Question 830
Two separate review files raise different issues. File A: An unregistered intermediary repeatedly solicits securities investors and receives transaction-based commissions where registration is legally required. File B: A trading desk employee buys a security personally just before executing a large known customer buy order. Which pairing accurately classifies both files?
- File A: Unregistered brokerage solicitation; File B: Broker front-running client order.
- File A: Unregistered brokerage solicitation; File B: False sustainability disclosures.
- File A: Broker front-running client order; File B: Unregistered brokerage solicitation.
- File A: Material nonpublic information trading; File B: Broker front-running client order.
Explanation
Correct Answer
A:File A is Unregistered brokerage solicitation because securities-related compensation and solicitation can trigger registration obligations under relevant laws, while File B is Broker front-running client order because misusing confidential customer-order knowledge for personal gain creates market-abuse and conflict risks. The evidence chains differ: for File A, reviewers should compare business activities and compensation against applicable regulator registrations; for File B, they should join employee transaction records with confidential order timestamps and market prices.
Incorrect Answers
B:File B is misidentified as False sustainability disclosures instead of Broker front-running client order. With the proposed pairing Unregistered brokerage solicitation / False sustainability disclosures, the distinction is substantive: File A shows that commission records show ongoing securities placement activity without appropriate registration evidence, whereas File B shows that employee trades consistently precede client orders and benefit from resulting price movements. For these Unregistered brokerage solicitation and Broker front-running client order files, choosing the pair Unregistered brokerage solicitation / False sustainability disclosures would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Broker front-running client order instead of Unregistered brokerage solicitation; File B is misidentified as Unregistered brokerage solicitation instead of Broker front-running client order. With the proposed pairing Broker front-running client order / Unregistered brokerage solicitation, the distinction is substantive: File A shows that commission records show ongoing securities placement activity without appropriate registration evidence, whereas File B shows that employee trades consistently precede client orders and benefit from resulting price movements. For these Unregistered brokerage solicitation and Broker front-running client order files, choosing the pair Broker front-running client order / Unregistered brokerage solicitation would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Material nonpublic information trading instead of Unregistered brokerage solicitation. With the proposed pairing Material nonpublic information trading / Broker front-running client order, the distinction is substantive: File A shows that commission records show ongoing securities placement activity without appropriate registration evidence, whereas File B shows that employee trades consistently precede client orders and benefit from resulting price movements. For these Unregistered brokerage solicitation and Broker front-running client order files, choosing the pair Material nonpublic information trading / Broker front-running client order would misdirect the review away from at least one of these mechanisms.
Question 831
An analyst is selecting warning signs for manipulated commission sales. Which recorded pattern should receive focused attention?
- Clock records and access logs conflict with approved overtime hours.
- Commission payments coincide with rapidly canceled or uncollected sales.
- Employee master records have no HR file or manager confirmation but receive pay.
- Bank-detail changes immediately precede pay to unfamiliar accounts.
Explanation
Correct Answer
B:This observation is a pertinent indicator of Manipulated commission sales because compensation is extracted through false performance metrics rather than fake employees. The practical corroborating procedure is to reconcile commission calculations with final customer payments and returns; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Falsified overtime payroll, where false hours increase payments to real employees without corresponding services, rather than the particular mechanism in Manipulated commission sales. Unlike the clue for Falsified overtime payroll, the more directly related indicator for Manipulated commission sales is this: Commission payments coincide with rapidly canceled or uncollected sales.
C:The proposed observation fits Ghost payroll employee, where a fabricated employee record turns ordinary payroll into an unauthorized disbursement, rather than the particular mechanism in Manipulated commission sales. Unlike the clue for Ghost payroll employee, the more directly related indicator for Manipulated commission sales is this: Commission payments coincide with rapidly canceled or uncollected sales.
D:The proposed observation fits Payroll direct-deposit diversion, where a genuine employee's wages are redirected by altering settlement data, rather than the particular mechanism in Manipulated commission sales. Unlike the clue for Payroll direct-deposit diversion, the more directly related indicator for Manipulated commission sales is this: Commission payments coincide with rapidly canceled or uncollected sales.
Question 832
The case file describes the following: An investment promoter uses contributions from new investors to pay apparently consistent returns to earlier participants. Which classification best explains the events?
