Question 710
The available records suggest improper job-for-favor arrangement: The appointment follows requests to change the supplier ranking. Which TWO actions together provide one direct check and one targeted preventive measure? Choose TWO.
- Compare payments and customs records with government fee schedules.
- Use independent competition monitoring and enforce antitrust-sensitive supplier declarations.
- Treat employment opportunities as potential benefits subject to conflict review.
- Invoices for advice lack outputs and coincide with favorable official actions.
- Compare hiring decisions, supplier influence and communications about procurement scoring.
Explanation
Correct Answers
C:This safeguard directly reduces Improper job-for-favor arrangement exposure because noncash personal advantages can function as bribes when tied to official discretion. The control should be monitored using records from this check: Compare hiring decisions, supplier influence and communications about procurement scoring.
E:This procedure verifies the records implicated by Improper job-for-favor arrangement; the observed anomaly is that the appointment follows requests to change the supplier ranking. For the Improper job-for-favor arrangement concern, it can distinguish errors and innocent explanations from possible misstatements or wrongdoing before reaching a conclusion.
Incorrect Answers
A:This procedure tests Unapproved facilitation payment rather than the named Improper job-for-favor arrangement concern. The Unapproved facilitation payment evidence is the purported charge lacks an official government receipt or published tariff basis, while the Improper job-for-favor arrangement path requires reviewers to compare hiring decisions, supplier influence and communications about procurement scoring.
B:The chosen preventive action chiefly mitigates Bid-sharing cartel, where bid rotation is collusion among bidders that undermines competitive award outcomes. For Improper job-for-favor arrangement, unlike Bid-sharing cartel, the targeted safeguard is to treat employment opportunities as potential benefits subject to conflict review because the exposure occurs at a different point.
D:The listed warning sign specifically concerns Sham consulting bribe, where a fake service agreement can launder a corrupt payment as a commercial expense, not the requested Improper job-for-favor arrangement review. Unlike the Sham consulting bribe indicator, the relevant signal for Improper job-for-favor arrangement is this: The appointment follows requests to change the supplier ranking.
Question 711
The review team observes the following: Related requisitions for the same need occur within a short period. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Compare proposed purchase needs with inventory, utilization and operational plans; safeguard: Apply aggregation rules to linked purchases and independently review threshold exceptions.
- Diagnostic: Aggregate same-purpose requisitions and compare total value with policy thresholds; safeguard: Require independent technical and commercial approval of material change orders.
- Diagnostic: Compare original scope, approved modifications and actual field measurements; safeguard: Control confidential estimate access and log pre-award communications.
- Diagnostic: Aggregate same-purpose requisitions and compare total value with policy thresholds; safeguard: Apply aggregation rules to linked purchases and independently review threshold exceptions.
Explanation
Correct Answer
D:The test addresses Split purchases to evade tender threshold by targeting this observation: Related requisitions for the same need occur within a short period. The accompanying safeguard—apply aggregation rules to linked purchases and independently review threshold exceptions—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
A:The proposed safeguard is relevant to Split purchases to evade tender threshold, but the diagnostic tests Invented procurement need rather than the identified anomaly. That test is aimed at records involving demand forecasts and asset utilization records contradict the justification; the specified case instead calls for reviewers to aggregate same-purpose requisitions and compare total value with policy thresholds.
B:The diagnostic correctly examines Split purchases to evade tender threshold by having reviewers aggregate same-purpose requisitions and compare total value with policy thresholds, but the safeguard is for Post-award change-order inflation. That prevention step responds to a different mechanism: Post-award modifications can recoup an artificially low bid or extract excessive payments.
C:The evidence test relates to Post-award change-order inflation, whereas the proposed safeguard protects against Leaked confidential price estimate; neither directly resolves Split purchases to evade tender threshold. Unlike the Post-award change-order inflation test and Leaked confidential price estimate safeguard, the investigation of Split purchases to evade tender threshold requires reviewers to aggregate same-purpose requisitions and compare total value with policy thresholds, followed by assessment of the matching control point.
Question 712
The review team observes the following: Voids cluster under one cashier after high-cash transactions. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Match void timestamps with customer receipts and inventory movement; safeguard: Restrict refund destinations and monitor repeated beneficiary cards.
