CGSC study materials
CGSC study resources

CGSC practice questions

One question at a time. Build your CGSC understanding.

First 50 of 199 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Managing Sanctions Risk

Under a typical sanctions screening program, what does an 'alert' most directly represent?

  1. A potential match between a party and a sanctions list entry that requires review Correct answer.
  2. A confirmed sanctions violation that must be reported to the regulator
  3. A court order freezing a customer's assets
  4. A completed customer due diligence file

Explanation

Screening systems generate alerts when a name or attribute resembles a listed party; the alert is a candidate match pending human adjudication. It is not itself a violation or a legal order.

Question 2Managing Sanctions Risk

Which concept describes a sanctions program that prohibits dealings with specified persons rather than banning trade with an entire country?

  1. Comprehensive embargo
  2. Secondary sanctions
  3. Targeted (list-based) sanctions Correct answer.
  4. Sectoral licensing

Explanation

Targeted or list-based sanctions identify specific persons or entities with whom dealings are restricted. Comprehensive embargoes, by contrast, apply broadly to a country or territory.

Question 3Managing Sanctions Risk

What is the primary purpose of an ownership and control analysis in sanctions screening?

  1. To verify the customer's tax residency
  2. To determine whether a party is caught by sanctions through ownership or control by a listed person Correct answer.
  3. To calculate the customer's credit exposure
  4. To set the customer's risk rating for anti-money-laundering purposes

Explanation

Sanctions can apply to entities that are owned or controlled by designated persons even if the entity itself is not listed. Ownership and control analysis identifies these indirect exposures.

Question 4Managing Sanctions Risk

A customer's name matches a sanctions list entry, but the date of birth and nationality differ. What is the most appropriate next step?

  1. Ignore the alert because names alone never matter
  2. Immediately block the account permanently
  3. Report the customer to law enforcement as a confirmed match
  4. Escalate for adjudication to confirm or dismiss the potential match Correct answer.

Explanation

Matching requires corroborating identifiers; discrepancies suggest a false positive but the alert should be adjudicated by trained staff. Premature blocking or reporting without verification is inappropriate.

Question 5Managing Sanctions Risk

Which of the following best describes 'secondary sanctions' risk?

  1. The risk that a customer fails to pay a loan
  2. The risk that a bank is penalized for facilitating a transaction that a foreign authority considers sanctionable, even absent a domestic nexus Correct answer.
  3. The risk that a sanctions list is published late
  4. The risk of currency fluctuation on cross-border payments

Explanation

Secondary sanctions expose non-national parties to consequences for dealings with sanctioned targets, extending reach beyond the issuing jurisdiction's direct nexus. They are a compliance exposure, not a credit or market risk.

Question 6Managing Sanctions Risk

A bank identifies a payment involving a party that appears on a sanctions list. What is the most appropriate immediate action under a typical program?

  1. Process the payment and note it for the annual audit
  2. Delete the alert to avoid a backlog
  3. Hold or block the transaction pending review and escalate per policy Correct answer.
  4. Refund the sender and close the case

Explanation

Suspected sanctioned transactions should be stopped or held and escalated for investigation consistent with legal obligations. Processing or discarding the alert risks a violation.

Question 7Managing Sanctions Risk

Which element is generally required to establish that an entity is 'controlled' by a designated person for sanctions purposes?

  1. The entity uses the same auditor as the designated person
  2. The designated person exercises dominant influence over the entity's management or policies Correct answer.
  3. The entity shares a mailing address with the designated person
  4. The entity has a branch in the same city

Explanation

Control is typically assessed by whether a designated person can direct or dominate the entity's decisions, often through ownership thresholds, board control, or contractual influence. Shared addresses or service providers are weak indicators.

Question 8Managing Sanctions Risk

What is the role of a 'false positive' in sanctions screening?

  1. A transaction that is deliberately structured to evade sanctions
  2. A list that has been superseded by a newer version
  3. A match flagged by the system that, after review, does not involve a designated party Correct answer.
  4. A customer who refuses to provide identification

Explanation

A false positive is an alert that superficially resembles a listed party but is cleared on review because the underlying party is not designated. It is a normal byproduct of name-based screening.