- Advance-fee lottery fraud
- Recruitment-driven pyramid
- Ponzi payout financing
- Government-agent impersonation scam
Explanation
Correct Answer
C:Ponzi payout financing fits the facts because a Ponzi structure pays old investors with new funds while misrepresenting actual returns; the distinguishing observation is that redemptions correlate with fresh investor money instead of investment profits. To test this interpretation, a reviewer should trace cash sources for investor payouts and independently verify held assets.
Incorrect Answers
A:Advance-fee lottery fraud would involve a different sequence from Ponzi payout financing: the promise of future value is used to extract an immediate fee without a real award. Unlike the rejected Advance-fee lottery fraud label, the evidence concerns Ponzi payout financing, since redemptions correlate with fresh investor money instead of investment profits; reviewers should trace cash sources for investor payouts and independently verify held assets.
B:Recruitment-driven pyramid would involve a different sequence from Ponzi payout financing: recruitment dependence distinguishes a pyramid structure from ordinary retail distribution. Unlike the rejected Recruitment-driven pyramid label, the evidence concerns Ponzi payout financing, since redemptions correlate with fresh investor money instead of investment profits; reviewers should trace cash sources for investor payouts and independently verify held assets.
D:Government-agent impersonation scam would involve a different sequence from Ponzi payout financing: authority impersonation exploits fear and urgency to make victims send funds. Unlike the rejected Government-agent impersonation scam label, the evidence concerns Ponzi payout financing, since redemptions correlate with fresh investor money instead of investment profits; reviewers should trace cash sources for investor payouts and independently verify held assets.
Question 833
For a review of check-kiting float abuse, which evidence-based warning sign is the most specific?
- Transactions have risky delivery changes and failed identity or device checks.
- Unrelated card fraud clusters around customers who used the same terminal.
- Bank-cleared items have serials absent from the company's issued-check register.
- Circular deposits and withdrawals depend on unsettled checks rather than real incoming funds.
- Compromised-card activity clusters at a terminal with an unexpected insert in the reader slot.
- Cleared images show altered writing inconsistent with the drawer's retained check copy.
Explanation
Correct Answer
D:This observation is a pertinent indicator of Check-kiting float abuse because kiting exploits settlement timing to inflate apparent funds without a genuine source of money. The practical corroborating procedure is to reconstruct check presentment and availability timelines across related accounts; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Card-not-present shopping fraud, where remote payment misuse exploits card credentials without requiring face-to-face card presentation, rather than the particular mechanism in Check-kiting float abuse. Unlike the clue for Card-not-present shopping fraud, the more directly related indicator for Check-kiting float abuse is this: Circular deposits and withdrawals depend on unsettled checks rather than real incoming funds.
B:The proposed observation fits Magnetic-stripe card skimming, where skimmers capture card data at a physical payment interface for later unauthorized use, rather than the particular mechanism in Check-kiting float abuse. Unlike the clue for Magnetic-stripe card skimming, the more directly related indicator for Check-kiting float abuse is this: Circular deposits and withdrawals depend on unsettled checks rather than real incoming funds.
C:The proposed observation fits Counterfeit check creation, where counterfeit checks are fabricated payment instruments rather than alterations of legitimate originals, rather than the particular mechanism in Check-kiting float abuse. Unlike the clue for Counterfeit check creation, the more directly related indicator for Check-kiting float abuse is this: Circular deposits and withdrawals depend on unsettled checks rather than real incoming funds.
E:The proposed observation fits Chip-card shimming, where a shim targets information in the chip-card interface; chip transaction data alone does not necessarily permit cloning a valid chip, rather than the particular mechanism in Check-kiting float abuse. Unlike the clue for Chip-card shimming, the more directly related indicator for Check-kiting float abuse is this: Circular deposits and withdrawals depend on unsettled checks rather than real incoming funds.
F:The proposed observation fits Check-washing alteration, where check washing modifies a valid instrument to redirect its value, rather than the particular mechanism in Check-kiting float abuse. Unlike the clue for Check-washing alteration, the more directly related indicator for Check-kiting float abuse is this: Circular deposits and withdrawals depend on unsettled checks rather than real incoming funds.
Question 834
The review team observes the following: Clock records and access logs conflict with approved overtime hours. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?
