Question 1090
Control designers are focusing on the mechanism behind unauthorized ach debit: The debit exploits the payment rail without the payer's required consent. Which measure best limits that opportunity?
- Validate direct-debit authorizations and monitor abnormal return rates.
- Monitor load velocity and impose appropriate risk controls on suspicious funding.
- Apply applicable contactless transaction protections and device anomaly monitoring.
- Require callback verification for payment instruction changes regardless of email familiarity.
Explanation
Correct Answer
A:The control directly addresses the failure point in Unauthorized ACH debit, since the debit exploits the payment rail without the payer's required consent. A subsequent independent review could match debit mandates with customer consents and originating entity identifiers to identify exceptions that bypassed the safeguard.
Incorrect Answers
B:This safeguard is directed primarily at Prepaid card load-and-drain rather than Unauthorized ACH debit, because prepaid value can be used to convert unauthorized payments into quickly transferable balances. Unlike the control for Prepaid card load-and-drain, the more direct design for Unauthorized ACH debit is to validate direct-debit authorizations and monitor abnormal return rates; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Contactless payment relay rather than Unauthorized ACH debit, because relay attacks extend a credential's communication path rather than physically duplicating the card. Unlike the control for Contactless payment relay, the more direct design for Unauthorized ACH debit is to validate direct-debit authorizations and monitor abnormal return rates; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Business email payment diversion rather than Unauthorized ACH debit, because the payment is authorized for a real invoice but settlement instructions are fraudulently replaced. Unlike the control for Business email payment diversion, the more direct design for Unauthorized ACH debit is to validate direct-debit authorizations and monitor abnormal return rates; a different safeguard cannot substitute for it.
Question 1091
Reviewers flag a possible concealed offshore insolvency asset issue. Their preliminary finding is: Financial records show transfers to an undisclosed account shortly before filing. Which test would best confirm or refute the concern?
- Assess the payment against applicable preference periods, defenses and creditor classes.
- Trace asset conveyance documents, fair value and beneficial ownership.
- Confirm claim validity using contracts, bank traces and accounting history.
- Compare disclosed assets with bank transfers, ownership and foreign records.
Explanation
Correct Answer
D:For the Concealed offshore insolvency asset concern, the procedure tests source evidence behind this observation: Financial records show transfers to an undisclosed account shortly before filing. This matters because concealment deprives the estate and creditors of property that should be disclosed; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
A:This comparison primarily addresses Preferential creditor payment review, in which preference rules can permit recovery of certain pre-filing payments without proving a fictitious invoice or ordinary theft; because the present question instead concerns Concealed offshore insolvency asset, reviewers should compare disclosed assets with bank transfers, ownership and foreign records rather than apply a check designed for Preferential creditor payment review.
B:This comparison primarily addresses Pre-filing fraudulent asset transfer, in which transfers intended to put assets beyond creditors may be challengeable under applicable insolvency law; because the present question instead concerns Concealed offshore insolvency asset, reviewers should compare disclosed assets with bank transfers, ownership and foreign records rather than apply a check designed for Pre-filing fraudulent asset transfer.
C:This comparison primarily addresses Fictitious creditor claim, in which a manufactured liability can dilute legitimate creditors' recoveries; because the present question instead concerns Concealed offshore insolvency asset, reviewers should compare disclosed assets with bank transfers, ownership and foreign records rather than apply a check designed for Fictitious creditor claim.
Question 1092
The monitoring team needs an observable indicator of forged check-maker signature. Which signal aligns most closely with the risk?
- Unusual discounts are concentrated on one customer and one employee.
- Disputed check signatures and check stock usage do not match approvals.
- Refunded card identifiers recur across unrelated customer transactions.
- Supplier reports nonreceipt although the bank image shows a cashed instrument.
Explanation
Correct Answer
B:This observation is a pertinent indicator of Forged check-maker signature because the perpetrator creates a payment instrument without the genuine drawer authorization. The practical corroborating procedure is to inspect paid check images, signing authority and voucher support; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Collusive price markdown, where sale-price manipulation improperly transfers value to an accomplice through undercharging, rather than the particular mechanism in Forged check-maker signature. Unlike the clue for Collusive price markdown, the more directly related indicator for Forged check-maker signature is this: Disputed check signatures and check stock usage do not match approvals.
C:The proposed observation fits Manipulated return-to-gift-card, where a fabricated return transfers store value instead of extracting physical currency, rather than the particular mechanism in Forged check-maker signature. Unlike the clue for Manipulated return-to-gift-card, the more directly related indicator for Forged check-maker signature is this: Disputed check signatures and check stock usage do not match approvals.