- Diagnostic: Join refund transaction logs with stored-value account activation and use records; safeguard: Require independent authorization and item verification for refunds.
- Diagnostic: Match void timestamps with customer receipts and inventory movement; safeguard: Restrict post-sale void rights and review exception logs with video where lawful.
- Diagnostic: Reconcile register paid-outs to approved source documents and purchases; safeguard: Restrict post-sale void rights and review exception logs with video where lawful.
Explanation
Correct Answer
C:The test addresses Fraudulent sale void by targeting this observation: Voids cluster under one cashier after high-cash transactions. The accompanying safeguard—restrict post-sale void rights and review exception logs with video where lawful—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
A:The diagnostic correctly examines Fraudulent sale void by having reviewers match void timestamps with customer receipts and inventory movement, but the safeguard is for Manipulated return-to-gift-card. That prevention step responds to a different mechanism: A fabricated return transfers store value instead of extracting physical currency.
B:The evidence test relates to Manipulated return-to-gift-card, whereas the proposed safeguard protects against Fictitious register refund; neither directly resolves Fraudulent sale void. Unlike the Manipulated return-to-gift-card test and Fictitious register refund safeguard, the investigation of Fraudulent sale void requires reviewers to match void timestamps with customer receipts and inventory movement, followed by assessment of the matching control point.
D:The proposed safeguard is relevant to Fraudulent sale void, but the diagnostic tests Unauthorized register cash payout rather than the identified anomaly. That test is aimed at records involving paid-out entries have generic descriptions but no corresponding invoices; the specified case instead calls for reviewers to match void timestamps with customer receipts and inventory movement.
Question 713
For a review of unauthorized contract extension, which evidence-based warning sign is the most specific?
- Extensions exceed stated options and bypass mandated review dates.
- Scoring notes and objective evidence disagree while one bidder receives unexplained advantages.
- Subcontractor bills have no credible staff or deliverables despite significant markup.
- Site access and staffing records contradict skill grades and hours on invoices.
Explanation
Correct Answer
A:This observation is a pertinent indicator of Unauthorized contract extension because improper continuation can give an incumbent business without the required competition. The practical corroborating procedure is to compare amendments with original contract clauses, approval authority and renewal limits; the indicator by itself does not establish intent or error.
Incorrect Answers
B:The proposed observation fits Collusive bid-evaluation scoring, where manipulated evaluation changes the award outcome after bids arrive, unlike specification tailoring, rather than the particular mechanism in Unauthorized contract extension. Unlike the clue for Collusive bid-evaluation scoring, the more directly related indicator for Unauthorized contract extension is this: Extensions exceed stated options and bypass mandated review dates.
C:The proposed observation fits Sham subcontractor pass-through, where a dummy lower-tier supplier can hide unwarranted profit or diversion within contract costs, rather than the particular mechanism in Unauthorized contract extension. Unlike the clue for Sham subcontractor pass-through, the more directly related indicator for Unauthorized contract extension is this: Extensions exceed stated options and bypass mandated review dates.
D:The proposed observation fits Time-and-materials labor padding, where misstated labor grade or effort inflates reimbursable service cost after award, rather than the particular mechanism in Unauthorized contract extension. Unlike the clue for Time-and-materials labor padding, the more directly related indicator for Unauthorized contract extension is this: Extensions exceed stated options and bypass mandated review dates.
Question 714
The case file describes the following: A maintenance company collects a twelve-month contract payment before providing the future months of service and initially records it all as sales. Which classification best explains the events?
- Accounting-framework selection
- Prepaid insurance expense
- Accrued supplier expense
- Deferred customer revenue
- Accrued service revenue
Explanation
Correct Answer
D:Deferred customer revenue fits the facts because prepayment does not by itself make the entire receipt current-period income; the unperformed portion represents an obligation; the distinguishing observation is that the cash was received while most contracted performance obligations remained outstanding. To test this interpretation, a reviewer should trace receipt dates and service periods to deferred-revenue rollforwards.
