ACAMS CGSS (Certified Global Sanctions Specialist) Practice Test 105

Question 1040

Compliance has already implemented an operational remedy to investigate economic substance beyond accounting labels. The documented process change is: Reconcile credit notes, shipment evidence and cash settlement beneficiaries. Independent testing is now required. Which follow-up audit procedure most directly tests the intended control?

  1. review payment method changes following blocked or rejected transactions
  2. test credit-note patterns against bank settlements
  3. monitor repeated declines across available channels
  4. flag post-alert beneficiary changes for compliance approval

Explanation

Correct Answer

B:

Accounting reversals can mask persistent prohibited payments if actual value still moves. The follow-up directly tests whether staff can investigate economic substance beyond accounting labels when the risk returns.

Incorrect Answers

A:

The follow-up is targeted at the separate objective to assess whether the underlying activity remains restricted. For the remediated process, accounting reversals can mask persistent prohibited payments if actual value still moves. The test should address this mechanism.

C:

That procedure would help test control performance when the goal is to identify possible channel hopping after interdiction. The remediation under review is meant to investigate economic substance beyond accounting labels; the specific proof to examine is general ledger, shipment records and payment trail.

D:

Testing that area does not confirm whether this remediation works in the circumstances requiring investigate economic substance beyond accounting labels. Accounting reversals can mask persistent prohibited payments if actual value still moves. The suggested assurance is insufficiently specific.

Question 1041

A regulatory remediation plan targets the ability to coordinate delistings with broader legal analysis. The design must include practical intervention and an independent assessment of continued performance. The exception involved an unsupported decision to delete every related entity alert immediately after a single list removal. Which TWO choices jointly provide these elements? Choose TWO.

  1. test delisting decisions for residual restrictions
  2. Flag missing ownership proportions for investigation before automated threshold decisions
  3. replay past payment decisions against recorded configurations
  4. Review controlling owners, other regimes and effective dates before release
  5. Implement controlled jurisdiction codes and validated aliases

Explanation

Correct Answers

A:

When evaluating coordinate delistings with broader legal analysis, an individual delisting does not automatically clear all independently applicable restrictions; this should be tested against delisting notice and current beneficial-ownership map. Repeating the selected check against actual activity will show whether decisions to coordinate delistings with broader legal analysis now follow the intended control.

D:

In the described situation, a sanctioned entity is removed from a list but a related ownership restriction may still apply. The control should respond to this substantive risk: an individual delisting does not automatically clear all independently applicable restrictions. Document the determination using delisting notice and current beneficial-ownership map.

Incorrect Answers

B:

Blank equity data is not evidence that sanctioned ownership is absent. The option therefore belongs to a different control objective, whereas this situation requires the team to coordinate delistings with broader legal analysis. Its evidence basis is delisting notice and current beneficial-ownership map.

C:

This would be informative where audit is assessing whether staff can preserve temporal reproducibility. In the present case, an individual delisting does not automatically clear all independently applicable restrictions. The proposed sample would not directly test the intended fix.

E:

Unmapped geographic values can bypass geography-dependent controls. Applying that measure here would help to standardize geographic data mapping without establishing the narrower requirement to coordinate delistings with broader legal analysis. Records such as delisting notice and current beneficial-ownership map resolve that gap.

Question 1042

Compliance has already implemented an operational remedy to assess data field coverage. The documented process change is: Map relevant message fields and document coverage limits for risk-based screening. Independent testing is now required. Which follow-up audit procedure most directly tests the intended control?

  1. monitor model drift and delayed true-positive cases
  2. measure true-hit retention and false-positive rates after tuning
  3. review missed entity matches after normalization changes
  4. use synthetic messages to test each screened field

Explanation

Correct Answer

D:

Restricted parties or references can appear in fields beyond the main beneficiary name. Its results can reveal whether the necessary steps to assess data field coverage are still being overlooked.

Incorrect Answers

A:

This would be informative where audit is assessing whether staff can retain model governance and auditable controls; in this assurance inquiry, the probative records are payment schema and field-to-screening mapping. In the present case, restricted parties or references can appear in fields beyond the main beneficiary name. The proposed sample would not directly test the intended fix.

B:

This tests the capability to improve precision without sacrificing detection, not the control gap in deciding to assess data field coverage. A targeted assurance procedure should inspect outcomes involving payment schema and field-to-screening mapping.

