Question 450
A process owner is assessing safeguards for liquidation versus reorganization. The mechanism is: Reorganization aims to preserve or restructure the enterprise; liquidation ordinarily realizes assets for distribution. Which control addresses it most directly?
- Choose an appropriate lawful restructuring process rather than assuming all insolvencies require liquidation.
- Require sworn disclosure supported by reconciled accounting records.
- Segregate custody and oversight of estate assets under the applicable insolvency framework.
- Apply supplier exposure controls and monitor sudden anomalous credit demand.
- Apply consistent creditor-payment governance and seek jurisdiction-specific insolvency advice.
Explanation
Correct Answer
A:The control directly addresses the failure point in Liquidation versus reorganization, since reorganization aims to preserve or restructure the enterprise; liquidation ordinarily realizes assets for distribution. A subsequent independent review could compare the proposed plan with liquidity forecasts and creditor treatment to identify exceptions that bypassed the safeguard.
Incorrect Answers
B:This safeguard is directed primarily at False insolvency schedules rather than Liquidation versus reorganization, because false asset and debt statements distort the administration of the insolvency estate. Unlike the control for False insolvency schedules, the more direct design for Liquidation versus reorganization is to choose an appropriate lawful restructuring process rather than assuming all insolvencies require liquidation; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Trustee and receiver accountability rather than Liquidation versus reorganization, because a trustee or receiver acts within a defined legal appointment to administer assets, not as an unrestricted owner. Unlike the control for Trustee and receiver accountability, the more direct design for Liquidation versus reorganization is to choose an appropriate lawful restructuring process rather than assuming all insolvencies require liquidation; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Bankruptcy bust-out credit buying rather than Liquidation versus reorganization, because a planned bust-out extracts value from vendors through deliberate nonpayment and asset diversion. Unlike the control for Bankruptcy bust-out credit buying, the more direct design for Liquidation versus reorganization is to choose an appropriate lawful restructuring process rather than assuming all insolvencies require liquidation; a different safeguard cannot substitute for it.
E:This safeguard is directed primarily at Preferential creditor payment review rather than Liquidation versus reorganization, because preference rules can permit recovery of certain pre-filing payments without proving a fictitious invoice or ordinary theft. Unlike the control for Preferential creditor payment review, the more direct design for Liquidation versus reorganization is to choose an appropriate lawful restructuring process rather than assuming all insolvencies require liquidation; a different safeguard cannot substitute for it.
Question 451
Two separate review files raise different issues. File A: A multinational subsidiary must prepare financial statements under the reporting rules required by its jurisdiction and parent consolidation policy. File B: A consulting firm finishes a client engagement in December but sends the invoice in January; the year-end accounts omit the earned fee. Which pairing accurately classifies both files?
- File A: Accounting-framework selection; File B: Accrued service revenue.
- File A: Deferred customer revenue; File B: Accrued service revenue.
- File A: Accounting-framework selection; File B: Gross-profit calculation.
- File A: Accrued service revenue; File B: Accounting-framework selection.
- File A: Gross-profit calculation; File B: Accounting-framework selection.
Explanation
Correct Answer
A:File A is Accounting-framework selection because iFRS and national GAAP are accounting frameworks; their use depends on reporting requirements, not the invoice currency, while File B is Accrued service revenue because under accrual accounting, revenue relates to the period when the service was performed, not simply the invoice or cash date. The evidence chains differ: for File A, reviewers should review the reporting basis in the financial statement notes and entity-level accounting policies; for File B, they should compare engagement acceptance records with unbilled-revenue and subsequent-invoice schedules around year-end.
Incorrect Answers
B:File A is misidentified as Deferred customer revenue instead of Accounting-framework selection. With the proposed pairing Deferred customer revenue / Accrued service revenue, the distinction is substantive: File A shows that the same transaction receives conflicting treatment because preparers use incompatible rulebooks, whereas File B shows that signed completion evidence predates the invoice and revenue posting. For these Accounting-framework selection and Accrued service revenue files, choosing the pair Deferred customer revenue / Accrued service revenue would misdirect the review away from at least one of these mechanisms.