Incorrect Answers
A:Accounting-framework selection would involve a different sequence from Deferred customer revenue: iFRS and national GAAP are accounting frameworks; their use depends on reporting requirements, not the invoice currency. Unlike the rejected Accounting-framework selection label, the evidence concerns Deferred customer revenue, since the cash was received while most contracted performance obligations remained outstanding; reviewers should trace receipt dates and service periods to deferred-revenue rollforwards.
B:Prepaid insurance expense would involve a different sequence from Deferred customer revenue: an advance payment creates an asset for future economic benefit rather than immediate expense for all periods. Unlike the rejected Prepaid insurance expense label, the evidence concerns Deferred customer revenue, since the cash was received while most contracted performance obligations remained outstanding; reviewers should trace receipt dates and service periods to deferred-revenue rollforwards.
C:Accrued supplier expense would involve a different sequence from Deferred customer revenue: an incurred cost belongs to the period of the service even if payment and invoicing follow later. Unlike the rejected Accrued supplier expense label, the evidence concerns Deferred customer revenue, since the cash was received while most contracted performance obligations remained outstanding; reviewers should trace receipt dates and service periods to deferred-revenue rollforwards.
E:Accrued service revenue would involve a different sequence from Deferred customer revenue: under accrual accounting, revenue relates to the period when the service was performed, not simply the invoice or cash date. Unlike the rejected Accrued service revenue label, the evidence concerns Deferred customer revenue, since the cash was received while most contracted performance obligations remained outstanding; reviewers should trace receipt dates and service periods to deferred-revenue rollforwards.
Question 715
A reviewer wants to distinguish spear-phishing product drawings from adjacent risk patterns. Which observation is the most diagnostic indicator?
- Suspicious sign-ins follow a spoofed message and precede drawing downloads.
- Contractor access exceeds project need and coincides with unexplained lab photography.
- Privileged queries and large exports lack authorized change tickets.
- Research source logs show only publicly accessible, lawfully obtained material.
Explanation
Correct Answer
A:This observation is a pertinent indicator of Spear-phishing product drawings because deceptive credential collection enables unauthorized access to proprietary engineering data. The practical corroborating procedure is to correlate identity-provider login records, phishing artifacts and file access; the indicator by itself does not establish intent or error.
Incorrect Answers
B:The proposed observation fits Corporate espionage by infiltration, where covert acquisition of nonpublic secrets for competitive gain is espionage rather than ordinary market research, rather than the particular mechanism in Spear-phishing product drawings. Unlike the clue for Corporate espionage by infiltration, the more directly related indicator for Spear-phishing product drawings is this: Suspicious sign-ins follow a spoofed message and precede drawing downloads.
C:The proposed observation fits Privileged bulk data export, where excess technical privilege can permit insider misappropriation of valuable information, rather than the particular mechanism in Spear-phishing product drawings. Unlike the clue for Privileged bulk data export, the more directly related indicator for Spear-phishing product drawings is this: Suspicious sign-ins follow a spoofed message and precede drawing downloads.
D:The proposed observation fits Lawful public competitive intelligence, where competitive intelligence based on public information differs from unauthorized acquisition of trade secrets, rather than the particular mechanism in Spear-phishing product drawings. Unlike the clue for Lawful public competitive intelligence, the more directly related indicator for Spear-phishing product drawings is this: Suspicious sign-ins follow a spoofed message and precede drawing downloads.
Question 716
The risk team has identified the following ponzi payout financing exposure: A Ponzi structure pays old investors with new funds while misrepresenting actual returns. Which proposed prevention step is most effective?
- Require independent custody and verification of investment performance.
- Scrutinize whether rewards derive mainly from recruitment rather than legitimate product sales.
- Explain that legitimate prize verification does not require secret advance remittances to claimants.
- Warn against guaranteed returns and require independent verification before funding platforms.
Explanation
Correct Answer
A:The control directly addresses the failure point in Ponzi payout financing, since a Ponzi structure pays old investors with new funds while misrepresenting actual returns. A subsequent independent review could trace cash sources for investor payouts and independently verify held assets to identify exceptions that bypassed the safeguard.