C:

The proposed check measures a risk connected with the need to evaluate filtering stop-word effects; in this assurance inquiry, the probative records are payment schema and field-to-screening mapping. It does not directly retest whether the institution now can assess data field coverage, using payment schema and field-to-screening mapping.

Question 1043

Following changes to controls intended to investigate whether logistics mask the true destination, an audit team wants evidence of sustained effectiveness. The implemented response is documented as: Analyze routing cost, transit decisions and final consignee. Which follow-up audit procedure most directly tests the intended control?

  1. sample production evidence against certified origin
  2. trend route deviations relative to declared customers
  3. test end-user consistency across trade participants
  4. review repeated dark activity and geographic risk correlations

Explanation

Correct Answer

B:

Circuitous routing may be a diversion indicator when unsupported by commercial reasons. The proposed review of operational outcomes can reveal recurrence of the failure to investigate whether logistics mask the true destination.

Incorrect Answers

A:

The follow-up is targeted at the separate objective to verify underlying commodity provenance. For the remediated process, circuitous routing may be a diversion indicator when unsupported by commercial reasons. The test should address this mechanism.

C:

Conflicting accounts of final use undermine reliance on standard declarations. That observation does not measure the control outcome that matters here: whether staff can investigate whether logistics mask the true destination. A closer test would inspect route price comparison and onward shipping documents.

D:

This tests the capability to investigate potential AIS manipulation and concealed loading, not the control gap in deciding to investigate whether logistics mask the true destination. A targeted assurance procedure should inspect outcomes involving route price comparison and onward shipping documents.

Question 1044

A sanctions program remediation concerning the ability to evaluate filtering stop-word effects is complete on paper. The procedure implemented by management is: Test whether excluded tokens are essential to distinguish actual targets. Its continuing effectiveness remains unproven. Which follow-up audit procedure most directly tests the intended control?

  1. backtest multilingual name variations before threshold changes
  2. review missed entity matches after normalization changes
  3. sample alert outcomes for unsupported true-positive decisions
  4. independent post-deployment detection sampling

Explanation

Correct Answer

B:

To determine whether the institution consistently can evaluate filtering stop-word effects, audit should inspect actual case outcomes. Common-token reduction improves speed but can erase meaningful entity distinctions. That is what this follow-up is designed to evidence.

Incorrect Answers

A:

Exact matching alone can miss transliteration and typographic variations in sanctioned names. The suggested test therefore concerns a different weakness, whereas the question asks if controls can reliably evaluate filtering stop-word effects.

C:

That procedure would help test control performance when the goal is to introduce reliable case adjudication; in this assurance inquiry, the probative records are stop-word rules and known-match regression cases. The remediation under review is meant to evaluate filtering stop-word effects; the specific proof to examine is stop-word rules and known-match regression cases.

D:

Lower alert volume may conceal new false negatives unless detection is measured. That observation does not measure the control outcome that matters here: whether staff can evaluate filtering stop-word effects. A closer test would inspect stop-word rules and known-match regression cases.

Question 1045

A quarterly review concerns control effectiveness when the institution must preserve escalation and reporting accountability. The remediation plan specifies: Open a documented incident, assess legal reporting triggers and implement containment. The auditor needs a relevant retrospective test. Which follow-up audit procedure most directly tests the intended control?

  1. record source reliability and corroboration for each material finding
  2. monitor breach-reporting decisions against legal deadlines
  3. test evidence chain of custody and privileged access
  4. sample account-linked hits for identity-based adjudication

Explanation

Correct Answer

B:

Material potential violations require traceable handling and timely regulatory analysis. The selected check provides continuing verification of control results associated with the requirement to preserve escalation and reporting accountability; it should be recorded with identified exceptions and remediation.

Incorrect Answers

A:

Media coverage can flag concerns but may contain unverified or stale ownership claims. The suggested test therefore concerns a different weakness, whereas the question asks if controls can reliably preserve escalation and reporting accountability.

C:

The proposed check measures a risk connected with the need to protect the integrity of an internal investigation. It does not directly retest whether the institution now can preserve escalation and reporting accountability, using incident chronology and applicable reporting provisions.