C:File B is misidentified as Gross-profit calculation instead of Accrued service revenue. With the proposed pairing Accounting-framework selection / Gross-profit calculation, the distinction is substantive: File A shows that the same transaction receives conflicting treatment because preparers use incompatible rulebooks, whereas File B shows that signed completion evidence predates the invoice and revenue posting. For these Accounting-framework selection and Accrued service revenue files, choosing the pair Accounting-framework selection / Gross-profit calculation would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Accrued service revenue instead of Accounting-framework selection; File B is misidentified as Accounting-framework selection instead of Accrued service revenue. With the proposed pairing Accrued service revenue / Accounting-framework selection, the distinction is substantive: File A shows that the same transaction receives conflicting treatment because preparers use incompatible rulebooks, whereas File B shows that signed completion evidence predates the invoice and revenue posting. For these Accounting-framework selection and Accrued service revenue files, choosing the pair Accrued service revenue / Accounting-framework selection would misdirect the review away from at least one of these mechanisms.
E:File A is misidentified as Gross-profit calculation instead of Accounting-framework selection; File B is misidentified as Accounting-framework selection instead of Accrued service revenue. With the proposed pairing Gross-profit calculation / Accounting-framework selection, the distinction is substantive: File A shows that the same transaction receives conflicting treatment because preparers use incompatible rulebooks, whereas File B shows that signed completion evidence predates the invoice and revenue posting. For these Accounting-framework selection and Accrued service revenue files, choosing the pair Gross-profit calculation / Accounting-framework selection would misdirect the review away from at least one of these mechanisms.
Question 452
A process owner is assessing safeguards for trade over-invoicing. The mechanism is: Inflated trade prices can transfer value across borders under cover of legitimate commerce. Which control addresses it most directly?
- Scrutinize related-party prices and unusual deviations from comparable trade.
- Verify source of funds and beneficial ownership for risk-sensitive property transactions.
- Apply trade-document and price-reasonableness screening to high-risk transactions.
- Apply enhanced scrutiny to rapid complex transfers inconsistent with customer activity.
Explanation
Correct Answer
C:The control directly addresses the failure point in Trade over-invoicing, since inflated trade prices can transfer value across borders under cover of legitimate commerce. A subsequent independent review could compare bills of lading, pricing benchmarks and intercompany settlement flows to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Trade under-invoicing rather than Trade over-invoicing, because underpricing can move economic value to an offshore counterparty through an ostensibly normal sale. Unlike the control for Trade under-invoicing, the more direct design for Trade over-invoicing is to apply trade-document and price-reasonableness screening to high-risk transactions; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Integration through luxury property rather than Trade over-invoicing, because integration converts earlier illicit value into apparently lawful assets or proceeds. Unlike the control for Integration through luxury property, the more direct design for Trade over-invoicing is to apply trade-document and price-reasonableness screening to high-risk transactions; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Layering through repeated wires rather than Trade over-invoicing, because layering introduces transaction complexity to obscure the origin and control of funds. Unlike the control for Layering through repeated wires, the more direct design for Trade over-invoicing is to apply trade-document and price-reasonableness screening to high-risk transactions; a different safeguard cannot substitute for it.
Question 453
The case file describes the following: A contractor directs a payment to an associate of a public decision maker to secure a grant-funded award. Which classification best explains the events?
- Conflict through confidential specifications
- Supplier kickback for selection
- Vendor-funded political favor
- Bribe to overlook inspections
Explanation
Correct Answer
C:Vendor-funded political favor fits the facts because indirect benefits can constitute corruption when used to induce improper contract decisions; the distinguishing observation is that beneficiary ties and timing align with the award recommendation. To test this interpretation, a reviewer should trace third-party payment flows and ownership while comparing award rationale.
