Question 50
The case file describes the following: A competitor plants a contractor inside a laboratory to photograph confidential prototypes. Which classification best explains the events?
- Corporate espionage by infiltration
- Spear-phishing product drawings
- Lawful public competitive intelligence
- Trade-secret client-list theft
Explanation
Correct Answer
A:Corporate espionage by infiltration fits the facts because covert acquisition of nonpublic secrets for competitive gain is espionage rather than ordinary market research; the distinguishing observation is that contractor access exceeds project need and coincides with unexplained lab photography. To test this interpretation, a reviewer should review visitor sponsorship, badge events and camera policy exceptions.
Incorrect Answers
B:Spear-phishing product drawings would involve a different sequence from Corporate espionage by infiltration: deceptive credential collection enables unauthorized access to proprietary engineering data. Unlike the rejected Spear-phishing product drawings label, the evidence concerns Corporate espionage by infiltration, since contractor access exceeds project need and coincides with unexplained lab photography; reviewers should review visitor sponsorship, badge events and camera policy exceptions.
C:Lawful public competitive intelligence would involve a different sequence from Corporate espionage by infiltration: competitive intelligence based on public information differs from unauthorized acquisition of trade secrets. Unlike the rejected Lawful public competitive intelligence label, the evidence concerns Corporate espionage by infiltration, since contractor access exceeds project need and coincides with unexplained lab photography; reviewers should review visitor sponsorship, badge events and camera policy exceptions.
D:Trade-secret client-list theft would involve a different sequence from Corporate espionage by infiltration: protected business information can be misappropriated even without physical property theft. Unlike the rejected Trade-secret client-list theft label, the evidence concerns Corporate espionage by infiltration, since contractor access exceeds project need and coincides with unexplained lab photography; reviewers should review visitor sponsorship, badge events and camera policy exceptions.
Question 51
A process owner is assessing safeguards for pre-filing fraudulent asset transfer. The mechanism is: Transfers intended to put assets beyond creditors may be challengeable under applicable insolvency law. Which control addresses it most directly?
- Require complete asset schedules and independent verification under applicable law.
- Apply consistent creditor-payment governance and seek jurisdiction-specific insolvency advice.
- Review insider transactions and preserve assets for lawful creditor treatment.
- Subject related-party creditor proofs to independent substantive verification.
Explanation
Correct Answer
C:The control directly addresses the failure point in Pre-filing fraudulent asset transfer, since transfers intended to put assets beyond creditors may be challengeable under applicable insolvency law. A subsequent independent review could trace asset conveyance documents, fair value and beneficial ownership to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Concealed offshore insolvency asset rather than Pre-filing fraudulent asset transfer, because concealment deprives the estate and creditors of property that should be disclosed. Unlike the control for Concealed offshore insolvency asset, the more direct design for Pre-filing fraudulent asset transfer is to review insider transactions and preserve assets for lawful creditor treatment; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Preferential creditor payment review rather than Pre-filing fraudulent asset transfer, because preference rules can permit recovery of certain pre-filing payments without proving a fictitious invoice or ordinary theft. Unlike the control for Preferential creditor payment review, the more direct design for Pre-filing fraudulent asset transfer is to review insider transactions and preserve assets for lawful creditor treatment; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Fictitious creditor claim rather than Pre-filing fraudulent asset transfer, because a manufactured liability can dilute legitimate creditors' recoveries. Unlike the control for Fictitious creditor claim, the more direct design for Pre-filing fraudulent asset transfer is to review insider transactions and preserve assets for lawful creditor treatment; a different safeguard cannot substitute for it.
Question 52
The organization wants to prevent excessive-account churning. Its risk assessment describes: Excessive trading for broker compensation can constitute churning when control and other relevant elements are present. What targeted safeguard should it prioritize?
- Monitor commission-driven activity and require supervisory review of high-turnover accounts.
- Require documented suitability assessment and independent review of high-risk recommendations.
- Verify regulatory status and permitted functions of intermediaries before engagement.
- Apply documented ESG reporting controls and independent verification of material claims.
- Require comprehensive disclosure diligence and independent review of material risks.
Explanation
Correct Answer
A:The control directly addresses the failure point in Excessive-account churning, since excessive trading for broker compensation can constitute churning when control and other relevant elements are present. A subsequent independent review could analyze account turnover, costs, broker control and trading justifications to identify exceptions that bypassed the safeguard.