Question 9Managing Sanctions Risk

Which practice best supports an effective sanctions list management process?

  1. Updating lists annually during the audit cycle
  2. Synchronizing list updates frequently and rescreening the customer base as required Correct answer.
  3. Relying on a single static list from one jurisdiction
  4. Screening only at onboarding and never again

Explanation

Sanctions lists change frequently, so timely updates and periodic or event-driven rescreening are essential. Stale or single-source lists create gaps.

Question 10Managing Sanctions Risk

A company wants to ship dual-use goods to a customer in a jurisdiction subject to sectoral sanctions. What is the most appropriate first step?

  1. Conduct a sanctions and export control assessment before shipment Correct answer.
  2. Ask the customer to confirm they are not sanctioned
  3. Proceed because dual-use goods are never restricted
  4. Ship the goods and document the customer's assurance

Explanation

Dual-use goods may be caught by both sanctions and export controls, so a pre-shipment assessment is required. Customer assurances alone do not satisfy the obligation.

Question 11Managing Sanctions Risk

What does a 'sanctions nexus' refer to in a transaction review?

  1. The credit rating of the counterparty
  2. The currency used to settle the payment
  3. The physical location of the bank's data center
  4. A connection between the transaction and a sanctioned jurisdiction, party, or activity Correct answer.

Explanation

A sanctions nexus is any link between a transaction and a sanctioned party, country, or prohibited activity that triggers compliance obligations. It is not a technical or credit concept.

Question 12Managing Sanctions Risk

Which of the following is a typical red flag for potential sanctions evasion?

  1. Payment made through a regulated bank with full documentation
  2. A transaction priced at market rate
  3. A customer providing complete beneficial ownership information
  4. Use of complex corporate structures with no clear business rationale Correct answer.

Explanation

Opaque or unnecessarily complex structures without commercial rationale are common indicators of attempts to obscure sanctioned parties. Transparency and documentation reduce risk.

Question 13Managing Sanctions Risk

When a bank decides to exit a customer relationship because of sanctions concerns, what documentation is most important?

  1. The customer's tax returns
  2. The bank's marketing plan
  3. The customer's marketing materials
  4. The risk assessment and rationale supporting the exit decision Correct answer.

Explanation

A documented risk assessment and rationale demonstrate that the exit was a reasoned compliance decision and support the audit trail. Unrelated documents do not establish the basis for the decision.

Question 14Managing Sanctions Risk

Which statement best characterizes the difference between sanctions and anti-money-laundering controls?

  1. AML applies only to individuals and sanctions only to companies
  2. Sanctions target prohibited parties and activities, while AML targets the proceeds of crime Correct answer.
  3. Sanctions and AML are identical and require no separate controls
  4. Sanctions apply only to cross-border transactions

Explanation

Sanctions controls focus on restricting dealings with designated parties or prohibited activities, whereas AML controls focus on detecting and preventing money laundering. They are related but distinct.

Question 15Managing Sanctions Risk

What is the purpose of a sanctions risk assessment at the institutional level?

  1. To determine employee salaries
  2. To calculate the bank's tax liability
  3. To set interest rates on loans
  4. To estimate the institution's exposure to sanctions risk across customers, products, and geographies Correct answer.

Explanation

An institutional sanctions risk assessment identifies and measures exposure across the business to inform controls and resource allocation. It is not a financial or HR calculation.

Question 16Managing Sanctions Risk

A customer is 50 percent owned by a designated person. Under a common ownership threshold, how should this be treated?

  1. As exempt because the customer is a separate legal entity
  2. As unrelated because the stake is not a majority
  3. As caught by sanctions because ownership at or above the threshold triggers restrictions Correct answer.
  4. As low risk because ownership is indirect

Explanation

Many regimes treat 50 percent or greater ownership by a designated person as triggering restrictions on the entity, even if the entity itself is unlisted. Separate legal personality does not defeat the ownership test.

Question 17Managing Sanctions Risk

Which of the following best describes 'sectoral sanctions'?

  1. A total ban on all trade with a country
  2. A prohibition on dealing with named individuals only
  3. A licensing regime for charitable donations
  4. Restrictions targeting specific industries or sectors of a country's economy Correct answer.