- Diagnostic: Compare payroll overtime with access, shift and work-order evidence; safeguard: Require strong authentication and separate approval for bank-detail updates.
- Diagnostic: Compare payroll overtime with access, shift and work-order evidence; safeguard: Require independent time approval backed by verified work records.
- Diagnostic: Reconcile commission calculations with final customer payments and returns; safeguard: Require independent time approval backed by verified work records.
- Diagnostic: Inspect change logs and independently confirm altered deposit instructions with workers; safeguard: Segregate employee onboarding authorization from payroll master maintenance.
Explanation
Correct Answer
B:The test addresses Falsified overtime payroll by targeting this observation: Clock records and access logs conflict with approved overtime hours. The accompanying safeguard—require independent time approval backed by verified work records—counters the same opportunity, so both checking and prevention concern one cause.
Incorrect Answers
A:The diagnostic correctly examines Falsified overtime payroll by having reviewers compare payroll overtime with access, shift and work-order evidence, but the safeguard is for Payroll direct-deposit diversion. That prevention step responds to a different mechanism: A genuine employee's wages are redirected by altering settlement data.
C:The proposed safeguard is relevant to Falsified overtime payroll, but the diagnostic tests Manipulated commission sales rather than the identified anomaly. That test is aimed at records involving commission payments coincide with rapidly canceled or uncollected sales; the specified case instead calls for reviewers to compare payroll overtime with access, shift and work-order evidence.
D:The evidence test relates to Payroll direct-deposit diversion, whereas the proposed safeguard protects against Ghost payroll employee; neither directly resolves Falsified overtime payroll. Unlike the Payroll direct-deposit diversion test and Ghost payroll employee safeguard, the investigation of Falsified overtime payroll requires reviewers to compare payroll overtime with access, shift and work-order evidence, followed by assessment of the matching control point.
Question 835
The case file describes the following: A claimant seeks reimbursement for the same damaged property from multiple policies without disclosing prior settlements. Which classification best explains the events?
- Concealed preexisting condition
- Duplicate casualty claims
- Staged vehicle collision claim
- Fictitious beneficiary change
Explanation
Correct Answer
B:Duplicate casualty claims fits the facts because multiple recoveries for one loss can exceed the legitimate indemnifiable damage; the distinguishing observation is that identical invoices and loss photos recur in separate carriers' claim files. To test this interpretation, a reviewer should cross-match claim dates, asset identifiers and prior paid settlements where lawful.
Incorrect Answers
A:Concealed preexisting condition would involve a different sequence from Duplicate casualty claims: material misrepresentation at policy inception differs from fabricating a later insured loss. Unlike the rejected Concealed preexisting condition label, the evidence concerns Duplicate casualty claims, since identical invoices and loss photos recur in separate carriers' claim files; reviewers should cross-match claim dates, asset identifiers and prior paid settlements where lawful.
C:Staged vehicle collision claim would involve a different sequence from Duplicate casualty claims: a staged loss creates the insured event rather than merely exaggerating a genuine accident. Unlike the rejected Staged vehicle collision claim label, the evidence concerns Duplicate casualty claims, since identical invoices and loss photos recur in separate carriers' claim files; reviewers should cross-match claim dates, asset identifiers and prior paid settlements where lawful.
D:Fictitious beneficiary change would involve a different sequence from Duplicate casualty claims: the scheme tampers with policy entitlement rather than misrepresenting the insured event. Unlike the rejected Fictitious beneficiary change label, the evidence concerns Duplicate casualty claims, since identical invoices and loss photos recur in separate carriers' claim files; reviewers should cross-match claim dates, asset identifiers and prior paid settlements where lawful.
Question 836
The case file describes the following: A clerk submits the same genuine invoice twice using slightly altered identifiers and captures one payment. Which classification best explains the events?
- Duplicate vendor-invoice payment
- Personal purchases billed as business
- Phantom consulting fees
- Pass-through purchasing scheme
- Split procurement invoices
Explanation
Correct Answer
A:Duplicate vendor-invoice payment fits the facts because the scheme exploits duplicate settlement of one legitimate obligation; the distinguishing observation is that similar amounts, dates and vendors appear under multiple invoice references. To test this interpretation, a reviewer should run normalized duplicate-payment checks across invoice number, amount and payee.
