Question 340
The risk team has identified the following staged vehicle collision claim exposure: A staged loss creates the insured event rather than merely exaggerating a genuine accident. Which proposed prevention step is most effective?
- Use inter-insurer fraud sharing and duplicate-loss checks under privacy rules.
- Use independent repair validation and cost benchmarks.
- Use independent cause investigation before settling suspicious high-value fires.
- Require authenticated beneficiary changes and independent confirmation of high-risk amendments.
- Use independent accident verification and network screening of repeat claimants.
Explanation
Correct Answer
E:The control directly addresses the failure point in Staged vehicle collision claim, since a staged loss creates the insured event rather than merely exaggerating a genuine accident. A subsequent independent review could compare crash records, medical claims and links among participants to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Duplicate casualty claims rather than Staged vehicle collision claim, because multiple recoveries for one loss can exceed the legitimate indemnifiable damage. Unlike the control for Duplicate casualty claims, the more direct design for Staged vehicle collision claim is to use independent accident verification and network screening of repeat claimants; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Inflated auto repair estimate rather than Staged vehicle collision claim, because a real covered loss is enlarged through fictitious repair costs. Unlike the control for Inflated auto repair estimate, the more direct design for Staged vehicle collision claim is to use independent accident verification and network screening of repeat claimants; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Intentional property fire claim rather than Staged vehicle collision claim, because deliberate creation of a loss may defeat coverage and constitutes a different risk from accidental damage. Unlike the control for Intentional property fire claim, the more direct design for Staged vehicle collision claim is to use independent accident verification and network screening of repeat claimants; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Fictitious beneficiary change rather than Staged vehicle collision claim, because the scheme tampers with policy entitlement rather than misrepresenting the insured event. Unlike the control for Fictitious beneficiary change, the more direct design for Staged vehicle collision claim is to use independent accident verification and network screening of repeat claimants; a different safeguard cannot substitute for it.
Question 341
For a review of prescribing referral kickback, which evidence-based warning sign is the most specific?
- Claims include care inconsistent with the member's verified history and identification.
- Repeated medical-necessity forms use boilerplate unsupported by examinations.
- Appointment, access and patient-confirmation records show no encounter.
- Referral volumes coincide with unexplained consulting payments from the pharmacy.
Explanation
Correct Answer
D:This observation is a pertinent indicator of Prescribing referral kickback because financial inducements can corrupt medical decisions even when treatment is actually delivered. The practical corroborating procedure is to compare referral patterns with payment ties and clinical appropriateness; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Medical identity misuse, where an unauthorized patient exploits a real person's insurance entitlement, rather than the particular mechanism in Prescribing referral kickback. Unlike the clue for Medical identity misuse, the more directly related indicator for Prescribing referral kickback is this: Referral volumes coincide with unexplained consulting payments from the pharmacy.
B:The proposed observation fits False medical necessity certification, where claims fraud can arise from false eligibility or necessity rather than nonexistent delivery, rather than the particular mechanism in Prescribing referral kickback. Unlike the clue for False medical necessity certification, the more directly related indicator for Prescribing referral kickback is this: Referral volumes coincide with unexplained consulting payments from the pharmacy.
C:The proposed observation fits Phantom patient encounters, where billing nonexistent visits extracts payment for services not rendered, rather than the particular mechanism in Prescribing referral kickback. Unlike the clue for Phantom patient encounters, the more directly related indicator for Prescribing referral kickback is this: Referral volumes coincide with unexplained consulting payments from the pharmacy.
Question 342
The case file describes the following: A creditworthy intermediary signs a home loan for the true investor in return for a fee. Which classification best explains the events?
- Inflated real estate appraisal
- Occupancy-misrepresented mortgage
- Loan-stacking applications
- Mortgage straw-buyer scheme
Explanation
Correct Answer
D:Mortgage straw-buyer scheme fits the facts because a nominal applicant conceals the real party controlling the property and borrowing transaction; the distinguishing observation is that funding, occupancy and beneficial control point to a party other than the borrower of record. To test this interpretation, a reviewer should trace down payments and property-control arrangements to the actual beneficiary.