Explanation

Sectoral sanctions restrict dealings in particular industries, such as energy or finance, rather than imposing a full country embargo. They are narrower than comprehensive sanctions.

Question 18Managing Sanctions Risk

What should a firm do if it discovers, during periodic review, that a long-standing customer has been newly designated?

  1. Assess the relationship, freeze or restrict dealings as required, and escalate Correct answer.
  2. Continue all services and monitor informally
  3. Increase the customer's credit limit
  4. Take no action because the customer was onboarded before designation

Explanation

New designations apply to existing relationships; the firm must assess exposure and take required restrictive action, including escalation. Prior onboarding does not grandfather the relationship.

Question 19Managing Sanctions Risk

Which data quality issue most directly undermines sanctions screening effectiveness?

  1. Incomplete or inconsistent customer name records Correct answer.
  2. High employee turnover
  3. Excessive transaction volumes
  4. Slow loan approvals

Explanation

Screening depends on accurate identifiers; incomplete or inconsistent names and attributes cause missed matches. Other factors affect operations but not screening precision directly.

Question 20Managing Sanctions Risk

What is a 'blocked transaction' under sanctions rules?

  1. A payment frozen because it involves a sanctioned party or prohibited activity Correct answer.
  2. A payment delayed due to a technical error
  3. A payment rejected for insufficient funds
  4. A payment returned because of an incorrect address

Explanation

Blocking refers to freezing funds or transactions that fall within sanctions prohibitions, typically requiring reporting to the relevant authority. Technical or payment errors are not sanctions blocking.

Question 21Managing Sanctions Risk

A firm's screening system produces a very high volume of alerts, most of which are false positives. What is the most appropriate response?

  1. Increase the number of lists screened without changes
  2. Disable screening to reduce workload
  3. Automatically close all alerts without review
  4. Tune screening rules and thresholds while maintaining coverage and documenting the rationale Correct answer.

Explanation

Alert tuning can reduce noise, but it must preserve coverage and be documented to demonstrate a risk-based approach. Disabling or blindly closing alerts creates unacceptable risk.

Question 22Managing Sanctions Risk

Which factor is most relevant when deciding whether a transaction has a sanctions nexus through a sanctioned country?

  1. The bank's branch opening hours
  2. The country of origin, destination, or intermediary involved in the transaction Correct answer.
  3. The font used on the invoice
  4. The customer's preferred payment method

Explanation

Sanctions nexus through a country is assessed by the jurisdictions involved in the flow of goods or funds, including intermediaries. Presentation and service preferences are irrelevant.

Question 23Managing Sanctions Risk

What is the significance of a 'look-through' approach in sanctions compliance?

  1. Reviewing only the front-facing customer name
  2. Examining the underlying ownership and parties behind an entity or transaction Correct answer.
  3. Relying on the customer's self-declaration
  4. Ignoring intermediaries in a payment chain

Explanation

A look-through approach examines the underlying owners and parties to detect concealed sanctioned interests. Surface-level review can miss indirect exposure.

Question 24Managing Sanctions Risk

A firm receives a request from a correspondent bank for information about a payment that may involve a sanctioned party. What is the best practice?

  1. Provide accurate, timely information and cooperate with the inquiry Correct answer.
  2. Provide misleading information to close the inquiry
  3. Destroy the payment records
  4. Refuse to respond to protect the customer's privacy

Explanation

Cooperation with correspondent bank inquiries supports the integrity of the payment chain and is expected under compliance norms. Misleading or obstructive responses create legal and reputational risk.

Question 25Managing Sanctions Risk

Which of the following best describes the role of senior management in a sanctions compliance program?

  1. Setting sanctions policy without legal input
  2. Personally screening every transaction
  3. Delegating all responsibility to junior staff without oversight
  4. Approving and overseeing the program and fostering a compliance culture Correct answer.

Explanation

Senior management is responsible for approving, resourcing, and overseeing the sanctions program and promoting a compliance culture. Operational screening is delegated to trained staff.

Question 26Managing Sanctions Risk

Which of the following is the primary purpose of sanctions screening at onboarding?