Incorrect Answers
B:Personal purchases billed as business would involve a different sequence from Duplicate vendor-invoice payment: the organization pays a real supplier for goods acquired for private use. Unlike the rejected Personal purchases billed as business label, the evidence concerns Duplicate vendor-invoice payment, since similar amounts, dates and vendors appear under multiple invoice references; reviewers should run normalized duplicate-payment checks across invoice number, amount and payee.
C:Phantom consulting fees would involve a different sequence from Duplicate vendor-invoice payment: fabricated intangible services can be billed without the physical receiving evidence used for goods. Unlike the rejected Phantom consulting fees label, the evidence concerns Duplicate vendor-invoice payment, since similar amounts, dates and vendors appear under multiple invoice references; reviewers should run normalized duplicate-payment checks across invoice number, amount and payee.
D:Pass-through purchasing scheme would involve a different sequence from Duplicate vendor-invoice payment: the transaction may deliver real goods yet divert value through an unnecessary marked-up middleman. Unlike the rejected Pass-through purchasing scheme label, the evidence concerns Duplicate vendor-invoice payment, since similar amounts, dates and vendors appear under multiple invoice references; reviewers should run normalized duplicate-payment checks across invoice number, amount and payee.
E:Split procurement invoices would involve a different sequence from Duplicate vendor-invoice payment: splitting evades approval controls that would apply to the whole purchase. Unlike the rejected Split procurement invoices label, the evidence concerns Duplicate vendor-invoice payment, since similar amounts, dates and vendors appear under multiple invoice references; reviewers should run normalized duplicate-payment checks across invoice number, amount and payee.
Question 837
The risk team has identified the following mortgage straw-buyer scheme exposure: A nominal applicant conceals the real party controlling the property and borrowing transaction. Which proposed prevention step is most effective?
- Perform beneficial-borrower due diligence and verify source of down payment.
- Use independent appraisal selection and challenge unsupported valuation exceptions.
- Require independent income validation before underwriting approval.
- Verify occupancy representations and review high-risk investment-property indicators.
Explanation
Correct Answer
A:The control directly addresses the failure point in Mortgage straw-buyer scheme, since a nominal applicant conceals the real party controlling the property and borrowing transaction. A subsequent independent review could trace down payments and property-control arrangements to the actual beneficiary to identify exceptions that bypassed the safeguard.
Incorrect Answers
B:This safeguard is directed primarily at Inflated real estate appraisal rather than Mortgage straw-buyer scheme, because artificial collateral values lead lenders to advance more credit than the asset justifies. Unlike the control for Inflated real estate appraisal, the more direct design for Mortgage straw-buyer scheme is to perform beneficial-borrower due diligence and verify source of down payment; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Falsified borrower income rather than Mortgage straw-buyer scheme, because borrower misrepresentation distorts credit assessment even before any default. Unlike the control for Falsified borrower income, the more direct design for Mortgage straw-buyer scheme is to perform beneficial-borrower due diligence and verify source of down payment; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Occupancy-misrepresented mortgage rather than Mortgage straw-buyer scheme, because misstated intended use can improperly obtain lending terms reserved for a primary residence. Unlike the control for Occupancy-misrepresented mortgage, the more direct design for Mortgage straw-buyer scheme is to perform beneficial-borrower due diligence and verify source of down payment; a different safeguard cannot substitute for it.
Question 838
Control designers are focusing on the mechanism behind manipulated commission sales: Compensation is extracted through false performance metrics rather than fake employees. Which measure best limits that opportunity?
- Segregate employee onboarding authorization from payroll master maintenance.
- Require independent time approval backed by verified work records.
- Require strong authentication and separate approval for bank-detail updates.
- Base commission eligibility on verified, sustained sale criteria.
Explanation
Correct Answer
D:The control directly addresses the failure point in Manipulated commission sales, since compensation is extracted through false performance metrics rather than fake employees. A subsequent independent review could reconcile commission calculations with final customer payments and returns to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Ghost payroll employee rather than Manipulated commission sales, because a fabricated employee record turns ordinary payroll into an unauthorized disbursement. Unlike the control for Ghost payroll employee, the more direct design for Manipulated commission sales is to base commission eligibility on verified, sustained sale criteria; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Falsified overtime payroll rather than Manipulated commission sales, because false hours increase payments to real employees without corresponding services. Unlike the control for Falsified overtime payroll, the more direct design for Manipulated commission sales is to base commission eligibility on verified, sustained sale criteria; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Payroll direct-deposit diversion rather than Manipulated commission sales, because a genuine employee's wages are redirected by altering settlement data. Unlike the control for Payroll direct-deposit diversion, the more direct design for Manipulated commission sales is to base commission eligibility on verified, sustained sale criteria; a different safeguard cannot substitute for it.