D:

Stable ownership evidence can outweigh superficial spelling differences. The suggested test therefore concerns a different weakness, whereas the question asks if controls can reliably preserve escalation and reporting accountability; in this assurance inquiry, the probative records are incident chronology and applicable reporting provisions.

Question 1046

Following changes to controls intended to update the enterprise risk assessment to reflect actual activity, an audit team wants evidence of sustained effectiveness. The implemented response is documented as: Reweight geographic, counterparty, transport and dual-use characteristics. Which follow-up audit procedure most directly tests the intended control?

  1. review changes in equipment location and operator
  2. compare actual financed routes with risk assumptions
  3. track authorized payment exceptions and operational failures
  4. test actual flows against declared downstream access

Explanation

Correct Answer

B:

When evaluating update the enterprise risk assessment to reflect actual activity, risk changes with product, customer, destination and supply-chain facts rather than calendar alone; this should be tested against trade flow data, counterparties and goods classification. The follow-up directly tests whether staff can update the enterprise risk assessment to reflect actual activity when the risk returns.

Incorrect Answers

A:

This would be informative where audit is assessing whether staff can evaluate end-use and end-user exposure beyond the borrower. In the present case, risk changes with product, customer, destination and supply-chain facts rather than calendar alone. The proposed sample would not directly test the intended fix.

C:

The proposed check measures a risk connected with the need to distinguish permitted humanitarian operations from sanctions exposure. It does not directly retest whether the institution now can update the enterprise risk assessment to reflect actual activity, using trade flow data, counterparties and goods classification.

D:

That procedure would help test control performance when the goal is to map nested customer access to identify indirect exposure. The remediation under review is meant to update the enterprise risk assessment to reflect actual activity; the specific proof to examine is trade flow data, counterparties and goods classification.

Question 1047

Following changes to controls intended to evaluate indirect value transfer and beneficial ownership, an audit team wants evidence of sustained effectiveness. The implemented response is documented as: Investigate wallet control, transaction destination and sanctions-list exposure. Which follow-up audit procedure most directly tests the intended control?

  1. test credit-note patterns against bank settlements
  2. trace asset movements through known counterparties and wallet clusters
  3. review message alterations and associated documentation inconsistencies
  4. test late-stage transaction descriptions against source contracts

Explanation

Correct Answer

B:

Fiat conversion does not remove risks arising from a sanctioned wallet or ultimate beneficiary; the assurance aspect of this decision should be evaluated against fiat funding source and destination wallet provenance in response to an exchange customer converts fiat to stablecoins and immediately transfers to an undisclosed external wallet. Repeating the selected check against actual activity will show whether decisions to evaluate indirect value transfer and beneficial ownership now follow the intended control.

Incorrect Answers

A:

This tests the capability to investigate economic substance beyond accounting labels, not the control gap in deciding to evaluate indirect value transfer and beneficial ownership. A targeted assurance procedure should inspect outcomes involving fiat funding source and destination wallet provenance.

C:

Testing that area does not confirm whether this remediation works in the circumstances requiring evaluate indirect value transfer and beneficial ownership. Fiat conversion does not remove risks arising from a sanctioned wallet or ultimate beneficiary; this alternative supports a different inquiry to recognize payment-message stripping risk, whereas the current task is to evaluate indirect value transfer and beneficial ownership using fiat funding source and destination wallet provenance. The suggested assurance is insufficiently specific.

D:

This tests the capability to investigate deliberate masking of payment purpose, not the control gap in deciding to evaluate indirect value transfer and beneficial ownership. A targeted assurance procedure should inspect outcomes involving fiat funding source and destination wallet provenance; in this assurance inquiry, the probative records are fiat funding source and destination wallet provenance.

Question 1048

An independent tester is reviewing a control designed to establish auditable decision rights and escalation criteria. The control owner describes the procedure as: Create approval levels, documented evidence requirements and second-line review for high-risk cases. The tester must establish whether it works in live operations. Which follow-up audit procedure most directly tests the intended control?

  1. test cases for compliance with delegated authority
  2. monitor list-change to rescreen completion times
  3. review escalation timeliness and repeat control failures
  4. monitor remediation verification by an independent function
  5. track remediation milestones and overdue high-severity issues

Explanation

Correct Answer

A:

Traceable ownership and independent review reduce arbitrary high-impact decisions. Ongoing testing must detect whether the same failure mode has reappeared.

