Question 560
A process owner is assessing safeguards for bankruptcy bust-out credit buying. The mechanism is: A planned bust-out extracts value from vendors through deliberate nonpayment and asset diversion. Which control addresses it most directly?
- Review insider transactions and preserve assets for lawful creditor treatment.
- Apply supplier exposure controls and monitor sudden anomalous credit demand.
- Require sworn disclosure supported by reconciled accounting records.
- Subject related-party creditor proofs to independent substantive verification.
Explanation
Correct Answer
B:The control directly addresses the failure point in Bankruptcy bust-out credit buying, since a planned bust-out extracts value from vendors through deliberate nonpayment and asset diversion. A subsequent independent review could trace inventory purchases, resale proceeds and pre-filing management communications to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Pre-filing fraudulent asset transfer rather than Bankruptcy bust-out credit buying, because transfers intended to put assets beyond creditors may be challengeable under applicable insolvency law. Unlike the control for Pre-filing fraudulent asset transfer, the more direct design for Bankruptcy bust-out credit buying is to apply supplier exposure controls and monitor sudden anomalous credit demand; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at False insolvency schedules rather than Bankruptcy bust-out credit buying, because false asset and debt statements distort the administration of the insolvency estate. Unlike the control for False insolvency schedules, the more direct design for Bankruptcy bust-out credit buying is to apply supplier exposure controls and monitor sudden anomalous credit demand; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Fictitious creditor claim rather than Bankruptcy bust-out credit buying, because a manufactured liability can dilute legitimate creditors' recoveries. Unlike the control for Fictitious creditor claim, the more direct design for Bankruptcy bust-out credit buying is to apply supplier exposure controls and monitor sudden anomalous credit demand; a different safeguard cannot substitute for it.
Question 561
The organization wants to prevent inflated real estate appraisal. Its risk assessment describes: Artificial collateral values lead lenders to advance more credit than the asset justifies. What targeted safeguard should it prioritize?
- Use independent appraisal selection and challenge unsupported valuation exceptions.
- Reverify debt exposure at funding and monitor rapid multi-lender borrowing.
- Verify occupancy representations and review high-risk investment-property indicators.
- Perform beneficial-borrower due diligence and verify source of down payment.
Explanation
Correct Answer
A:The control directly addresses the failure point in Inflated real estate appraisal, since artificial collateral values lead lenders to advance more credit than the asset justifies. A subsequent independent review could independently review valuation methods, comparable sales and appraiser relationships to identify exceptions that bypassed the safeguard.
Incorrect Answers
B:This safeguard is directed primarily at Loan-stacking applications rather than Inflated real estate appraisal, because hidden parallel borrowing makes the applicant's repayment capacity appear stronger than it is. Unlike the control for Loan-stacking applications, the more direct design for Inflated real estate appraisal is to use independent appraisal selection and challenge unsupported valuation exceptions; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Occupancy-misrepresented mortgage rather than Inflated real estate appraisal, because misstated intended use can improperly obtain lending terms reserved for a primary residence. Unlike the control for Occupancy-misrepresented mortgage, the more direct design for Inflated real estate appraisal is to use independent appraisal selection and challenge unsupported valuation exceptions; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Mortgage straw-buyer scheme rather than Inflated real estate appraisal, because a nominal applicant conceals the real party controlling the property and borrowing transaction. Unlike the control for Mortgage straw-buyer scheme, the more direct design for Inflated real estate appraisal is to use independent appraisal selection and challenge unsupported valuation exceptions; a different safeguard cannot substitute for it.
Question 562
The case file describes the following: A logistics agent pays an official personally to speed a routine clearance and records it as a customs fee. Which classification best explains the events?
- Bid-sharing cartel
- Conflict through confidential specifications
- Unapproved facilitation payment
- Vendor-funded political favor
Explanation
Correct Answer
C:Unapproved facilitation payment fits the facts because a privately directed payment to influence routine official action can be corrupt despite its small amount; the distinguishing observation is that the purported charge lacks an official government receipt or published tariff basis. To test this interpretation, a reviewer should compare payments and customs records with government fee schedules.
Incorrect Answers
A:Bid-sharing cartel would involve a different sequence from Unapproved facilitation payment: bid rotation is collusion among bidders that undermines competitive award outcomes. Unlike the rejected Bid-sharing cartel label, the evidence concerns Unapproved facilitation payment, since the purported charge lacks an official government receipt or published tariff basis; reviewers should compare payments and customs records with government fee schedules.