D:The proposed observation fits Forged check endorsement, where the authorized check is diverted at the endorsement stage, not created by a false invoice, rather than the particular mechanism in Forged check-maker signature. Unlike the clue for Forged check endorsement, the more directly related indicator for Forged check-maker signature is this: Disputed check signatures and check stock usage do not match approvals.
Question 1093
A reviewer wants to distinguish excessive-account churning from adjacent risk patterns. Which observation is the most diagnostic indicator?
- Internal legal memoranda identify major risks absent from investor materials.
- External sustainability claims disagree with underlying meter and assurance records.
- Turnover and commission-to-equity ratios become excessive relative to client objectives.
- Recommendation rationale conflicts with the client's recorded objectives and liquidity requirements.
Explanation
Correct Answer
C:This observation is a pertinent indicator of Excessive-account churning because excessive trading for broker compensation can constitute churning when control and other relevant elements are present. The practical corroborating procedure is to analyze account turnover, costs, broker control and trading justifications; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Misleading offering prospectus, where omission of decision-useful facts can mislead investors even where some published numbers are accurate, rather than the particular mechanism in Excessive-account churning. Unlike the clue for Misleading offering prospectus, the more directly related indicator for Excessive-account churning is this: Turnover and commission-to-equity ratios become excessive relative to client objectives.
B:The proposed observation fits False sustainability disclosures, where nonfinancial representations can deceive securities investors when inaccurate or unsupported, rather than the particular mechanism in Excessive-account churning. Unlike the clue for False sustainability disclosures, the more directly related indicator for Excessive-account churning is this: Turnover and commission-to-equity ratios become excessive relative to client objectives.
D:The proposed observation fits Unsuitable securities recommendation, where a sale can be improper because the recommendation does not match the customer's circumstances, not because the product itself is inherently unlawful, rather than the particular mechanism in Excessive-account churning. Unlike the clue for Unsuitable securities recommendation, the more directly related indicator for Excessive-account churning is this: Turnover and commission-to-equity ratios become excessive relative to client objectives.
Question 1094
The review team observes the following: Payments to related beneficiaries lack independent authorization or economic support. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Compare signers and beneficiaries with employee conflict declarations and contracts; safeguard: Require second-party approval for payments benefiting an authorized signer.
- Diagnostic: Compare beneficiary master-file history with verified supplier instructions and payment files; safeguard: Require second-party approval for payments benefiting an authorized signer.
- Diagnostic: Match vendor masters to employee details and verify actual service completion; safeguard: Have a reviewer independent of disbursements compare payees and vouchers.
- Diagnostic: Compare signers and beneficiaries with employee conflict declarations and contracts; safeguard: Independently vet new vendors and segregate setup, approval and payment.
Explanation
Correct Answer
A:The test addresses Authorized-maker self-payment by targeting this observation: Payments to related beneficiaries lack independent authorization or economic support. The accompanying safeguard—require second-party approval for payments benefiting an authorized signer—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
B:The proposed safeguard is relevant to Authorized-maker self-payment, but the diagnostic tests ACH beneficiary substitution rather than the identified anomaly. That test is aimed at records involving recent bank-account changes precede transfers while invoices remain otherwise valid; the specified case instead calls for reviewers to compare signers and beneficiaries with employee conflict declarations and contracts.
C:The evidence test relates to Shell-company invoice billing, whereas the proposed safeguard protects against Concealed check diversion; neither directly resolves Authorized-maker self-payment. Unlike the Shell-company invoice billing test and Concealed check diversion safeguard, the investigation of Authorized-maker self-payment requires reviewers to compare signers and beneficiaries with employee conflict declarations and contracts, followed by assessment of the matching control point.
D:The diagnostic correctly examines Authorized-maker self-payment by having reviewers compare signers and beneficiaries with employee conflict declarations and contracts, but the safeguard is for Shell-company invoice billing. That prevention step responds to a different mechanism: A nonoperating entity receives organizational money against false billing support.
Question 1095
The case file describes the following: A clinician receives hidden compensation for directing prescriptions to one pharmacy irrespective of patient need. Which classification best explains the events?
- Prescribing referral kickback
- Medical identity misuse
- False medical necessity certification
- Medical service upcoding
Explanation
Correct Answer
A:Prescribing referral kickback fits the facts because financial inducements can corrupt medical decisions even when treatment is actually delivered; the distinguishing observation is that referral volumes coincide with unexplained consulting payments from the pharmacy. To test this interpretation, a reviewer should compare referral patterns with payment ties and clinical appropriateness.
Incorrect Answers
B:Medical identity misuse would involve a different sequence from Prescribing referral kickback: an unauthorized patient exploits a real person's insurance entitlement. Unlike the rejected Medical identity misuse label, the evidence concerns Prescribing referral kickback, since referral volumes coincide with unexplained consulting payments from the pharmacy; reviewers should compare referral patterns with payment ties and clinical appropriateness.
