than spelling. For the remediated process, independent descriptors can support a false-positive decision when considered together. The test should address this mechanism.

C:

The follow-up is targeted at the separate objective to normalize names without removing distinguishing substance. For the remediated process, independent descriptors can support a false-positive decision when considered together; in this assurance inquiry, the probative records are verified biographical attributes and designation identifiers. The test should address this mechanism.

D:

The follow-up is targeted at the separate objective to correct name-order assumptions in screening. The principle for assessing weigh identifying data rather than clear by one attribute alone is as follows: for the remediated process, independent descriptors can support a false-positive decision when considered together. The test should address this mechanism.

Question 997

An independent tester is reviewing a control designed to address unstructured-payment data risk. The control owner describes the procedure as: Assess free-text screening and obtain clarifying underlying details where needed. The tester must establish whether it works in live operations. Which follow-up audit procedure most directly tests the intended control?

  1. test cover-message reconciliation and missing-party escalation
  2. measure text parsing completeness and exception handling
  3. check routing changes against intermediary restrictions
  4. sample geography keyword alerts for contextual correctness
  5. test amended messages for mandatory rescreen triggers

Explanation

Correct Answer

B:

Unstructured information can identify restricted parties or purposes missed by structured-only filters, which is directly relevant when deciding how to address unstructured-payment data risk using raw remittance narrative and invoice reference. Ongoing testing must detect whether the same failure mode has reappeared.

Incorrect Answers

A:

The proposed check measures a risk connected with the need to resolve transparency limitations in correspondent payments. It does not directly retest whether the institution now can address unstructured-payment data risk, using raw remittance narrative and invoice reference.

C:

This tests the capability to classify the implicated party and legal interest correctly, not the control gap in deciding to address unstructured-payment data risk. A targeted assurance procedure should inspect outcomes involving raw remittance narrative and invoice reference.

D:

This tests the capability to resolve the contextual role of a risky geographic term, not the control gap in deciding to address unstructured-payment data risk. A targeted assurance procedure should inspect outcomes involving raw remittance narrative and invoice reference; in this assurance inquiry, the probative records are raw remittance narrative and invoice reference.

E:

That procedure would help test control performance when the goal is to reassess newly introduced payment participants. The remediation under review is meant to address unstructured-payment data risk; the specific proof to examine is raw remittance narrative and invoice reference.

Question 998

A sanctions-control issue concerning the ability to support explainable escalation and challenge was marked remediated. The agreed intervention is: Maintain traceable model inputs, reason codes and human review for critical decisions. The assurance function will test actual cases rather than management attestations. Which follow-up audit procedure most directly tests the intended control?

  1. audit decisions against independent legal and identity criteria
  2. sample model recommendations against independent identity evidence
  3. reconcile additions, deletions and amended aliases daily
  4. test boundary cases near operational thresholds

Explanation

Correct Answer

B:

A black-box recommendation does not satisfy the need for defensible sanctions dispositions. Repeating the selected check against actual activity will show whether decisions to support explainable escalation and challenge now follow the intended control.

Incorrect Answers

A:

Testing that area does not confirm whether this remediation works in the circumstances requiring support explainable escalation and challenge. A black-box recommendation does not satisfy the need for defensible sanctions dispositions. The suggested assurance is insufficiently specific.

C:

That procedure would help test control performance when the goal is to preserve legal source and transformation traceability. The remediation under review is meant to support explainable escalation and challenge; the specific proof to examine is input features, decision logs and reviewer record.

D:

Scores are meaningful only when validated against actual identity distinctions. The suggested test therefore concerns a different weakness, whereas the question asks if controls can reliably support explainable escalation and challenge.

Question 999

An independent tester is reviewing a control designed to recognize payment-message stripping risk. The control owner describes the procedure as: Preserve and reconcile full trade data against payment message fields. The tester must establish whether it works in live operations. Which follow-up audit procedure most directly tests the intended control?