Incorrect Answers
A:Inflated real estate appraisal would involve a different sequence from Mortgage straw-buyer scheme: artificial collateral values lead lenders to advance more credit than the asset justifies. Unlike the rejected Inflated real estate appraisal label, the evidence concerns Mortgage straw-buyer scheme, since funding, occupancy and beneficial control point to a party other than the borrower of record; reviewers should trace down payments and property-control arrangements to the actual beneficiary.
B:Occupancy-misrepresented mortgage would involve a different sequence from Mortgage straw-buyer scheme: misstated intended use can improperly obtain lending terms reserved for a primary residence. Unlike the rejected Occupancy-misrepresented mortgage label, the evidence concerns Mortgage straw-buyer scheme, since funding, occupancy and beneficial control point to a party other than the borrower of record; reviewers should trace down payments and property-control arrangements to the actual beneficiary.
C:Loan-stacking applications would involve a different sequence from Mortgage straw-buyer scheme: hidden parallel borrowing makes the applicant's repayment capacity appear stronger than it is. Unlike the rejected Loan-stacking applications label, the evidence concerns Mortgage straw-buyer scheme, since funding, occupancy and beneficial control point to a party other than the borrower of record; reviewers should trace down payments and property-control arrangements to the actual beneficiary.
Question 343
The case file describes the following: A shop cashier accepts cash for merchandise but never rings the sale into the point-of-sale system. Which classification best explains the events?
- Accounts-receivable skimming
- Off-register retail skimming
- Concealment through false refunds
- Unrecorded admission-fee skimming
Explanation
Correct Answer
B:Off-register retail skimming fits the facts because skimming removes receipts before they enter the organization's accounting records; the distinguishing observation is that observed foot traffic and inventory movement exceed recorded sales. To test this interpretation, a reviewer should compare independent unit movement and customer receipts with posted till transactions.
Incorrect Answers
A:Accounts-receivable skimming would involve a different sequence from Off-register retail skimming: the employee captures incoming funds and conceals the missing credit to the customer's balance. Unlike the rejected Accounts-receivable skimming label, the evidence concerns Off-register retail skimming, since observed foot traffic and inventory movement exceed recorded sales; reviewers should compare independent unit movement and customer receipts with posted till transactions.
C:Concealment through false refunds would involve a different sequence from Off-register retail skimming: a false refund creates an apparently authorized cash outflow, unlike an off-record cash receipt theft. Unlike the rejected Concealment through false refunds label, the evidence concerns Off-register retail skimming, since observed foot traffic and inventory movement exceed recorded sales; reviewers should compare independent unit movement and customer receipts with posted till transactions.
D:Unrecorded admission-fee skimming would involve a different sequence from Off-register retail skimming: off-book ticket proceeds can disappear without creating a deposit shortage in the books. Unlike the rejected Unrecorded admission-fee skimming label, the evidence concerns Off-register retail skimming, since observed foot traffic and inventory movement exceed recorded sales; reviewers should compare independent unit movement and customer receipts with posted till transactions.
Question 344
A finance team is reviewing the accuracy of accounting-framework selection. Relevant accounting principle: IFRS and national GAAP are accounting frameworks; their use depends on reporting requirements, not the invoice currency. Which procedure best supports reliable treatment?
- Compute gross profit as net sales less cost of goods sold under the applicable reporting framework.
- Require a cutoff review of completed work not yet billed.
- Reconcile assets, liabilities and equity before releasing the statement of financial position.
- Document the applicable IFRS or national GAAP requirements and reconcile consolidation adjustments.