B:Conflict through confidential specifications would involve a different sequence from Unapproved facilitation payment: disclosure of privileged tender information trades an entrusted advantage for private benefit. Unlike the rejected Conflict through confidential specifications label, the evidence concerns Unapproved facilitation payment, since the purported charge lacks an official government receipt or published tariff basis; reviewers should compare payments and customs records with government fee schedules.
D:Vendor-funded political favor would involve a different sequence from Unapproved facilitation payment: indirect benefits can constitute corruption when used to induce improper contract decisions. Unlike the rejected Vendor-funded political favor label, the evidence concerns Unapproved facilitation payment, since the purported charge lacks an official government receipt or published tariff basis; reviewers should compare payments and customs records with government fee schedules.
Question 563
Two separate review files raise different issues. File A: A platform promises fixed extreme crypto returns while concealing that customer assets are controlled by insiders. File B: A scammer builds an intimate relationship online then directs the victim to transfer funds to a fabricated investment site. Which pairing accurately classifies both files?
- File A: Guaranteed crypto yield scam; File B: Elder caregiver financial exploitation.
- File A: Guaranteed crypto yield scam; File B: Online romance investment grooming.
- File A: Pig-butchering investment scam; File B: Online romance investment grooming.
- File A: Online romance investment grooming; File B: Guaranteed crypto yield scam.
Explanation
Correct Answer
B:File A is Guaranteed crypto yield scam because unsubstantiated investment guarantees can camouflage misappropriation rather than legitimate market profits, while File B is Online romance investment grooming because the fraud uses emotional trust to induce transfers, often without the promised investment existing. The evidence chains differ: for File A, reviewers should verify asset custody, independent reserves and the reality of return generation; for File B, they should link relationship communications with payment destinations and platform authenticity.
Incorrect Answers
A:File B is misidentified as Elder caregiver financial exploitation instead of Online romance investment grooming. With the proposed pairing Guaranteed crypto yield scam / Elder caregiver financial exploitation, the distinction is substantive: File A shows that claimed yields lack verifiable trading activity and withdrawals stop during a surge in new deposits, whereas File B shows that affectionate messaging precedes escalating transfers to unfamiliar financial or crypto accounts. For these Guaranteed crypto yield scam and Online romance investment grooming files, choosing the pair Guaranteed crypto yield scam / Elder caregiver financial exploitation would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Pig-butchering investment scam instead of Guaranteed crypto yield scam. With the proposed pairing Pig-butchering investment scam / Online romance investment grooming, the distinction is substantive: File A shows that claimed yields lack verifiable trading activity and withdrawals stop during a surge in new deposits, whereas File B shows that affectionate messaging precedes escalating transfers to unfamiliar financial or crypto accounts. For these Guaranteed crypto yield scam and Online romance investment grooming files, choosing the pair Pig-butchering investment scam / Online romance investment grooming would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Online romance investment grooming instead of Guaranteed crypto yield scam; File B is misidentified as Guaranteed crypto yield scam instead of Online romance investment grooming. With the proposed pairing Online romance investment grooming / Guaranteed crypto yield scam, the distinction is substantive: File A shows that claimed yields lack verifiable trading activity and withdrawals stop during a surge in new deposits, whereas File B shows that affectionate messaging precedes escalating transfers to unfamiliar financial or crypto accounts. For these Guaranteed crypto yield scam and Online romance investment grooming files, choosing the pair Online romance investment grooming / Guaranteed crypto yield scam would misdirect the review away from at least one of these mechanisms.
Question 564
Two separate review files raise different issues. File A: Criminals install a hidden reader on an unattended fuel terminal to copy card-track data. File B: A thin inserted device at a chip terminal captures data exchanged during chip-card use. Which pairing accurately classifies both files?
- File A: Magnetic-stripe card skimming; File B: Chip-card shimming.
- File A: Magnetic-stripe card skimming; File B: Check-kiting float abuse.
- File A: Chip-card shimming; File B: Magnetic-stripe card skimming.
- File A: Card-not-present shopping fraud; File B: Chip-card shimming.
Explanation
Correct Answer
A:File A is Magnetic-stripe card skimming because skimmers capture card data at a physical payment interface for later unauthorized use, while File B is Chip-card shimming because a shim targets information in the chip-card interface; chip transaction data alone does not necessarily permit cloning a valid chip. The evidence chains differ: for File A, reviewers should compare compromised-card common points of purchase and inspect terminals for overlays; for File B, they should inspect card-reader slots and correlate card compromise with device servicing logs.