  1. test round-trip and common-controller activity patterns
  2. test credit-note patterns against bank settlements
  3. link cash-equivalent movements to subsequent high-risk deposits
  4. review message alterations and associated documentation inconsistencies
  5. sample aggregator flows for completeness of submerchant information
  6. track sponsor and guarantor substitutions after adverse findings

Explanation

Correct Answer

D:

To determine whether the institution consistently can recognize payment-message stripping risk, audit should inspect actual case outcomes. Removing location information can conceal sanctions exposure from transaction screening. That is what this follow-up is designed to evidence.

Incorrect Answers

A:

Back-to-back movement with minimal commercial activity may hide the true payer or payee. The suggested test therefore concerns a different weakness, whereas the question asks if controls can reliably recognize payment-message stripping risk.

B:

Accounting reversals can mask persistent prohibited payments if actual value still moves. That observation does not measure the control outcome that matters here: whether staff can recognize payment-message stripping risk. A closer test would inspect unedited invoices and original payment instructions.

C:

This tests the capability to trace the ultimate transaction purpose through cash intermediaries, not the control gap in deciding to recognize payment-message stripping risk. A targeted assurance procedure should inspect outcomes involving unedited invoices and original payment instructions.

E:

That procedure would help test control performance when the goal is to look through aggregation to the underlying commercial recipient. The remediation under review is meant to recognize payment-message stripping risk; the specific proof to examine is unedited invoices and original payment instructions.

F:

Testing that area does not confirm whether this remediation works in the circumstances requiring recognize payment-message stripping risk. Removing location information can conceal sanctions exposure from transaction screening. The suggested assurance is insufficiently specific.

Question 1000

A sanctions exception prompts a review of whether controls genuinely assess the underlying trade as well as the bank customer. The team must select components spanning immediate action and follow-up evaluation. The remediated process must no longer permit a reviewer to clear the facility after screening the applicant name only. Which TWO choices jointly provide these elements? Choose TWO.

  1. Examine trade documents and goods-related prohibitions before issuing credit
  2. Review sanctions on derivatives, the counterparty and any prohibited underlying exposure
  3. test messages for required identifiers and unexplained omissions
  4. sample financed consignments for restricted end uses
  5. Check security type, issue date, maturity and relevant directive
  6. review corporate actions against sanctioned beneficial interests

Explanation

Correct Answers

A:

In the described situation, an issuing bank confirms the applicant is unsanctioned but the goods financed under a letter of credit may be restricted. The control should respond to this substantive risk: trade finance links banks to the goods, carriers and beneficiaries beyond the applicant. Document the determination using letter of credit, bill of lading and product classification.

D:

Trade finance links banks to the goods, carriers and beneficiaries beyond the applicant. Ongoing testing must detect whether the same failure mode has reappeared.

Incorrect Answers

B:

For the distinct task to determine restrictions on the product and parties, synthetic exposure may still fall within financing or securities restrictions depending on the rule; this question instead requires a decision to assess the underlying trade as well as the bank customer. Applying that measure here would help to determine restrictions on the product and parties without establishing the narrower requirement to assess the underlying trade as well as the bank customer. Records such as letter of credit, bill of lading and product classification resolve that gap.

C:

This tests the capability to control intermediary payment transparency, not the control gap in deciding to assess the underlying trade as well as the bank customer. A targeted assurance procedure should inspect outcomes involving letter of credit, bill of lading and product classification.

E:

The measure could be suitable for a different obligation, namely to apply instrument-specific market restrictions. In this case the key distinction is that trade finance links banks to the goods, carriers and beneficiaries beyond the applicant. The proposed action does not directly settle that issue.

F:

That procedure would help test control performance when the goal is to evaluate nominee ownership and sanctions entitlement; in this assurance inquiry, the probative records are letter of credit, bill of lading and product classification. The remediation under review is meant to assess the underlying trade as well as the bank customer; the specific proof to examine is letter of credit, bill of lading and product classification.

Certified Global Sanctions Specialist (CGSS) Practice Tests