Explanation
Correct Answer
D:The control directly addresses the failure point in Accounting-framework selection, since iFRS and national GAAP are accounting frameworks; their use depends on reporting requirements, not the invoice currency. A subsequent independent review could review the reporting basis in the financial statement notes and entity-level accounting policies to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Gross-profit calculation rather than Accounting-framework selection, because gross profit isolates direct goods margin rather than the final earnings after all operating and other costs. Unlike the control for Gross-profit calculation, the more direct design for Accounting-framework selection is to document the applicable IFRS or national GAAP requirements and reconcile consolidation adjustments; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Accrued service revenue rather than Accounting-framework selection, because under accrual accounting, revenue relates to the period when the service was performed, not simply the invoice or cash date. Unlike the control for Accrued service revenue, the more direct design for Accounting-framework selection is to document the applicable IFRS or national GAAP requirements and reconcile consolidation adjustments; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Equity reconciliation rather than Accounting-framework selection, because equity is the residual interest in assets after deducting liabilities, not a bank balance or revenue figure. Unlike the control for Equity reconciliation, the more direct design for Accounting-framework selection is to document the applicable IFRS or national GAAP requirements and reconcile consolidation adjustments; a different safeguard cannot substitute for it.
Question 345
An examination of unreported cash taxable income begins with this observation: Payment processor and inventory records indicate sales above the tax returns. Which follow-up procedure gives the most direct evidence?
- Cross-match purchase invoices and tax registrations with supplier records.
- Confirm statutory eligibility, election documentation and consistent filings.
- Verify claimed costs against real supplier transactions and business purpose.
- Reconcile independent sales evidence with filed taxable income.
Explanation
Correct Answer
D:For the Unreported cash taxable income concern, the procedure tests source evidence behind this observation: Payment processor and inventory records indicate sales above the tax returns. This matters because knowingly concealing taxable receipts can constitute tax evasion rather than lawful tax planning; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
A:This comparison primarily addresses False consumption-tax input credit, in which false input credits reduce remitted VAT or generate improper refunds; because the present question instead concerns Unreported cash taxable income, reviewers should reconcile independent sales evidence with filed taxable income rather than apply a check designed for False consumption-tax input credit.
B:This comparison primarily addresses Lawful tax planning distinction, in which tax avoidance or planning can lawfully reduce tax; evasion involves unlawful deception or concealment; because the present question instead concerns Unreported cash taxable income, reviewers should reconcile independent sales evidence with filed taxable income rather than apply a check designed for Lawful tax planning distinction.
C:This comparison primarily addresses Fabricated deductible business cost, in which a fictitious expense reduces reported taxable income without a genuine economic cost; because the present question instead concerns Unreported cash taxable income, reviewers should reconcile independent sales evidence with filed taxable income rather than apply a check designed for Fabricated deductible business cost.
Question 346
Reviewers flag a possible sham subcontractor pass-through issue. Their preliminary finding is: Subcontractor bills have no credible staff or deliverables despite significant markup. Which test would best confirm or refute the concern?
- Reperform score calculations and inspect evaluator conflicts and supporting notes.
- Verify subcontractor ownership, labor records and completed outputs.
- Reconcile signed receiving logs and physical counts with invoices.
- Compare amendments with original contract clauses, approval authority and renewal limits.
Explanation
Correct Answer
B:For the Sham subcontractor pass-through concern, the procedure tests source evidence behind this observation: Subcontractor bills have no credible staff or deliverables despite significant markup. This matters because a dummy lower-tier supplier can hide unwarranted profit or diversion within contract costs; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
A:This comparison primarily addresses Collusive bid-evaluation scoring, in which manipulated evaluation changes the award outcome after bids arrive, unlike specification tailoring; because the present question instead concerns Sham subcontractor pass-through, reviewers should verify subcontractor ownership, labor records and completed outputs rather than apply a check designed for Collusive bid-evaluation scoring.
C:This comparison primarily addresses Short delivery on public contract, in which billing for undelivered quantities converts a legitimate contract into an overpayment; because the present question instead concerns Sham subcontractor pass-through, reviewers should verify subcontractor ownership, labor records and completed outputs rather than apply a check designed for Short delivery on public contract.
D:This comparison primarily addresses Unauthorized contract extension, in which improper continuation can give an incumbent business without the required competition; because the present question instead concerns Sham subcontractor pass-through, reviewers should verify subcontractor ownership, labor records and completed outputs rather than apply a check designed for Unauthorized contract extension.