Incorrect Answers
B:File B is misidentified as Check-kiting float abuse instead of Chip-card shimming. With the proposed pairing Magnetic-stripe card skimming / Check-kiting float abuse, the distinction is substantive: File A shows that unrelated card fraud clusters around customers who used the same terminal, whereas File B shows that compromised-card activity clusters at a terminal with an unexpected insert in the reader slot. For these Magnetic-stripe card skimming and Chip-card shimming files, choosing the pair Magnetic-stripe card skimming / Check-kiting float abuse would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Chip-card shimming instead of Magnetic-stripe card skimming; File B is misidentified as Magnetic-stripe card skimming instead of Chip-card shimming. With the proposed pairing Chip-card shimming / Magnetic-stripe card skimming, the distinction is substantive: File A shows that unrelated card fraud clusters around customers who used the same terminal, whereas File B shows that compromised-card activity clusters at a terminal with an unexpected insert in the reader slot. For these Magnetic-stripe card skimming and Chip-card shimming files, choosing the pair Chip-card shimming / Magnetic-stripe card skimming would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Card-not-present shopping fraud instead of Magnetic-stripe card skimming. With the proposed pairing Card-not-present shopping fraud / Chip-card shimming, the distinction is substantive: File A shows that unrelated card fraud clusters around customers who used the same terminal, whereas File B shows that compromised-card activity clusters at a terminal with an unexpected insert in the reader slot. For these Magnetic-stripe card skimming and Chip-card shimming files, choosing the pair Card-not-present shopping fraud / Chip-card shimming would misdirect the review away from at least one of these mechanisms.
Question 565
A process owner is assessing safeguards for bid-sharing cartel. The mechanism is: Bid rotation is collusion among bidders that undermines competitive award outcomes. Which control addresses it most directly?
- Use independent competition monitoring and enforce antitrust-sensitive supplier declarations.
- Require documented lawful fees and prohibit unapproved payments through intermediaries.
- Treat employment opportunities as potential benefits subject to conflict review.
- Require substantiated consultant work and anti-bribery diligence before payment.
Explanation
Correct Answer
A:The control directly addresses the failure point in Bid-sharing cartel, since bid rotation is collusion among bidders that undermines competitive award outcomes. A subsequent independent review could analyze repeated bid participants, price spreads and shared document metadata to identify exceptions that bypassed the safeguard.
Incorrect Answers
B:This safeguard is directed primarily at Unapproved facilitation payment rather than Bid-sharing cartel, because a privately directed payment to influence routine official action can be corrupt despite its small amount. Unlike the control for Unapproved facilitation payment, the more direct design for Bid-sharing cartel is to use independent competition monitoring and enforce antitrust-sensitive supplier declarations; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Improper job-for-favor arrangement rather than Bid-sharing cartel, because noncash personal advantages can function as bribes when tied to official discretion. Unlike the control for Improper job-for-favor arrangement, the more direct design for Bid-sharing cartel is to use independent competition monitoring and enforce antitrust-sensitive supplier declarations; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Sham consulting bribe rather than Bid-sharing cartel, because a fake service agreement can launder a corrupt payment as a commercial expense. Unlike the control for Sham consulting bribe, the more direct design for Bid-sharing cartel is to use independent competition monitoring and enforce antitrust-sensitive supplier declarations; a different safeguard cannot substitute for it.
Question 566
The review team observes the following: Warehouse counts and ownership terms disagree with inventory listings. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Map beneficial ownership and compare transactions with related-party disclosure requirements; safeguard: Segregate count teams and reconcile physical results with perpetual records.
- Diagnostic: Perform independent counts and test ownership and valuation of selected stock; safeguard: Require independently verifiable delivery and customer approval before revenue posting.
- Diagnostic: Perform independent counts and test ownership and valuation of selected stock; safeguard: Segregate count teams and reconcile physical results with perpetual records.
- Diagnostic: Confirm selected receivables independently and match invoices to dispatch records; safeguard: Independently review goods and services received near the cutoff date.
Explanation
Correct Answer
C:The test addresses Inflated year-end inventory by targeting this observation: Warehouse counts and ownership terms disagree with inventory listings. The accompanying safeguard—segregate count teams and reconcile physical results with perpetual records—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
A:The proposed safeguard is relevant to Inflated year-end inventory, but the diagnostic tests Omitted related-party disclosure rather than the identified anomaly. That test is aimed at records involving ownership records show links between management and an important counterparty; the specified case instead calls for reviewers to perform independent counts and test ownership and valuation of selected stock.