C:False medical necessity certification would involve a different sequence from Prescribing referral kickback: claims fraud can arise from false eligibility or necessity rather than nonexistent delivery. Unlike the rejected False medical necessity certification label, the evidence concerns Prescribing referral kickback, since referral volumes coincide with unexplained consulting payments from the pharmacy; reviewers should compare referral patterns with payment ties and clinical appropriateness.
D:Medical service upcoding would involve a different sequence from Prescribing referral kickback: upcoding inflates payment by assigning a code for a more expensive service than was delivered. Unlike the rejected Medical service upcoding label, the evidence concerns Prescribing referral kickback, since referral volumes coincide with unexplained consulting payments from the pharmacy; reviewers should compare referral patterns with payment ties and clinical appropriateness.
Question 1096
For a review of capitalized routine operating costs, which evidence-based warning sign is the most specific?
- Reseller inventory and returns rise sharply while reported sales surge.
- Post-close payments relate to services delivered before the balance-sheet date.
- Unusual new assets have expense-like vendor descriptions and no future qualifying benefit.
- Customer correspondence conflicts with the written contract and booked revenue.
Explanation
Correct Answer
C:This observation is a pertinent indicator of Capitalized routine operating costs because moving a period expense into assets understates expenses and overstates profit and assets. The practical corroborating procedure is to inspect additions to capital accounts against invoice descriptions and capitalization policies; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Channel-stuffing manipulation, where accelerated shipment can overstate current revenue when substantive return or acceptance terms contradict recognition, rather than the particular mechanism in Capitalized routine operating costs. Unlike the clue for Channel-stuffing manipulation, the more directly related indicator for Capitalized routine operating costs is this: Unusual new assets have expense-like vendor descriptions and no future qualifying benefit.
B:The proposed observation fits Unrecorded accrued liabilities, where omitting obligations understates liabilities and costs rather than creating new cash resources, rather than the particular mechanism in Capitalized routine operating costs. Unlike the clue for Unrecorded accrued liabilities, the more directly related indicator for Capitalized routine operating costs is this: Unusual new assets have expense-like vendor descriptions and no future qualifying benefit.
D:The proposed observation fits Concealed sales-side agreement, where undisclosed contractual rights may defeat the assertion that a recorded sale is final or earned, rather than the particular mechanism in Capitalized routine operating costs. Unlike the clue for Concealed sales-side agreement, the more directly related indicator for Capitalized routine operating costs is this: Unusual new assets have expense-like vendor descriptions and no future qualifying benefit.
Question 1097
The monitoring team needs an observable indicator of stolen-personal-data loan. Which signal aligns most closely with the risk?
- Identity attributes do not reliably resolve to one genuine person across independent sources.
- A credit history exists before the individual reaches normal borrowing age.
- The real person denies the application despite matching submitted personal data.
- Competing returns share a taxpayer identity but have inconsistent filing devices and bank details.
Explanation
Correct Answer
C:This observation is a pertinent indicator of Stolen-personal-data loan because an impersonator assumes a real victim's identity to obtain an unauthorized loan. The practical corroborating procedure is to confirm applicant control through independent identity checks and device history; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Synthetic identity borrowing, where a synthetic identity blends genuine and invented attributes rather than simply impersonating one full real identity, rather than the particular mechanism in Stolen-personal-data loan. Unlike the clue for Synthetic identity borrowing, the more directly related indicator for Stolen-personal-data loan is this: The real person denies the application despite matching submitted personal data.
B:The proposed observation fits Child identity misuse, where children's identifiers can be exploited because misuse may remain unnoticed for years, rather than the particular mechanism in Stolen-personal-data loan. Unlike the clue for Child identity misuse, the more directly related indicator for Stolen-personal-data loan is this: The real person denies the application despite matching submitted personal data.
D:The proposed observation fits Identity-based tax refund diversion, where the scheme monetizes stolen taxpayer identity through a fraudulent government refund claim, rather than the particular mechanism in Stolen-personal-data loan. Unlike the clue for Identity-based tax refund diversion, the more directly related indicator for Stolen-personal-data loan is this: The real person denies the application despite matching submitted personal data.
Question 1098
The monitoring team needs an observable indicator of ghost public-assistance beneficiaries. Which signal aligns most closely with the risk?
- Benefit rolls conflict with independent vital records and eligibility updates.
- Business registration, tax and payroll records fail to support the claimed operation.
- Identical time entries and payroll identifiers appear in multiple reimbursement requests.
- Attendance records and participant confirmations contradict reported milestones.