Incorrect Answers
A:Conflict through confidential specifications would involve a different sequence from Vendor-funded political favor: disclosure of privileged tender information trades an entrusted advantage for private benefit. Unlike the rejected Conflict through confidential specifications label, the evidence concerns Vendor-funded political favor, since beneficiary ties and timing align with the award recommendation; reviewers should trace third-party payment flows and ownership while comparing award rationale.
B:Supplier kickback for selection would involve a different sequence from Vendor-funded political favor: a kickback rewards an official for steering organizational business rather than for legitimate services. Unlike the rejected Supplier kickback for selection label, the evidence concerns Vendor-funded political favor, since beneficiary ties and timing align with the award recommendation; reviewers should trace third-party payment flows and ownership while comparing award rationale.
D:Bribe to overlook inspections would involve a different sequence from Vendor-funded political favor: a corrupt payment changes official judgment to allow nonconforming work. Unlike the rejected Bribe to overlook inspections label, the evidence concerns Vendor-funded political favor, since beneficiary ties and timing align with the award recommendation; reviewers should trace third-party payment flows and ownership while comparing award rationale.
Question 454
The team is assessing a potential forged check endorsement discrepancy. Initial observation: Supplier reports nonreceipt although the bank image shows a cashed instrument. Which verification step is most informative?
- Inspect paid check images, signing authority and voucher support.
- Compare approved payee records with front and back images of paid checks.
- Compare cleared check endorsements with vendor confirmations and depositary data.
- Trace ledger entries and check numbers to cleared bank images and approvals.
Explanation
Correct Answer
C:For the Forged check endorsement concern, the procedure tests source evidence behind this observation: Supplier reports nonreceipt although the bank image shows a cashed instrument. This matters because the authorized check is diverted at the endorsement stage, not created by a false invoice; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
A:This comparison primarily addresses Forged check-maker signature, in which the perpetrator creates a payment instrument without the genuine drawer authorization; because the present question instead concerns Forged check endorsement, reviewers should compare cleared check endorsements with vendor confirmations and depositary data rather than apply a check designed for Forged check-maker signature.
B:This comparison primarily addresses Altered check payee, in which an otherwise authorized check is redirected by changing who can receive the proceeds; because the present question instead concerns Forged check endorsement, reviewers should compare cleared check endorsements with vendor confirmations and depositary data rather than apply a check designed for Altered check payee.
D:This comparison primarily addresses Concealed check diversion, in which the cash leaves via an unauthorized payment camouflaged by accounting classification; because the present question instead concerns Forged check endorsement, reviewers should compare cleared check endorsements with vendor confirmations and depositary data rather than apply a check designed for Concealed check diversion.
Question 455
The organization wants to prevent spear-phishing product drawings. Its risk assessment describes: Deceptive credential collection enables unauthorized access to proprietary engineering data. What targeted safeguard should it prioritize?
- Separate privileged administration from data extraction approval and alert on large exports.
- Use phishing-resistant authentication and validate external file requests.
- Apply contractor screening and least-privilege physical and information access.
- Train researchers to use lawful public sources and respect access restrictions.
Explanation
Correct Answer
B:The control directly addresses the failure point in Spear-phishing product drawings, since deceptive credential collection enables unauthorized access to proprietary engineering data. A subsequent independent review could correlate identity-provider login records, phishing artifacts and file access to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Privileged bulk data export rather than Spear-phishing product drawings, because excess technical privilege can permit insider misappropriation of valuable information. Unlike the control for Privileged bulk data export, the more direct design for Spear-phishing product drawings is to use phishing-resistant authentication and validate external file requests; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Corporate espionage by infiltration rather than Spear-phishing product drawings, because covert acquisition of nonpublic secrets for competitive gain is espionage rather than ordinary market research. Unlike the control for Corporate espionage by infiltration, the more direct design for Spear-phishing product drawings is to use phishing-resistant authentication and validate external file requests; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Lawful public competitive intelligence rather than Spear-phishing product drawings, because competitive intelligence based on public information differs from unauthorized acquisition of trade secrets. Unlike the control for Lawful public competitive intelligence, the more direct design for Spear-phishing product drawings is to use phishing-resistant authentication and validate external file requests; a different safeguard cannot substitute for it.