B:The diagnostic correctly examines Inflated year-end inventory by having reviewers perform independent counts and test ownership and valuation of selected stock, but the safeguard is for Fictitious sales entries. That prevention step responds to a different mechanism: Recording invented transactions inflates revenue and assets without an underlying exchange.
D:The evidence test relates to Fictitious sales entries, whereas the proposed safeguard protects against Unrecorded accrued liabilities; neither directly resolves Inflated year-end inventory. Unlike the Fictitious sales entries test and Unrecorded accrued liabilities safeguard, the investigation of Inflated year-end inventory requires reviewers to perform independent counts and test ownership and valuation of selected stock, followed by assessment of the matching control point.
Question 567
Control designers are focusing on the mechanism behind fictitious travel reimbursement: The claimant seeks payment for an expense that was never incurred. Which measure best limits that opportunity?
- Automatically synchronize approved terminations with payroll suspension and reconcile exceptions.
- Separate incentive authorization from payroll entry and payment release.
- Use duplicate-claim analytics and retain searchable receipt records.
- Require documented business travel and independent review of receipts.
Explanation
Correct Answer
D:The control directly addresses the failure point in Fictitious travel reimbursement, since the claimant seeks payment for an expense that was never incurred. A subsequent independent review could verify lodging invoices with approved travel itineraries and actual attendance to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Terminated worker retained on payroll rather than Fictitious travel reimbursement, because continuing pay to a departed employee produces a disbursement with no current employment basis. Unlike the control for Terminated worker retained on payroll, the more direct design for Fictitious travel reimbursement is to require documented business travel and independent review of receipts; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Unauthorized bonus disbursement rather than Fictitious travel reimbursement, because improper one-off payments exploit weak controls over discretionary compensation. Unlike the control for Unauthorized bonus disbursement, the more direct design for Fictitious travel reimbursement is to require documented business travel and independent review of receipts; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Duplicate expense reimbursement rather than Fictitious travel reimbursement, because one real expense is reimbursed more than once, inflating the employee's recovery. Unlike the control for Duplicate expense reimbursement, the more direct design for Fictitious travel reimbursement is to require documented business travel and independent review of receipts; a different safeguard cannot substitute for it.
Question 568
The review team observes the following: Closely timed deposits aggregate to an unusual total despite individual amounts being smaller. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Aggregate linked cash transactions by beneficial party, time and channel; safeguard: Monitor connected cash activity rather than relying on each transaction separately.
- Diagnostic: Trace incoming and outgoing counterparties, timelines and the person's stated purpose; safeguard: Monitor connected cash activity rather than relying on each transaction separately.
- Diagnostic: Aggregate linked cash transactions by beneficial party, time and channel; safeguard: Apply enhanced scrutiny to rapid complex transfers inconsistent with customer activity.
- Diagnostic: Build transaction-network maps and compare economic purpose with invoice evidence; safeguard: Screen relevant counterparties and monitor end-use risk under applicable sanctions and AML rules.
Explanation
Correct Answer
A:The test addresses Cash-deposit structuring by targeting this observation: Closely timed deposits aggregate to an unusual total despite individual amounts being smaller. The accompanying safeguard—monitor connected cash activity rather than relying on each transaction separately—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
B:The proposed safeguard is relevant to Cash-deposit structuring, but the diagnostic tests Money-mule transfers rather than the identified anomaly. That test is aimed at records involving funds enter and leave a personal account within hours with little economic explanation; the specified case instead calls for reviewers to aggregate linked cash transactions by beneficial party, time and channel.
C:The diagnostic correctly examines Cash-deposit structuring by having reviewers aggregate linked cash transactions by beneficial party, time and channel, but the safeguard is for Layering through repeated wires. That prevention step responds to a different mechanism: Layering introduces transaction complexity to obscure the origin and control of funds.
D:The evidence test relates to Layering through repeated wires, whereas the proposed safeguard protects against Terrorist-financing source distinction; neither directly resolves Cash-deposit structuring. Unlike the Layering through repeated wires test and Terrorist-financing source distinction safeguard, the investigation of Cash-deposit structuring requires reviewers to aggregate linked cash transactions by beneficial party, time and channel, followed by assessment of the matching control point.