Incorrect Answers

B:

This tests the capability to assign continuous monitoring accountability, not the control gap in deciding to establish auditable decision rights and escalation criteria. A targeted assurance procedure should inspect outcomes involving closure history, workflow permissions and escalation logs.

C:

Testing that area does not confirm whether this remediation works in the circumstances requiring establish auditable decision rights and escalation criteria. Traceable ownership and independent review reduce arbitrary high-impact decisions. The suggested assurance is insufficiently specific.

D:

This tests the capability to strengthen independent challenge, not the control gap in deciding to establish auditable decision rights and escalation criteria. A targeted assurance procedure should inspect outcomes involving closure history, workflow permissions and escalation logs; in this assurance inquiry, the probative records are closure history, workflow permissions and escalation logs.

E:

This tests the capability to demonstrate management commitment through resources, not the control gap in deciding to establish auditable decision rights and escalation criteria. The principle for assessing establish auditable decision rights and escalation criteria is as follows: a targeted assurance procedure should inspect outcomes involving closure history, workflow permissions and escalation logs.

Question 1049

The bank has addressed a gap in its ability to adapt due diligence to blockchain exposure. The implemented measure is: Screen wallet addresses and assess risky counterparties using available attribution and identity evidence. An auditor must now look for repeat failure. Which follow-up audit procedure most directly tests the intended control?

  1. re-screen claims payees near disbursement
  2. test address intelligence and escalation quality
  3. audit high-value third-party purchases for hidden beneficiaries
  4. monitor changes in distributors and unusual routing

Explanation

Correct Answer

B:

Pseudonymous addresses may intersect with designated wallets or services. The proposed review of operational outcomes can reveal recurrence of the failure to adapt due diligence to blockchain exposure.

Incorrect Answers

A:

This tests the capability to check the actual property interest in a payment, not the control gap in deciding to adapt due diligence to blockchain exposure. A targeted assurance procedure should inspect outcomes involving blockchain transaction history and customer wallet ownership evidence.

C:

The proposed check measures a risk connected with the need to identify the ultimate purchaser and source of payment. It does not directly retest whether the institution now can adapt due diligence to blockchain exposure, using blockchain transaction history and customer wallet ownership evidence.

D:

Testing that area does not confirm whether this remediation works in the circumstances requiring adapt due diligence to blockchain exposure. Pseudonymous addresses may intersect with designated wallets or services. The suggested assurance is insufficiently specific.

Question 1050

A sanctions program remediation concerning the ability to apply asset-type-specific holding controls is complete on paper. The procedure implemented by management is: Keep blocked digital assets inaccessible and satisfy virtual-currency reporting rules. Its continuing effectiveness remains unproven. Which follow-up audit procedure most directly tests the intended control?

  1. monitor reporting deadlines with independent exception escalation
  2. reconcile corrections to reporting and audit records
  3. audit proposed distributions for blocked interests
  4. test custody restrictions and authorized wallet releases

Explanation

Correct Answer

D:

OFAC does not generally require fiat conversion or bank interest-bearing storage for blocked virtual currency; the assurance aspect of this decision should be evaluated against wallet custody records and blocking policy in response to a US wallet custodian holds blocked virtual currency and plans to move it to a bank interest-bearing account. The selected check provides continuing verification of control results associated with the requirement to apply asset-type-specific holding controls; it should be recorded with identified exceptions and remediation.

Incorrect Answers

A:

Testing that area does not confirm whether this remediation works in the circumstances requiring apply asset-type-specific holding controls. OFAC does not generally require fiat conversion or bank interest-bearing storage for blocked virtual currency; this alternative supports a different inquiry to address blocking-report deadlines and evidence, whereas the current task is to apply asset-type-specific holding controls using wallet custody records and blocking policy. The suggested assurance is insufficiently specific.

B:

This tests the capability to resolve an erroneous hold under the correct legal process, not the control gap in deciding to apply asset-type-specific holding controls. A targeted assurance procedure should inspect outcomes involving wallet custody records and blocking policy.

C:

That procedure would help test control performance when the goal is to protect restricted property during insolvency. The remediation under review is meant to apply asset-type-specific holding controls; the specific proof to examine is wallet custody records and blocking policy.

Certified Global Sanctions Specialist (CGSS) Practice Tests