Question 456
Two separate review files raise different issues. File A: A competitor plants a contractor inside a laboratory to photograph confidential prototypes. File B: An analyst collects published patent filings and public competitor earnings presentations to assess market direction. Which pairing accurately classifies both files?
- File A: Lawful public competitive intelligence; File B: Corporate espionage by infiltration.
- File A: Corporate espionage by infiltration; File B: Lawful public competitive intelligence.
- File A: Spear-phishing product drawings; File B: Lawful public competitive intelligence.
- File A: Corporate espionage by infiltration; File B: Trade-secret client-list theft.
Explanation
Correct Answer
B:File A is Corporate espionage by infiltration because covert acquisition of nonpublic secrets for competitive gain is espionage rather than ordinary market research, while File B is Lawful public competitive intelligence because competitive intelligence based on public information differs from unauthorized acquisition of trade secrets. The evidence chains differ: for File A, reviewers should review visitor sponsorship, badge events and camera policy exceptions; for File B, they should verify public provenance and access conditions for the collected information.
Incorrect Answers
A:File A is misidentified as Lawful public competitive intelligence instead of Corporate espionage by infiltration; File B is misidentified as Corporate espionage by infiltration instead of Lawful public competitive intelligence. With the proposed pairing Lawful public competitive intelligence / Corporate espionage by infiltration, the distinction is substantive: File A shows that contractor access exceeds project need and coincides with unexplained lab photography, whereas File B shows that research source logs show only publicly accessible, lawfully obtained material. For these Corporate espionage by infiltration and Lawful public competitive intelligence files, choosing the pair Lawful public competitive intelligence / Corporate espionage by infiltration would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Spear-phishing product drawings instead of Corporate espionage by infiltration. With the proposed pairing Spear-phishing product drawings / Lawful public competitive intelligence, the distinction is substantive: File A shows that contractor access exceeds project need and coincides with unexplained lab photography, whereas File B shows that research source logs show only publicly accessible, lawfully obtained material. For these Corporate espionage by infiltration and Lawful public competitive intelligence files, choosing the pair Spear-phishing product drawings / Lawful public competitive intelligence would misdirect the review away from at least one of these mechanisms.
D:File B is misidentified as Trade-secret client-list theft instead of Lawful public competitive intelligence. With the proposed pairing Corporate espionage by infiltration / Trade-secret client-list theft, the distinction is substantive: File A shows that contractor access exceeds project need and coincides with unexplained lab photography, whereas File B shows that research source logs show only publicly accessible, lawfully obtained material. For these Corporate espionage by infiltration and Lawful public competitive intelligence files, choosing the pair Corporate espionage by infiltration / Trade-secret client-list theft would misdirect the review away from at least one of these mechanisms.
Question 457
The review team observes the following: Scoring notes and objective evidence disagree while one bidder receives unexplained advantages. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Reperform score calculations and inspect evaluator conflicts and supporting notes; safeguard: Verify staffing grades and approve time charges against independent attendance records.
- Diagnostic: Match billable labor classes and timesheets with actual personnel and work evidence; safeguard: Require approval of subcontractor legitimacy and documented deliverable acceptance.
- Diagnostic: Reperform score calculations and inspect evaluator conflicts and supporting notes; safeguard: Use documented scoring rubrics, panel moderation and independent challenge.
- Diagnostic: Compare amendments with original contract clauses, approval authority and renewal limits; safeguard: Use documented scoring rubrics, panel moderation and independent challenge.