  1. To detect whether a prospective customer or beneficial owner matches a designated party Correct answer.
  2. To calculate the customer's credit score
  3. To set the customer's transaction limits
  4. To determine the customer's tax residency status

Explanation

Sanctions screening compares customer and beneficial ownership data against designated-party lists before the relationship begins. Its purpose is to prevent prohibited dealings, not to assess creditworthiness or tax status.

Question 27Managing Sanctions Risk

What is the primary function of an asset freeze under a sanctions regime?

  1. To prevent designated persons from dealing with their funds while ownership is retained Correct answer.
  2. To convert frozen funds into government bonds
  3. To permanently confiscate funds for government use
  4. To reimburse victims of the designated person's conduct

Explanation

An asset freeze immobilizes funds so that no dealing occurs, but the designated person retains ownership of the assets. It is not confiscation and does not transfer title.

Question 28Managing Sanctions Risk

Which of the following best describes a 'designated person' for sanctions purposes?

  1. Any customer flagged by an automated monitoring system
  2. Any politically exposed person identified by a bank
  3. A shareholder holding more than ten percent of a company
  4. A person or entity named on an official sanctions list Correct answer.

Explanation

Designation occurs through official listing by a sanctions authority, which imposes the legal restrictions. Being a PEP or a system alert does not by itself create a designated person.

Question 29Managing Sanctions Risk

What is the purpose of maintaining a record of sanctions screening alerts and their dispositions?

  1. To reduce the scope of the customer due diligence file
  2. To replace the need for periodic rescreening
  3. To demonstrate that alerts were reviewed and resolved consistently Correct answer.
  4. To increase the number of alerts generated

Explanation

Alert dispositions create an audit trail showing that each match was assessed and resolved on a documented basis. This supports accountability and supervisory review.

Question 30Managing Sanctions Risk

Which of the following is a recognized limitation of name-screening tools?

  1. They only screen entities and never individuals
  2. They cannot process non-Latin characters
  3. They automatically confirm identity without analyst review
  4. They rely on matching logic that may miss transliteration variants Correct answer.

Explanation

Screening tools depend on matching algorithms and name data, so transliteration and spelling variants can cause missed matches. Human review and tuning help mitigate this.

Question 31Managing Sanctions Risk

What does 'rescreening' mean in a sanctions compliance program?

  1. Re-entering a customer's data to correct typographical errors
  2. Rechecking existing customers against updated lists on a periodic or event-driven basis Correct answer.
  3. Re-running a credit assessment after a missed payment
  4. Re-verifying a customer's address at account opening

Explanation

Rescreening re-evaluates the existing customer base against sanctions lists that change over time. It ensures newly designated parties are identified after onboarding.

Question 32Managing Sanctions Risk

Which of the following best describes a 'sanctions program' at a financial institution?

  1. A marketing initiative targeting high-net-worth clients
  2. A software license for the bank's core banking platform
  3. A schedule of fees charged for compliance services
  4. The policies, procedures, systems, and controls used to comply with sanctions obligations Correct answer.

Explanation

A sanctions program is the combination of governance, policies, screening systems, training, and testing that enables compliance with sanctions laws. It is a control framework, not a commercial offering.

Question 33Managing Sanctions Risk

What is the main reason sanctions lists are updated frequently?

  1. To reduce the workload of compliance analysts
  2. To standardize customer onboarding forms
  3. To reflect changes in designations and legal requirements Correct answer.
  4. To keep software vendors profitable

Explanation

Sanctions authorities add, amend, and remove designations, and legal requirements evolve, so lists must be refreshed to remain accurate. Screening against stale lists risks prohibited dealings.

Question 34Managing Sanctions Risk

A firm's screening tool flags a payment because the remitter's name closely matches a designated individual, but the date of birth and nationality differ. What is the most appropriate next step?

  1. Escalate to a sanctions analyst to assess the match against available identifiers Correct answer.
  2. Block the payment permanently and close the account
  3. Release the payment immediately without review
  4. Delete the alert from the system to avoid duplication

Explanation

A potential match must be investigated by comparing additional identifiers such as date of birth and nationality. Only after review can the firm determine whether it is a true or false match.