Incorrect Answers
B:This safeguard is directed primarily at Recruitment-driven pyramid rather than Ponzi payout financing, because recruitment dependence distinguishes a pyramid structure from ordinary retail distribution. Unlike the control for Recruitment-driven pyramid, the more direct design for Ponzi payout financing is to require independent custody and verification of investment performance; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Advance-fee lottery fraud rather than Ponzi payout financing, because the promise of future value is used to extract an immediate fee without a real award. Unlike the control for Advance-fee lottery fraud, the more direct design for Ponzi payout financing is to require independent custody and verification of investment performance; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Pig-butchering investment scam rather than Ponzi payout financing, because long-form social engineering combines relationship grooming with fabricated investment performance. Unlike the control for Pig-butchering investment scam, the more direct design for Ponzi payout financing is to require independent custody and verification of investment performance; a different safeguard cannot substitute for it.
Question 717
Two separate review files raise different issues. File A: A vendor intentionally records a lower price than the customer's cash payment and keeps the difference. File B: A clerk records a fictitious cash refund against a prior real sale and removes the corresponding banknotes. Which pairing accurately classifies both files?
- File A: Cash-sale understatement; File B: Charity donation skimming.
- File A: Off-register retail skimming; File B: Concealment through false refunds.
- File A: Cash-sale understatement; File B: Concealment through false refunds.
- File A: Concealment through false refunds; File B: Cash-sale understatement.
Explanation
Correct Answer
C:File A is Cash-sale understatement because the portion never entered in the till is skimmed even though a partial sale appears in the books, while File B is Concealment through false refunds because a false refund creates an apparently authorized cash outflow, unlike an off-record cash receipt theft. The evidence chains differ: for File A, reviewers should compare price lists and independent customer receipts with cash register line data; for File B, they should match refund authorizations to returned-stock records and original receipt identifiers.
Incorrect Answers
A:File B is misidentified as Charity donation skimming instead of Concealment through false refunds. With the proposed pairing Cash-sale understatement / Charity donation skimming, the distinction is substantive: File A shows that customer receipts or posted menu prices exceed amounts entered for the same items, whereas File B shows that refund rates jump without matching returned merchandise or customer evidence. For these Cash-sale understatement and Concealment through false refunds files, choosing the pair Cash-sale understatement / Charity donation skimming would misdirect the review away from at least one of these mechanisms.
B:File A is misidentified as Off-register retail skimming instead of Cash-sale understatement. With the proposed pairing Off-register retail skimming / Concealment through false refunds, the distinction is substantive: File A shows that customer receipts or posted menu prices exceed amounts entered for the same items, whereas File B shows that refund rates jump without matching returned merchandise or customer evidence. For these Cash-sale understatement and Concealment through false refunds files, choosing the pair Off-register retail skimming / Concealment through false refunds would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Concealment through false refunds instead of Cash-sale understatement; File B is misidentified as Cash-sale understatement instead of Concealment through false refunds. With the proposed pairing Concealment through false refunds / Cash-sale understatement, the distinction is substantive: File A shows that customer receipts or posted menu prices exceed amounts entered for the same items, whereas File B shows that refund rates jump without matching returned merchandise or customer evidence. For these Cash-sale understatement and Concealment through false refunds files, choosing the pair Concealment through false refunds / Cash-sale understatement would misdirect the review away from at least one of these mechanisms.
Question 718
Reviewers flag a possible false scrap classification issue. Their preliminary finding is: Disposal lists contain items with normal working condition or resale value. Which test would best confirm or refute the concern?
- Match shipment scans and carrier proof of delivery to authorized sales or transfers.
- Inspect scrap authorizations against production defects, quantities and recycler receipts.
- Compare asset-location audits and access logs with authorized lending records.
- Reconcile cycle counts, stock movements and exception adjustments by custodian.
Explanation
Correct Answer
B:For the False scrap classification concern, the procedure tests source evidence behind this observation: Disposal lists contain items with normal working condition or resale value. This matters because misclassification makes valuable inventory appear worthless before it leaves the site; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
A:This comparison primarily addresses Fictitious outbound shipment, in which false shipment records disguise a physical theft as normal logistics activity; because the present question instead concerns False scrap classification, reviewers should inspect scrap authorizations against production defects, quantities and recycler receipts rather than apply a check designed for Fictitious outbound shipment.