Question 569
Two separate review files raise different issues. File A: A business receives proceeds from a new bank loan and later repays part of the principal. File B: A company has verified total assets and obligations and must explain the residual claim belonging to owners. Which pairing accurately classifies both files?
- File A: Financing cash-flow classification; File B: Investing cash-flow classification.
- File A: Financing cash-flow classification; File B: Equity reconciliation.
- File A: Equity reconciliation; File B: Financing cash-flow classification.
- File A: Gross-profit calculation; File B: Equity reconciliation.
Explanation
Correct Answer
B:File A is Financing cash-flow classification because financing activities describe changes in funding from lenders and owners; classifications of interest can vary by accounting framework, while File B is Equity reconciliation because equity is the residual interest in assets after deducting liabilities, not a bank balance or revenue figure. The evidence chains differ: for File A, reviewers should reconcile borrowing and principal-repayment transactions to financing cash flows; for File B, they should recalculate the accounting equation and trace changes to equity transactions and results.
Incorrect Answers
A:File B is misidentified as Investing cash-flow classification instead of Equity reconciliation. With the proposed pairing Financing cash-flow classification / Investing cash-flow classification, the distinction is substantive: File A shows that loan agreements and bank movements show changes in borrowed capital, whereas File B shows that the reported owners' interest does not equal assets less liabilities. For these Financing cash-flow classification and Equity reconciliation files, choosing the pair Financing cash-flow classification / Investing cash-flow classification would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Equity reconciliation instead of Financing cash-flow classification; File B is misidentified as Financing cash-flow classification instead of Equity reconciliation. With the proposed pairing Equity reconciliation / Financing cash-flow classification, the distinction is substantive: File A shows that loan agreements and bank movements show changes in borrowed capital, whereas File B shows that the reported owners' interest does not equal assets less liabilities. For these Financing cash-flow classification and Equity reconciliation files, choosing the pair Equity reconciliation / Financing cash-flow classification would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Gross-profit calculation instead of Financing cash-flow classification. With the proposed pairing Gross-profit calculation / Equity reconciliation, the distinction is substantive: File A shows that loan agreements and bank movements show changes in borrowed capital, whereas File B shows that the reported owners' interest does not equal assets less liabilities. For these Financing cash-flow classification and Equity reconciliation files, choosing the pair Gross-profit calculation / Equity reconciliation would misdirect the review away from at least one of these mechanisms.
Question 570
The review team observes the following: Transactions have risky delivery changes and failed identity or device checks. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Correlate order devices, fulfillment addresses, authorization results and cardholder complaints; safeguard: Use risk-based customer authentication and fulfillment fraud screening.
- Diagnostic: Compare displayed QR destinations with merchant-controlled account records; safeguard: Use tamper inspections and properly implemented EMV transaction validation.
- Diagnostic: Correlate order devices, fulfillment addresses, authorization results and cardholder complaints; safeguard: Protect public payment codes against tampering and display verified payee names.
- Diagnostic: Independently verify the claimed requester and review recipient-account history; safeguard: Use risk-based customer authentication and fulfillment fraud screening.
Explanation
Correct Answer
A:The test addresses Card-not-present shopping fraud by targeting this observation: Transactions have risky delivery changes and failed identity or device checks. The accompanying safeguard—use risk-based customer authentication and fulfillment fraud screening—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
B:The evidence test relates to Fraudulent merchant QR redirect, whereas the proposed safeguard protects against Chip-card shimming; neither directly resolves Card-not-present shopping fraud. Unlike the Fraudulent merchant QR redirect test and Chip-card shimming safeguard, the investigation of Card-not-present shopping fraud requires reviewers to correlate order devices, fulfillment addresses, authorization results and cardholder complaints, followed by assessment of the matching control point.
C:The diagnostic correctly examines Card-not-present shopping fraud by having reviewers correlate order devices, fulfillment addresses, authorization results and cardholder complaints, but the safeguard is for Fraudulent merchant QR redirect. That prevention step responds to a different mechanism: Payment redirection changes the destination encoded in a legitimate-looking payment prompt.
D:The proposed safeguard is relevant to Card-not-present shopping fraud, but the diagnostic tests Peer-to-peer payment impostor rather than the identified anomaly. That test is aimed at records involving payment recipients are new and contact details differ from the real relative's; the specified case instead calls for reviewers to correlate order devices, fulfillment addresses, authorization results and cardholder complaints.