Question 839
The case file describes the following: A distressed entity wants to continue trading while restructuring debts instead of selling all assets to wind up. Which classification best explains the events?
- Preferential creditor payment review
- Liquidation versus reorganization
- Trustee and receiver accountability
- False insolvency schedules
Explanation
Correct Answer
B:Liquidation versus reorganization fits the facts because reorganization aims to preserve or restructure the enterprise; liquidation ordinarily realizes assets for distribution; the distinguishing observation is that a credible operating plan exists and management proposes a going-concern recovery. To test this interpretation, a reviewer should compare the proposed plan with liquidity forecasts and creditor treatment.
Incorrect Answers
A:Preferential creditor payment review would involve a different sequence from Liquidation versus reorganization: preference rules can permit recovery of certain pre-filing payments without proving a fictitious invoice or ordinary theft. Unlike the rejected Preferential creditor payment review label, the evidence concerns Liquidation versus reorganization, since a credible operating plan exists and management proposes a going-concern recovery; reviewers should compare the proposed plan with liquidity forecasts and creditor treatment.
C:Trustee and receiver accountability would involve a different sequence from Liquidation versus reorganization: a trustee or receiver acts within a defined legal appointment to administer assets, not as an unrestricted owner. Unlike the rejected Trustee and receiver accountability label, the evidence concerns Liquidation versus reorganization, since a credible operating plan exists and management proposes a going-concern recovery; reviewers should compare the proposed plan with liquidity forecasts and creditor treatment.
D:False insolvency schedules would involve a different sequence from Liquidation versus reorganization: false asset and debt statements distort the administration of the insolvency estate. Unlike the rejected False insolvency schedules label, the evidence concerns Liquidation versus reorganization, since a credible operating plan exists and management proposes a going-concern recovery; reviewers should compare the proposed plan with liquidity forecasts and creditor treatment.
Question 840
An exception review involving improper job-for-favor arrangement identifies the following: The appointment follows requests to change the supplier ranking. Which evidence comparison most directly evaluates the facts?
- Review contracts, service evidence and beneficial recipients of advisory fees.
- Compare access history to restricted procurement files with bidder drafts and benefits.
- Analyze repeated bid participants, price spreads and shared document metadata.
- Compare payments and customs records with government fee schedules.
- Compare hiring decisions, supplier influence and communications about procurement scoring.
Explanation
Correct Answer
E:For the Improper job-for-favor arrangement concern, the procedure tests source evidence behind this observation: The appointment follows requests to change the supplier ranking. This matters because noncash personal advantages can function as bribes when tied to official discretion; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
A:This comparison primarily addresses Sham consulting bribe, in which a fake service agreement can launder a corrupt payment as a commercial expense; because the present question instead concerns Improper job-for-favor arrangement, reviewers should compare hiring decisions, supplier influence and communications about procurement scoring rather than apply a check designed for Sham consulting bribe.
B:This comparison primarily addresses Conflict through confidential specifications, in which disclosure of privileged tender information trades an entrusted advantage for private benefit; because the present question instead concerns Improper job-for-favor arrangement, reviewers should compare hiring decisions, supplier influence and communications about procurement scoring rather than apply a check designed for Conflict through confidential specifications.
C:This comparison primarily addresses Bid-sharing cartel, in which bid rotation is collusion among bidders that undermines competitive award outcomes; because the present question instead concerns Improper job-for-favor arrangement, reviewers should compare hiring decisions, supplier influence and communications about procurement scoring rather than apply a check designed for Bid-sharing cartel.
D:This comparison primarily addresses Unapproved facilitation payment, in which a privately directed payment to influence routine official action can be corrupt despite its small amount; because the present question instead concerns Improper job-for-favor arrangement, reviewers should compare hiring decisions, supplier influence and communications about procurement scoring rather than apply a check designed for Unapproved facilitation payment.