Explanation
Correct Answer
C:The test addresses Collusive bid-evaluation scoring by targeting this observation: Scoring notes and objective evidence disagree while one bidder receives unexplained advantages. The accompanying safeguard—use documented scoring rubrics, panel moderation and independent challenge—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
A:The diagnostic correctly examines Collusive bid-evaluation scoring by having reviewers reperform score calculations and inspect evaluator conflicts and supporting notes, but the safeguard is for Time-and-materials labor padding. That prevention step responds to a different mechanism: Misstated labor grade or effort inflates reimbursable service cost after award.
B:The evidence test relates to Time-and-materials labor padding, whereas the proposed safeguard protects against Sham subcontractor pass-through; neither directly resolves Collusive bid-evaluation scoring. Unlike the Time-and-materials labor padding test and Sham subcontractor pass-through safeguard, the investigation of Collusive bid-evaluation scoring requires reviewers to reperform score calculations and inspect evaluator conflicts and supporting notes, followed by assessment of the matching control point.
D:The proposed safeguard is relevant to Collusive bid-evaluation scoring, but the diagnostic tests Unauthorized contract extension rather than the identified anomaly. That test is aimed at records involving extensions exceed stated options and bypass mandated review dates; the specified case instead calls for reviewers to reperform score calculations and inspect evaluator conflicts and supporting notes.
Question 458
Two separate review files raise different issues. File A: An employee receives a personalized forged HR message linking to a fake corporate sign-in page. File B: Users type the genuine bank domain yet are routed to an attacker-hosted imitation due to manipulated name resolution. Which pairing accurately classifies both files?
- File A: Spear-phishing credential capture; File B: Pharming through DNS manipulation.
- File A: Spear-phishing credential capture; File B: AI-voice executive impersonation.
- File A: Pharming through DNS manipulation; File B: Spear-phishing credential capture.
- File A: Ransomware file encryption; File B: Pharming through DNS manipulation.
Explanation
Correct Answer
A:File A is Spear-phishing credential capture because targeted phishing collects credentials by masquerading as a trusted internal communication, while File B is Pharming through DNS manipulation because pharming diverts site resolution without requiring victims to click a deceptive message link. The evidence chains differ: for File A, reviewers should compare URL provenance, identity-provider logs and user reports; for File B, they should verify trusted DNS records and correlate resolution history with website certificates.
Incorrect Answers
B:File B is misidentified as AI-voice executive impersonation instead of Pharming through DNS manipulation. With the proposed pairing Spear-phishing credential capture / AI-voice executive impersonation, the distinction is substantive: File A shows that the login occurred on a lookalike domain immediately before suspicious account access, whereas File B shows that dNS answers point to unauthorized servers despite correct addresses typed by users. For these Spear-phishing credential capture and Pharming through DNS manipulation files, choosing the pair Spear-phishing credential capture / AI-voice executive impersonation would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Pharming through DNS manipulation instead of Spear-phishing credential capture; File B is misidentified as Spear-phishing credential capture instead of Pharming through DNS manipulation. With the proposed pairing Pharming through DNS manipulation / Spear-phishing credential capture, the distinction is substantive: File A shows that the login occurred on a lookalike domain immediately before suspicious account access, whereas File B shows that dNS answers point to unauthorized servers despite correct addresses typed by users. For these Spear-phishing credential capture and Pharming through DNS manipulation files, choosing the pair Pharming through DNS manipulation / Spear-phishing credential capture would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Ransomware file encryption instead of Spear-phishing credential capture. With the proposed pairing Ransomware file encryption / Pharming through DNS manipulation, the distinction is substantive: File A shows that the login occurred on a lookalike domain immediately before suspicious account access, whereas File B shows that dNS answers point to unauthorized servers despite correct addresses typed by users. For these Spear-phishing credential capture and Pharming through DNS manipulation files, choosing the pair Ransomware file encryption / Pharming through DNS manipulation would misdirect the review away from at least one of these mechanisms.
Question 459
The case file describes the following: A contractor delivers lower-grade steel while invoicing for the specified certified grade. Which classification best explains the events?