Incorrect Answers
B:This safeguard is directed primarily at Unsuitable securities recommendation rather than Excessive-account churning, because a sale can be improper because the recommendation does not match the customer's circumstances, not because the product itself is inherently unlawful. Unlike the control for Unsuitable securities recommendation, the more direct design for Excessive-account churning is to monitor commission-driven activity and require supervisory review of high-turnover accounts; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Unregistered brokerage solicitation rather than Excessive-account churning, because securities-related compensation and solicitation can trigger registration obligations under relevant laws. Unlike the control for Unregistered brokerage solicitation, the more direct design for Excessive-account churning is to monitor commission-driven activity and require supervisory review of high-turnover accounts; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at False sustainability disclosures rather than Excessive-account churning, because nonfinancial representations can deceive securities investors when inaccurate or unsupported. Unlike the control for False sustainability disclosures, the more direct design for Excessive-account churning is to monitor commission-driven activity and require supervisory review of high-turnover accounts; a different safeguard cannot substitute for it.
E:This safeguard is directed primarily at Misleading offering prospectus rather than Excessive-account churning, because omission of decision-useful facts can mislead investors even where some published numbers are accurate. Unlike the control for Misleading offering prospectus, the more direct design for Excessive-account churning is to monitor commission-driven activity and require supervisory review of high-turnover accounts; a different safeguard cannot substitute for it.
Question 53
The team is assessing a potential government-agent impersonation scam discrepancy. Initial observation: The demand uses urgency and an implausible nonofficial payment method. Which verification step is most informative?
- Review account authority, beneficiary connections and contemporaneous consent evidence.
- Analyze compensation flows and genuine external customer transactions.
- Verify asset custody, independent reserves and the reality of return generation.
- Link relationship communications with payment destinations and platform authenticity.
- Check the claim using government contact channels obtained independently.
Explanation
Correct Answer
E:For the Government-agent impersonation scam concern, the procedure tests source evidence behind this observation: The demand uses urgency and an implausible nonofficial payment method. This matters because authority impersonation exploits fear and urgency to make victims send funds; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
A:This comparison primarily addresses Elder caregiver financial exploitation, in which abuse of trust or access can divert assets from a vulnerable person without a public investment pitch; because the present question instead concerns Government-agent impersonation scam, reviewers should check the claim using government contact channels obtained independently rather than apply a check designed for Elder caregiver financial exploitation.
B:This comparison primarily addresses Recruitment-driven pyramid, in which recruitment dependence distinguishes a pyramid structure from ordinary retail distribution; because the present question instead concerns Government-agent impersonation scam, reviewers should check the claim using government contact channels obtained independently rather than apply a check designed for Recruitment-driven pyramid.
C:This comparison primarily addresses Guaranteed crypto yield scam, in which unsubstantiated investment guarantees can camouflage misappropriation rather than legitimate market profits; because the present question instead concerns Government-agent impersonation scam, reviewers should check the claim using government contact channels obtained independently rather than apply a check designed for Guaranteed crypto yield scam.
D:This comparison primarily addresses Online romance investment grooming, in which the fraud uses emotional trust to induce transfers, often without the promised investment existing; because the present question instead concerns Government-agent impersonation scam, reviewers should check the claim using government contact channels obtained independently rather than apply a check designed for Online romance investment grooming.
Question 54
Control designers are focusing on the mechanism behind pass-through purchasing scheme: The transaction may deliver real goods yet divert value through an unnecessary marked-up middleman. Which measure best limits that opportunity?
- Prevent repeated invoice processing using duplicate controls and independent exception review.
- Enforce purchase-order approval tied to documented business purpose and receiving.
- Independently vet new vendors and segregate setup, approval and payment.
- Require competitive bids and disclosure of employee beneficial interests.
- Verify account changes using independently sourced supplier contact details.
Explanation
Correct Answer
D:The control directly addresses the failure point in Pass-through purchasing scheme, since the transaction may deliver real goods yet divert value through an unnecessary marked-up middleman. A subsequent independent review could trace supplier origin, price history and ultimate ownership of intermediaries to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Duplicate vendor-invoice payment rather than Pass-through purchasing scheme, because the scheme exploits duplicate settlement of one legitimate obligation. Unlike the control for Duplicate vendor-invoice payment, the more direct design for Pass-through purchasing scheme is to require competitive bids and disclosure of employee beneficial interests; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Personal purchases billed as business rather than Pass-through purchasing scheme, because the organization pays a real supplier for goods acquired for private use. Unlike the control for Personal purchases billed as business, the more direct design for Pass-through purchasing scheme is to require competitive bids and disclosure of employee beneficial interests; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Shell-company invoice billing rather than Pass-through purchasing scheme, because a nonoperating entity receives organizational money against false billing support. Unlike the control for Shell-company invoice billing, the more direct design for Pass-through purchasing scheme is to require competitive bids and disclosure of employee beneficial interests; a different safeguard cannot substitute for it.