Question 35Managing Sanctions Risk

A customer asks the bank to process a payment to a party located in a comprehensively sanctioned jurisdiction, arguing the underlying goods are humanitarian. What should the bank do first?

  1. Route the payment through a third country to avoid screening
  2. Check whether a specific license or exemption applies to the transaction Correct answer.
  3. Process the payment because humanitarian goods are always exempt
  4. Decline permanently without any assessment

Explanation

Comprehensive sanctions often provide narrow exemptions or licensing pathways, such as for certain humanitarian activity. The firm must verify whether an authorization applies before acting.

Question 36Managing Sanctions Risk

A firm discovers that a counterparty on an existing contract was added to a sanctions list last week. What is the most appropriate immediate action?

  1. Ignore the listing because the contract predates designation
  2. Freeze relevant assets and escalate to determine permitted activity Correct answer.
  3. Continue performance and review the contract at annual renewal
  4. Terminate all group-wide operations with the counterparty's country

Explanation

Once a party is designated, the firm must freeze relevant assets and assess what, if anything, remains permitted. Escalation ensures the response is legally sound.

Question 37Managing Sanctions Risk

A compliance officer is deciding whether a transaction has a sanctions nexus through a sanctioned country. Which factor is most relevant?

  1. The currency in which the payment is denominated
  2. The customer's length of relationship with the bank
  3. The size of the bank's compliance team
  4. Whether any party, goods origin, destination, or intermediary touches the sanctioned jurisdiction Correct answer.

Explanation

A sanctions nexus is established by the involvement of sanctioned parties, countries, or goods in the transaction chain. Currency alone does not create the nexus.

Question 38Managing Sanctions Risk

A shipping company learns that a vessel's declared destination changed mid-voyage to a sanctioned port. What is the most appropriate response?

  1. Complete delivery and disclose the change afterward
  2. Re-invoice the customer under a different name
  3. Hold the shipment and investigate the diversion before proceeding Correct answer.
  4. Ignore the change because the original documentation was accurate

Explanation

A mid-voyage change to a sanctioned destination is a red flag that requires the firm to pause and investigate. Proceeding without review risks a prohibited shipment.

Question 39Managing Sanctions Risk

A bank's ownership analysis shows a customer is 40 percent owned by a designated entity and 60 percent by unrelated investors. Under a 50 percent ownership threshold, how should the bank treat the customer?

  1. As not blocked by ownership alone, but subject to enhanced scrutiny Correct answer.
  2. As automatically blocked because any designated ownership triggers a freeze
  3. As fully exempt because ownership is below 50 percent
  4. As requiring immediate account closure without review

Explanation

Under a 50 percent rule, ownership below the threshold does not by itself cause blocking. However, the designated minority interest is a risk factor warranting enhanced scrutiny.

Question 40Managing Sanctions Risk

What is the most appropriate way to handle a sanctions alert that is confirmed as a false positive?

  1. Leave it open indefinitely for future reference
  2. Escalate it to law enforcement as a suspicious transaction
  3. Delete the record to keep the system clean
  4. Document the rationale and close the alert with appropriate approval Correct answer.

Explanation

A confirmed false positive should be documented with the reasoning and closed through an approved workflow. This preserves the audit trail and supports consistent decision-making.

Question 41Managing Sanctions Risk

Which control most directly helps a firm detect attempts to evade sanctions through structuring of payments?

  1. Increasing the bank's marketing budget
  2. Monitoring for patterns of transactions that individually fall below reporting thresholds Correct answer.
  3. Reducing the number of staff in the compliance unit
  4. Shortening the customer onboarding questionnaire

Explanation

Structuring often involves splitting payments to stay below thresholds that would attract scrutiny. Pattern-based monitoring helps identify this behavior.

Question 42Managing Sanctions Risk

A firm uses a fuzzy-matching screening tool. What is the main trade-off when lowering the match threshold?

  1. No change in alert volume but faster processing
  2. More alerts and higher false-positive volume but fewer missed matches Correct answer.
  3. Elimination of the need for analyst review
  4. Fewer alerts but a higher risk of missed matches

Explanation

Lowering the threshold makes the tool more sensitive, producing more alerts, including false positives, while reducing the chance of missing a true match. This is a sensitivity trade-off.