- Nonconforming material substitution
- Short delivery on public contract
- Sham subcontractor pass-through
- Contractor cost mischarging
Explanation
Correct Answer
A:Nonconforming material substitution fits the facts because the vendor obtains full payment while supplying inferior goods; the distinguishing observation is that independent laboratory tests conflict with certificates of conformity. To test this interpretation, a reviewer should match delivered batch identifiers and tests to the contract specification.
Incorrect Answers
B:Short delivery on public contract would involve a different sequence from Nonconforming material substitution: billing for undelivered quantities converts a legitimate contract into an overpayment. Unlike the rejected Short delivery on public contract label, the evidence concerns Nonconforming material substitution, since independent laboratory tests conflict with certificates of conformity; reviewers should match delivered batch identifiers and tests to the contract specification.
C:Sham subcontractor pass-through would involve a different sequence from Nonconforming material substitution: a dummy lower-tier supplier can hide unwarranted profit or diversion within contract costs. Unlike the rejected Sham subcontractor pass-through label, the evidence concerns Nonconforming material substitution, since independent laboratory tests conflict with certificates of conformity; reviewers should match delivered batch identifiers and tests to the contract specification.
D:Contractor cost mischarging would involve a different sequence from Nonconforming material substitution: miscoding expenses shifts ineligible work costs onto the purchasing agency. Unlike the rejected Contractor cost mischarging label, the evidence concerns Nonconforming material substitution, since independent laboratory tests conflict with certificates of conformity; reviewers should match delivered batch identifiers and tests to the contract specification.
Question 460
Two separate review files raise different issues. File A: A purchasing officer divides a single planned purchase into several small orders below the open-bid limit. File B: A manager orders unneeded specialized equipment from a connected vendor despite usable equipment already available. Which pairing accurately classifies both files?
- File A: Split purchases to evade tender threshold; File B: Leaked confidential price estimate.
- File A: Split purchases to evade tender threshold; File B: Invented procurement need.
- File A: Post-award change-order inflation; File B: Invented procurement need.
- File A: Invented procurement need; File B: Split purchases to evade tender threshold.
Explanation
Correct Answer
B:File A is Split purchases to evade tender threshold because fragmentation bypasses a competitive procedure that would apply to the full requirement, while File B is Invented procurement need because procurement fraud can begin before bids when a false organizational need is created. The evidence chains differ: for File A, reviewers should aggregate same-purpose requisitions and compare total value with policy thresholds; for File B, they should compare proposed purchase needs with inventory, utilization and operational plans.
Incorrect Answers
A:File B is misidentified as Leaked confidential price estimate instead of Invented procurement need. With the proposed pairing Split purchases to evade tender threshold / Leaked confidential price estimate, the distinction is substantive: File A shows that related requisitions for the same need occur within a short period, whereas File B shows that demand forecasts and asset utilization records contradict the justification. For these Split purchases to evade tender threshold and Invented procurement need files, choosing the pair Split purchases to evade tender threshold / Leaked confidential price estimate would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Post-award change-order inflation instead of Split purchases to evade tender threshold. With the proposed pairing Post-award change-order inflation / Invented procurement need, the distinction is substantive: File A shows that related requisitions for the same need occur within a short period, whereas File B shows that demand forecasts and asset utilization records contradict the justification. For these Split purchases to evade tender threshold and Invented procurement need files, choosing the pair Post-award change-order inflation / Invented procurement need would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Invented procurement need instead of Split purchases to evade tender threshold; File B is misidentified as Split purchases to evade tender threshold instead of Invented procurement need. With the proposed pairing Invented procurement need / Split purchases to evade tender threshold, the distinction is substantive: File A shows that related requisitions for the same need occur within a short period, whereas File B shows that demand forecasts and asset utilization records contradict the justification. For these Split purchases to evade tender threshold and Invented procurement need files, choosing the pair Invented procurement need / Split purchases to evade tender threshold would misdirect the review away from at least one of these mechanisms.