E:This safeguard is directed primarily at ACH beneficiary substitution rather than Pass-through purchasing scheme, because the fraud redirects a genuine disbursement through altered settlement coordinates. Unlike the control for ACH beneficiary substitution, the more direct design for Pass-through purchasing scheme is to require competitive bids and disclosure of employee beneficial interests; a different safeguard cannot substitute for it.
Question 55
Two separate review files raise different issues. File A: A wholesaler delivers goods on approved customer credit and has not yet collected the invoiced amount. File B: A merchant purchases products for resale and tries to expense the entire purchase immediately even though most units remain unsold. Which pairing accurately classifies both files?
- File A: Accounts receivable from credit sales; File B: Prepaid insurance expense.
- File A: Operating cash-flow classification; File B: Inventory cost recognition.
- File A: Prepaid insurance expense; File B: Accounts receivable from credit sales.
- File A: Inventory cost recognition; File B: Accounts receivable from credit sales.
- File A: Accounts receivable from credit sales; File B: Inventory cost recognition.
Explanation
Correct Answer
E:File A is Accounts receivable from credit sales because a legitimate credit sale can create an asset before cash arrives when revenue criteria are met, while File B is Inventory cost recognition because unsold goods ordinarily remain inventory assets until sold or written down as required. The evidence chains differ: for File A, reviewers should trace shipping confirmations to invoices, customer balances and subsequent collections; for File B, they should reconcile perpetual inventory quantities to physical counts and cost-of-goods-sold postings.
Incorrect Answers
A:File B is misidentified as Prepaid insurance expense instead of Inventory cost recognition. With the proposed pairing Accounts receivable from credit sales / Prepaid insurance expense, the distinction is substantive: File A shows that the shipment and invoice are valid but no matching bank receipt exists yet, whereas File B shows that stock counts confirm unsold merchandise at the reporting date. For these Accounts receivable from credit sales and Inventory cost recognition files, choosing the pair Accounts receivable from credit sales / Prepaid insurance expense would misdirect the review away from at least one of these mechanisms.
B:File A is misidentified as Operating cash-flow classification instead of Accounts receivable from credit sales. With the proposed pairing Operating cash-flow classification / Inventory cost recognition, the distinction is substantive: File A shows that the shipment and invoice are valid but no matching bank receipt exists yet, whereas File B shows that stock counts confirm unsold merchandise at the reporting date. For these Accounts receivable from credit sales and Inventory cost recognition files, choosing the pair Operating cash-flow classification / Inventory cost recognition would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Prepaid insurance expense instead of Accounts receivable from credit sales; File B is misidentified as Accounts receivable from credit sales instead of Inventory cost recognition. With the proposed pairing Prepaid insurance expense / Accounts receivable from credit sales, the distinction is substantive: File A shows that the shipment and invoice are valid but no matching bank receipt exists yet, whereas File B shows that stock counts confirm unsold merchandise at the reporting date. For these Accounts receivable from credit sales and Inventory cost recognition files, choosing the pair Prepaid insurance expense / Accounts receivable from credit sales would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Inventory cost recognition instead of Accounts receivable from credit sales; File B is misidentified as Accounts receivable from credit sales instead of Inventory cost recognition. With the proposed pairing Inventory cost recognition / Accounts receivable from credit sales, the distinction is substantive: File A shows that the shipment and invoice are valid but no matching bank receipt exists yet, whereas File B shows that stock counts confirm unsold merchandise at the reporting date. For these Accounts receivable from credit sales and Inventory cost recognition files, choosing the pair Inventory cost recognition / Accounts receivable from credit sales would misdirect the review away from at least one of these mechanisms.
Question 56
The case file describes the following: A company has verified total assets and obligations and must explain the residual claim belonging to owners. Which classification best explains the events?
- Equity reconciliation
- Gross-profit calculation
- Financing cash-flow classification
- Accounting-framework selection
Explanation
Correct Answer
A:Equity reconciliation fits the facts because equity is the residual interest in assets after deducting liabilities, not a bank balance or revenue figure; the distinguishing observation is that the reported owners' interest does not equal assets less liabilities. To test this interpretation, a reviewer should recalculate the accounting equation and trace changes to equity transactions and results.