Question 43Managing Sanctions Risk

Why is it important to screen beneficial owners and not only the direct customer?

  1. Direct customers are never subject to sanctions
  2. Beneficial owners are always the largest shareholders
  3. Beneficial ownership data is easier to obtain than customer data
  4. Sanctions obligations can attach to parties that ultimately own or control the customer Correct answer.

Explanation

Sanctions can apply where a designated party owns or controls an entity, even if the direct customer is not itself listed. Screening beneficial owners helps detect this exposure.

Question 44Managing Sanctions Risk

A firm's sanctions policy requires escalation of potential matches to a committee. Which outcome best demonstrates that this control is operating effectively?

  1. Matches are escalated only when the analyst has spare time
  2. Matches are escalated and documented decisions are made within defined timeframes Correct answer.
  3. Matches are resolved by the same person who generated the alert without oversight
  4. Matches are closed automatically by the system

Explanation

Effective escalation requires timely decisions that are documented by the appropriate body. This shows the control is functioning as designed.

Question 45Managing Sanctions Risk

What is the primary purpose of sanctions training for front-office staff?

  1. To transfer legal liability from the firm to individual employees
  2. To enable staff to approve transactions without compliance review
  3. To help staff recognize red flags and know when to escalate Correct answer.
  4. To replace the need for automated screening

Explanation

Training builds awareness so staff can identify potential sanctions issues and escalate appropriately. It complements rather than replaces screening and compliance oversight.

Question 46Managing Sanctions Risk

A correspondent bank asks a respondent bank to confirm the sanctions status of a payment's originator. What is the most appropriate response?

  1. Provide information only after the payment has been processed
  2. Provide false information to expedite the payment
  3. Provide accurate, timely information to support the correspondent's sanctions review Correct answer.
  4. Refuse to provide any information to protect customer confidentiality

Explanation

Correspondent banks rely on accurate information from respondent banks to complete their sanctions screening. Cooperation supports the integrity of the payment chain.

Question 47Managing Sanctions Risk

A bank's sanctions risk assessment identifies high exposure to a jurisdiction with frequent list changes. Which action most directly addresses this finding?

  1. Eliminating the risk assessment process
  2. Increasing the frequency of list updates and rescreening for that exposure Correct answer.
  3. Reducing the number of customers screened
  4. Extending the rescreening cycle to annual intervals

Explanation

Higher exposure to frequently changing lists calls for more frequent list updates and rescreening. This directly mitigates the identified risk.

Question 48Managing Sanctions Risk

A designated individual transfers ownership of a company to a nominee to avoid screening. Which concept best describes this conduct?

  1. A false positive in the screening system
  2. Sanctions evasion through concealment of ownership Correct answer.
  3. Legitimate corporate restructuring
  4. A routine change of beneficial ownership

Explanation

Transferring ownership to a nominee to avoid detection is a form of sanctions evasion because it conceals the designated party's interest. Firms should look through such arrangements.

Question 49Managing Sanctions Risk

A firm applies a 50 percent ownership rule but its customer is owned 30 percent by one designated party and 25 percent by another designated party acting in concert. How should the firm assess the situation?

  1. Treat ownership as 30 percent because only the largest holding counts
  2. Aggregate the designated interests and treat the customer as majority-owned by designated parties Correct answer.
  3. Ignore both holdings because neither reaches 50 percent individually
  4. Treat the customer as exempt because the owners are different entities

Explanation

Where designated parties act in concert or their interests are aggregated, combined ownership can meet or exceed the threshold. The firm should aggregate the interests rather than assess each in isolation.

Question 50Managing Sanctions Risk

A firm's transaction monitoring flags a payment routed through multiple intermediaries in jurisdictions with weak sanctions enforcement. What is the most appropriate analytical approach?

  1. Assume the payment is low risk because the amount is small
  2. Conclude that the payment is lawful because each intermediary is separately licensed
  3. Assess the full payment chain for concealed sanctioned parties or destinations Correct answer.
  4. Rely solely on the originator's self-declared purpose

Explanation

Layering through intermediaries can conceal a sanctioned party or destination, so the entire chain must be analyzed. Each link should be assessed for sanctions exposure.