C:This comparison primarily addresses Unauthorized equipment personal use, in which temporary unauthorized use is misuse of a noncash asset even where permanent theft is unproven; because the present question instead concerns False scrap classification, reviewers should inspect scrap authorizations against production defects, quantities and recycler receipts rather than apply a check designed for Unauthorized equipment personal use.
D:This comparison primarily addresses Warehouse stock diversion, in which the employee converts recorded merchandise to private use by exploiting physical access; because the present question instead concerns False scrap classification, reviewers should inspect scrap authorizations against production defects, quantities and recycler receipts rather than apply a check designed for Warehouse stock diversion.
Question 719
A process owner is assessing safeguards for prescribing referral kickback. The mechanism is: Financial inducements can corrupt medical decisions even when treatment is actually delivered. Which control addresses it most directly?
- Link claims submission to verified service events and independent chart controls.
- Verify patient identity while protecting sensitive health information.
- Require conflict disclosure and compliant separation of clinical decisions from payments.
- Require documented clinical necessity and review of high-risk authorizations.
- Conduct coding audits tied to clinical documentation and staff training.
Explanation
Correct Answer
C:The control directly addresses the failure point in Prescribing referral kickback, since financial inducements can corrupt medical decisions even when treatment is actually delivered. A subsequent independent review could compare referral patterns with payment ties and clinical appropriateness to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Phantom patient encounters rather than Prescribing referral kickback, because billing nonexistent visits extracts payment for services not rendered. Unlike the control for Phantom patient encounters, the more direct design for Prescribing referral kickback is to require conflict disclosure and compliant separation of clinical decisions from payments; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Medical identity misuse rather than Prescribing referral kickback, because an unauthorized patient exploits a real person's insurance entitlement. Unlike the control for Medical identity misuse, the more direct design for Prescribing referral kickback is to require conflict disclosure and compliant separation of clinical decisions from payments; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at False medical necessity certification rather than Prescribing referral kickback, because claims fraud can arise from false eligibility or necessity rather than nonexistent delivery. Unlike the control for False medical necessity certification, the more direct design for Prescribing referral kickback is to require conflict disclosure and compliant separation of clinical decisions from payments; a different safeguard cannot substitute for it.
E:This safeguard is directed primarily at Medical service upcoding rather than Prescribing referral kickback, because upcoding inflates payment by assigning a code for a more expensive service than was delivered. Unlike the control for Medical service upcoding, the more direct design for Prescribing referral kickback is to require conflict disclosure and compliant separation of clinical decisions from payments; a different safeguard cannot substitute for it.
Question 720
The case file describes the following: An executive orders year-end sales invoices to nonexistent customers despite no contracts or deliveries. Which classification best explains the events?
- Omitted related-party disclosure
- Fictitious sales entries
- Premature revenue recognition
- Channel-stuffing manipulation
Explanation
Correct Answer
B:Fictitious sales entries fits the facts because recording invented transactions inflates revenue and assets without an underlying exchange; the distinguishing observation is that large new receivables lack customer confirmations or shipping support. To test this interpretation, a reviewer should confirm selected receivables independently and match invoices to dispatch records.
Incorrect Answers
A:Omitted related-party disclosure would involve a different sequence from Fictitious sales entries: even when amounts are recorded, withholding material relationship information can mislead statement users. Unlike the rejected Omitted related-party disclosure label, the evidence concerns Fictitious sales entries, since large new receivables lack customer confirmations or shipping support; reviewers should confirm selected receivables independently and match invoices to dispatch records.
C:Premature revenue recognition would involve a different sequence from Fictitious sales entries: a real contract does not justify recognizing revenue before relevant recognition criteria are satisfied. Unlike the rejected Premature revenue recognition label, the evidence concerns Fictitious sales entries, since large new receivables lack customer confirmations or shipping support; reviewers should confirm selected receivables independently and match invoices to dispatch records.
D:Channel-stuffing manipulation would involve a different sequence from Fictitious sales entries: accelerated shipment can overstate current revenue when substantive return or acceptance terms contradict recognition. Unlike the rejected Channel-stuffing manipulation label, the evidence concerns Fictitious sales entries, since large new receivables lack customer confirmations or shipping support; reviewers should confirm selected receivables independently and match invoices to dispatch records.