Incorrect Answers
B:Gross-profit calculation would involve a different sequence from Equity reconciliation: gross profit isolates direct goods margin rather than the final earnings after all operating and other costs. Unlike the rejected Gross-profit calculation label, the evidence concerns Equity reconciliation, since the reported owners' interest does not equal assets less liabilities; reviewers should recalculate the accounting equation and trace changes to equity transactions and results.
C:Financing cash-flow classification would involve a different sequence from Equity reconciliation: financing activities describe changes in funding from lenders and owners; classifications of interest can vary by accounting framework. Unlike the rejected Financing cash-flow classification label, the evidence concerns Equity reconciliation, since the reported owners' interest does not equal assets less liabilities; reviewers should recalculate the accounting equation and trace changes to equity transactions and results.
D:Accounting-framework selection would involve a different sequence from Equity reconciliation: iFRS and national GAAP are accounting frameworks; their use depends on reporting requirements, not the invoice currency. Unlike the rejected Accounting-framework selection label, the evidence concerns Equity reconciliation, since the reported owners' interest does not equal assets less liabilities; reviewers should recalculate the accounting equation and trace changes to equity transactions and results.
Question 57
The review team observes the following: Post-close payments relate to services delivered before the balance-sheet date. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Perform independent counts and test ownership and valuation of selected stock; safeguard: Independently review goods and services received near the cutoff date.
- Diagnostic: Map beneficial ownership and compare transactions with related-party disclosure requirements; safeguard: Apply reviewed capitalization thresholds and expense nonqualifying costs.
- Diagnostic: Search subsequent disbursements for missing accruals and compare receiving logs with liabilities; safeguard: Independently review goods and services received near the cutoff date.
- Diagnostic: Search subsequent disbursements for missing accruals and compare receiving logs with liabilities; safeguard: Maintain conflict declarations and review related-party transactions for required disclosure.
Explanation
Correct Answer
C:The test addresses Unrecorded accrued liabilities by targeting this observation: Post-close payments relate to services delivered before the balance-sheet date. The accompanying safeguard—independently review goods and services received near the cutoff date—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
A:The proposed safeguard is relevant to Unrecorded accrued liabilities, but the diagnostic tests Inflated year-end inventory rather than the identified anomaly. That test is aimed at records involving warehouse counts and ownership terms disagree with inventory listings; the specified case instead calls for reviewers to search subsequent disbursements for missing accruals and compare receiving logs with liabilities.
B:The evidence test relates to Omitted related-party disclosure, whereas the proposed safeguard protects against Capitalized routine operating costs; neither directly resolves Unrecorded accrued liabilities. Unlike the Omitted related-party disclosure test and Capitalized routine operating costs safeguard, the investigation of Unrecorded accrued liabilities requires reviewers to search subsequent disbursements for missing accruals and compare receiving logs with liabilities, followed by assessment of the matching control point.
D:The diagnostic correctly examines Unrecorded accrued liabilities by having reviewers search subsequent disbursements for missing accruals and compare receiving logs with liabilities, but the safeguard is for Omitted related-party disclosure. That prevention step responds to a different mechanism: Even when amounts are recorded, withholding material relationship information can mislead statement users.
Question 58
The case file describes the following: A criminal intercepts a mailed check and chemically changes the payee while preserving the original drawer signature. Which classification best explains the events?
- Counterfeit check creation
- Contactless payment relay
- Check-washing alteration
- Check-kiting float abuse
Explanation
Correct Answer
C:Check-washing alteration fits the facts because check washing modifies a valid instrument to redirect its value; the distinguishing observation is that cleared images show altered writing inconsistent with the drawer's retained check copy. To test this interpretation, a reviewer should match cleared bank images with original check issuance and beneficiary details.
Incorrect Answers
A:Counterfeit check creation would involve a different sequence from Check-washing alteration: counterfeit checks are fabricated payment instruments rather than alterations of legitimate originals. Unlike the rejected Counterfeit check creation label, the evidence concerns Check-washing alteration, since cleared images show altered writing inconsistent with the drawer's retained check copy; reviewers should match cleared bank images with original check issuance and beneficiary details.
B:Contactless payment relay would involve a different sequence from Check-washing alteration: relay attacks extend a credential's communication path rather than physically duplicating the card. Unlike the rejected Contactless payment relay label, the evidence concerns Check-washing alteration, since cleared images show altered writing inconsistent with the drawer's retained check copy; reviewers should match cleared bank images with original check issuance and beneficiary details.