Explanation
Correct Answer
A:This observation is a pertinent indicator of Ghost public-assistance beneficiaries because public funds continue flowing to people who should not receive benefits. The practical corroborating procedure is to cross-match beneficiary status with authorized registries and payment destinations; the indicator by itself does not establish intent or error.
Incorrect Answers
B:The proposed observation fits Fictitious disaster relief business, where crisis support can be abused through fictitious claimants and fabricated losses, rather than the particular mechanism in Ghost public-assistance beneficiaries. Unlike the clue for Fictitious disaster relief business, the more directly related indicator for Ghost public-assistance beneficiaries is this: Benefit rolls conflict with independent vital records and eligibility updates.
C:The proposed observation fits Double-charged public grant costs, where a real cost becomes fraudulent when recovered more than once from restricted funding sources, rather than the particular mechanism in Ghost public-assistance beneficiaries. Unlike the clue for Double-charged public grant costs, the more directly related indicator for Ghost public-assistance beneficiaries is this: Benefit rolls conflict with independent vital records and eligibility updates.
D:The proposed observation fits False government grant deliverables, where a grant recipient obtains public funds by falsely certifying eligible performance, rather than the particular mechanism in Ghost public-assistance beneficiaries. Unlike the clue for False government grant deliverables, the more directly related indicator for Ghost public-assistance beneficiaries is this: Benefit rolls conflict with independent vital records and eligibility updates.
Question 1099
The organization wants to prevent lawful tax planning distinction. Its risk assessment describes: Tax avoidance or planning can lawfully reduce tax; evasion involves unlawful deception or concealment. What targeted safeguard should it prioritize?
- Maintain complete revenue records and reconcile tax declarations with books.
- Use identity-proofing and verify anomalous refund-account changes.
- Apply substance-over-form review and follow applicable transfer-pricing rules.
- Document lawful elections and avoid misrepresentation of relevant facts.
Explanation
Correct Answer
D:The control directly addresses the failure point in Lawful tax planning distinction, since tax avoidance or planning can lawfully reduce tax; evasion involves unlawful deception or concealment. A subsequent independent review could confirm statutory eligibility, election documentation and consistent filings to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Unreported cash taxable income rather than Lawful tax planning distinction, because knowingly concealing taxable receipts can constitute tax evasion rather than lawful tax planning. Unlike the control for Unreported cash taxable income, the more direct design for Lawful tax planning distinction is to document lawful elections and avoid misrepresentation of relevant facts; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Stolen-identity tax return rather than Lawful tax planning distinction, because refund fraud uses another person's tax identity rather than understating the criminal's own income. Unlike the control for Stolen-identity tax return, the more direct design for Lawful tax planning distinction is to document lawful elections and avoid misrepresentation of relevant facts; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Sham offshore tax shelter rather than Lawful tax planning distinction, because a paper structure intended to conceal taxable facts differs from lawful tax structuring with genuine substance. Unlike the control for Sham offshore tax shelter, the more direct design for Lawful tax planning distinction is to document lawful elections and avoid misrepresentation of relevant facts; a different safeguard cannot substitute for it.
Question 1100
Reviewers flag a possible false insolvency schedules issue. Their preliminary finding is: Customer confirmations and creditor support contradict filed values. Which test would best confirm or refute the concern?
- Independently confirm material receivables and liabilities against the filed schedules.
- Trace inventory purchases, resale proceeds and pre-filing management communications.
- Review appointment orders, estate ledgers and independent disposal evidence.
- Compare the proposed plan with liquidity forecasts and creditor treatment.
Explanation
Correct Answer
A:For the False insolvency schedules concern, the procedure tests source evidence behind this observation: Customer confirmations and creditor support contradict filed values. This matters because false asset and debt statements distort the administration of the insolvency estate; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
B:This comparison primarily addresses Bankruptcy bust-out credit buying, in which a planned bust-out extracts value from vendors through deliberate nonpayment and asset diversion; because the present question instead concerns False insolvency schedules, reviewers should independently confirm material receivables and liabilities against the filed schedules rather than apply a check designed for Bankruptcy bust-out credit buying.
C:This comparison primarily addresses Trustee and receiver accountability, in which a trustee or receiver acts within a defined legal appointment to administer assets, not as an unrestricted owner; because the present question instead concerns False insolvency schedules, reviewers should independently confirm material receivables and liabilities against the filed schedules rather than apply a check designed for Trustee and receiver accountability.
D:This comparison primarily addresses Liquidation versus reorganization, in which reorganization aims to preserve or restructure the enterprise; liquidation ordinarily realizes assets for distribution; because the present question instead concerns False insolvency schedules, reviewers should independently confirm material receivables and liabilities against the filed schedules rather than apply a check designed for Liquidation versus reorganization.