Question 347
The review team observes the following: Claimed deductions lack actual payments or received services. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Verify claimed costs against real supplier transactions and business purpose; safeguard: Require substantiation and independent review of high-risk deductions.
- Diagnostic: Verify claimed costs against real supplier transactions and business purpose; safeguard: Use identity-proofing and verify anomalous refund-account changes.
- Diagnostic: Compare historical filing information with authentication and refund destination records; safeguard: Maintain complete revenue records and reconcile tax declarations with books.
- Diagnostic: Cross-match purchase invoices and tax registrations with supplier records; safeguard: Require substantiation and independent review of high-risk deductions.
- Diagnostic: Reconcile independent sales evidence with filed taxable income; safeguard: Verify input-tax eligibility and reconcile invoice data to actual transactions.
Explanation
Correct Answer
A:The test addresses Fabricated deductible business cost by targeting this observation: Claimed deductions lack actual payments or received services. The accompanying safeguard—require substantiation and independent review of high-risk deductions—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
B:The diagnostic correctly examines Fabricated deductible business cost by having reviewers verify claimed costs against real supplier transactions and business purpose, but the safeguard is for Stolen-identity tax return. That prevention step responds to a different mechanism: Refund fraud uses another person's tax identity rather than understating the criminal's own income.
C:The evidence test relates to Stolen-identity tax return, whereas the proposed safeguard protects against Unreported cash taxable income; neither directly resolves Fabricated deductible business cost. Unlike the Stolen-identity tax return test and Unreported cash taxable income safeguard, the investigation of Fabricated deductible business cost requires reviewers to verify claimed costs against real supplier transactions and business purpose, followed by assessment of the matching control point.
D:The proposed safeguard is relevant to Fabricated deductible business cost, but the diagnostic tests False consumption-tax input credit rather than the identified anomaly. That test is aimed at records involving input-tax claims do not match validated purchases or supplier filings; the specified case instead calls for reviewers to verify claimed costs against real supplier transactions and business purpose.
E:The evidence test relates to Unreported cash taxable income, whereas the proposed safeguard protects against False consumption-tax input credit; neither directly resolves Fabricated deductible business cost. Unlike the Unreported cash taxable income test and False consumption-tax input credit safeguard, the investigation of Fabricated deductible business cost requires reviewers to verify claimed costs against real supplier transactions and business purpose, followed by assessment of the matching control point.
Question 348
An analyst is selecting warning signs for cash-intensive front business. Which recorded pattern should receive focused attention?
- Customs quantities and market pricing diverge sharply from declared invoice values.
- Deposits and claimed revenue greatly exceed footfall, staffing and operating capacity.
- Travel or shipment patterns and declared funds conflict with observed currency movements.
- Export records and comparable sale prices indicate substantial underpricing.
Explanation
Correct Answer
B:This observation is a pertinent indicator of Cash-intensive front business because fictitious sales provide a plausible bookkeeping story for introducing criminal cash. The practical corroborating procedure is to compare reported cash sales with independent capacity, procurement and customer evidence; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Trade over-invoicing, where inflated trade prices can transfer value across borders under cover of legitimate commerce, rather than the particular mechanism in Cash-intensive front business. Unlike the clue for Trade over-invoicing, the more directly related indicator for Cash-intensive front business is this: Deposits and claimed revenue greatly exceed footfall, staffing and operating capacity.
C:The proposed observation fits Bulk currency courier, where physical transportation can shift criminal cash between jurisdictions outside routine bank wires, rather than the particular mechanism in Cash-intensive front business. Unlike the clue for Bulk currency courier, the more directly related indicator for Cash-intensive front business is this: Deposits and claimed revenue greatly exceed footfall, staffing and operating capacity.
D:The proposed observation fits Trade under-invoicing, where underpricing can move economic value to an offshore counterparty through an ostensibly normal sale, rather than the particular mechanism in Cash-intensive front business. Unlike the clue for Trade under-invoicing, the more directly related indicator for Cash-intensive front business is this: Deposits and claimed revenue greatly exceed footfall, staffing and operating capacity.