D:Check-kiting float abuse would involve a different sequence from Check-washing alteration: kiting exploits settlement timing to inflate apparent funds without a genuine source of money. Unlike the rejected Check-kiting float abuse label, the evidence concerns Check-washing alteration, since cleared images show altered writing inconsistent with the drawer's retained check copy; reviewers should match cleared bank images with original check issuance and beneficiary details.
Question 59
A review plan for prescribing referral kickback must contain one pertinent indicator, one verification procedure and one preventive step. Which THREE choices together form that coherent plan? Choose THREE.
- Require conflict disclosure and compliant separation of clinical decisions from payments.
- Review medical records and criteria supporting prescribed devices.
- Referral volumes coincide with unexplained consulting payments from the pharmacy.
- Verify patient identity while protecting sensitive health information.
- Clinical notes support lower-intensity care than the codes billed.
- Compare referral patterns with payment ties and clinical appropriateness.
Explanation
Correct Answers
A:This safeguard directly reduces Prescribing referral kickback exposure because financial inducements can corrupt medical decisions even when treatment is actually delivered. The control should be monitored using records from this check: Compare referral patterns with payment ties and clinical appropriateness.
C:This observation is a red flag for Prescribing referral kickback because financial inducements can corrupt medical decisions even when treatment is actually delivered. The next appropriate step is to compare referral patterns with payment ties and clinical appropriateness, not to treat an anomaly as conclusive evidence.
F:This procedure verifies the records implicated by Prescribing referral kickback; the observed anomaly is that referral volumes coincide with unexplained consulting payments from the pharmacy. For the Prescribing referral kickback concern, it can distinguish errors and innocent explanations from possible misstatements or wrongdoing before reaching a conclusion.
Incorrect Answers
B:This procedure tests False medical necessity certification rather than the named Prescribing referral kickback concern. The False medical necessity certification evidence is repeated medical-necessity forms use boilerplate unsupported by examinations, while the Prescribing referral kickback path requires reviewers to compare referral patterns with payment ties and clinical appropriateness.
D:The chosen preventive action chiefly mitigates Medical identity misuse, where an unauthorized patient exploits a real person's insurance entitlement. For Prescribing referral kickback, unlike Medical identity misuse, the targeted safeguard is to require conflict disclosure and compliant separation of clinical decisions from payments because the exposure occurs at a different point.
E:The listed warning sign specifically concerns Medical service upcoding, where upcoding inflates payment by assigning a code for a more expensive service than was delivered, not the requested Prescribing referral kickback review. Unlike the Medical service upcoding indicator, the relevant signal for Prescribing referral kickback is this: Referral volumes coincide with unexplained consulting payments from the pharmacy.
Question 60
The review team observes the following: The favored bid mirrors nonpublic scoring language before tender release. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Cross-check procurement decisions, vendor performance and unexplained employee benefits; safeguard: Require documented lawful fees and prohibit unapproved payments through intermediaries.
- Diagnostic: Compare access history to restricted procurement files with bidder drafts and benefits; safeguard: Enforce independent sourcing approvals and disclose vendor-benefit relationships.
- Diagnostic: Trace third-party payment flows and ownership while comparing award rationale; safeguard: Restrict evaluation access and log conflicts, gifts and bidder communications.
- Diagnostic: Compare access history to restricted procurement files with bidder drafts and benefits; safeguard: Restrict evaluation access and log conflicts, gifts and bidder communications.
Explanation
Correct Answer
D:The test addresses Conflict through confidential specifications by targeting this observation: The favored bid mirrors nonpublic scoring language before tender release. The accompanying safeguard—restrict evaluation access and log conflicts, gifts and bidder communications—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
A:The evidence test relates to Supplier kickback for selection, whereas the proposed safeguard protects against Unapproved facilitation payment; neither directly resolves Conflict through confidential specifications. Unlike the Supplier kickback for selection test and Unapproved facilitation payment safeguard, the investigation of Conflict through confidential specifications requires reviewers to compare access history to restricted procurement files with bidder drafts and benefits, followed by assessment of the matching control point.
B:The diagnostic correctly examines Conflict through confidential specifications by having reviewers compare access history to restricted procurement files with bidder drafts and benefits, but the safeguard is for Supplier kickback for selection. That prevention step responds to a different mechanism: A kickback rewards an official for steering organizational business rather than for legitimate services.
C:The proposed safeguard is relevant to Conflict through confidential specifications, but the diagnostic tests Vendor-funded political favor rather than the identified anomaly. That test is aimed at records involving beneficiary ties and timing align with the award recommendation; the specified case instead calls for reviewers to compare access history to restricted procurement files with bidder drafts and benefits.