Question 349
Two separate review files raise different issues. File A: An attacker relays a legitimate card's near-field communication with a distant reader to attempt an unauthorized transaction. File B: A criminal intercepts a mailed check and chemically changes the payee while preserving the original drawer signature. Which pairing accurately classifies both files?
- File A: Counterfeit check creation; File B: Check-washing alteration.
- File A: Check-washing alteration; File B: Contactless payment relay.
- File A: Contactless payment relay; File B: Unauthorized ACH debit.
- File A: Contactless payment relay; File B: Check-washing alteration.
Explanation
Correct Answer
D:File A is Contactless payment relay because relay attacks extend a credential's communication path rather than physically duplicating the card, while File B is Check-washing alteration because check washing modifies a valid instrument to redirect its value. The evidence chains differ: for File A, reviewers should analyze terminal traces and transaction authentication logs for relay characteristics; for File B, they should match cleared bank images with original check issuance and beneficiary details.
Incorrect Answers
A:File A is misidentified as Counterfeit check creation instead of Contactless payment relay. With the proposed pairing Counterfeit check creation / Check-washing alteration, the distinction is substantive: File A shows that device telemetry shows implausible proximity or timing between card and reader interactions, whereas File B shows that cleared images show altered writing inconsistent with the drawer's retained check copy. For these Contactless payment relay and Check-washing alteration files, choosing the pair Counterfeit check creation / Check-washing alteration would misdirect the review away from at least one of these mechanisms.
B:File A is misidentified as Check-washing alteration instead of Contactless payment relay; File B is misidentified as Contactless payment relay instead of Check-washing alteration. With the proposed pairing Check-washing alteration / Contactless payment relay, the distinction is substantive: File A shows that device telemetry shows implausible proximity or timing between card and reader interactions, whereas File B shows that cleared images show altered writing inconsistent with the drawer's retained check copy. For these Contactless payment relay and Check-washing alteration files, choosing the pair Check-washing alteration / Contactless payment relay would misdirect the review away from at least one of these mechanisms.
C:File B is misidentified as Unauthorized ACH debit instead of Check-washing alteration. With the proposed pairing Contactless payment relay / Unauthorized ACH debit, the distinction is substantive: File A shows that device telemetry shows implausible proximity or timing between card and reader interactions, whereas File B shows that cleared images show altered writing inconsistent with the drawer's retained check copy. For these Contactless payment relay and Check-washing alteration files, choosing the pair Contactless payment relay / Unauthorized ACH debit would misdirect the review away from at least one of these mechanisms.
Question 350
A process owner is assessing safeguards for virtual-asset layering. The mechanism is: Multiple on-chain transfers can complicate attribution but do not automatically erase transaction history. Which control addresses it most directly?
- Monitor aggregated stored-value activity and apply appropriate identification limits.
- Apply enhanced customer due diligence where cash volumes contradict business economics.
- Apply virtual-asset service-provider due diligence and suspicious-flow monitoring.
- Apply lawful currency-declaration controls and risk-based physical inspection.
Explanation
Correct Answer
C:The control directly addresses the failure point in Virtual-asset layering, since multiple on-chain transfers can complicate attribution but do not automatically erase transaction history. A subsequent independent review could use chain analytics with exchange records and verified wallet attribution to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Stored-value card conversion rather than Virtual-asset layering, because stored-value instruments can move purchasing power while distancing it from original cash. Unlike the control for Stored-value card conversion, the more direct design for Virtual-asset layering is to apply virtual-asset service-provider due diligence and suspicious-flow monitoring; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Cash-intensive front business rather than Virtual-asset layering, because fictitious sales provide a plausible bookkeeping story for introducing criminal cash. Unlike the control for Cash-intensive front business, the more direct design for Virtual-asset layering is to apply virtual-asset service-provider due diligence and suspicious-flow monitoring; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Bulk currency courier rather than Virtual-asset layering, because physical transportation can shift criminal cash between jurisdictions outside routine bank wires. Unlike the control for Bulk currency courier, the more direct design for Virtual-asset layering is to apply virtual-asset service-provider due diligence and suspicious-flow monitoring; a different safeguard cannot substitute for it.