I85PREP
⌘ K
CFCS study materials
CFCS study resources

CFCS (Other exams) practice questions

One question at a time. Build your CFCS understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Anti-Money Laundering (AML)

Under the Financial Action Task Force (FATF) Recommendations, which activity is the primary purpose of a country's financial intelligence unit (FIU)?

  1. Receiving and analyzing suspicious transaction reports and disseminating results to competent authorities Correct answer.
  2. Issuing national currency and setting interest rates
  3. Prosecuting money laundering cases in criminal court
  4. Supervising banks for prudential capital adequacy

Explanation

The FATF model assigns the FIU the core functions of receiving, analyzing, and disseminating suspicious transaction reports and other financial disclosures to competent authorities. Prosecution is a law enforcement function, while prudential supervision and monetary policy belong to other bodies.

Question 2Anti-Money Laundering (AML)

A customer deposits small amounts of cash just under the reporting threshold at several branches on consecutive days. This pattern is best described as which activity?

  1. Placement
  2. Integration
  3. Structuring Correct answer.
  4. Layering

Explanation

Structuring is the deliberate splitting of transactions to stay below reporting thresholds and avoid triggering a currency transaction report. It is a distinct tactic that can occur at any stage of the laundering cycle.

Question 3Anti-Money Laundering (AML)

What are the three classic stages of money laundering in sequence?

  1. Placement, integration, layering
  2. Layering, placement, integration
  3. Integration, placement, layering
  4. Placement, layering, integration Correct answer.

Explanation

The conventional model describes placement of illicit proceeds into the financial system, then layering to obscure their origin, then integration of the funds back into the legitimate economy. The sequence reflects increasing distance from the predicate offense.

Question 4Anti-Money Laundering (AML)

Which concept requires a financial institution to identify and verify the identity of its customers before or during the establishment of a business relationship?

  1. Tipping off
  2. Wire stripping
  3. Correspondent banking
  4. Customer due diligence Correct answer.

Explanation

Customer due diligence is the obligation to identify and verify customers, understand their business, and monitor the relationship. It is a foundational AML control under FATF Recommendation 10.

Question 5Anti-Money Laundering (AML)

Which customer is a politically exposed person (PEP) for AML purposes?

  1. A private company's procurement officer
  2. A foreign minister of a national government Correct answer.
  3. A mid-level civil servant with no senior political role
  4. A retired schoolteacher

Explanation

PEPs are individuals entrusted with prominent public functions, such as heads of state, senior politicians, and senior government officials. A foreign minister clearly falls within that category and triggers enhanced due diligence.

Question 6Anti-Money Laundering (AML)

What is the purpose of a suspicious transaction report (STR)?

  1. To freeze the customer's account automatically
  2. To notify the customer that their account activity is under review
  3. To inform the FIU of activity that may be linked to money laundering or terrorist financing Correct answer.
  4. To request the customer's consent before filing a report

Explanation

An STR is filed with the FIU to report transactions or activity that the institution suspects may relate to money laundering or terrorist financing. Filing is confidential and does not itself freeze accounts or require customer consent.

Question 7Anti-Money Laundering (AML)

Which action is most consistent with the prohibition on tipping off?

  1. Training staff on red flag indicators
  2. Documenting the rationale for an internal escalation
  3. Telling the customer that a suspicious activity report has been submitted about them Correct answer.
  4. Retaining records of the transaction review

Explanation

Tipping off prohibits disclosing to the subject that a suspicious report has been or will be filed, because it can compromise investigation. Internal documentation, recordkeeping, and training are legitimate controls that do not disclose the report.

Question 8Anti-Money Laundering (AML)

Which entity is typically designated as a reporting entity obliged to file suspicious transaction reports under AML regimes?

  1. A neighborhood book club
  2. A regulated bank Correct answer.
  3. A public library
  4. A community sports team

Explanation

AML regimes impose reporting obligations on regulated financial institutions such as banks, and often on other designated non-financial businesses and professions. Unregulated social or civic groups are not reporting entities.

Question 9Anti-Money Laundering (AML)

A bank receives a large wire transfer from a customer in a jurisdiction subject to comprehensive international sanctions. What is the most appropriate immediate action?

  1. Escalate to the sanctions/compliance team and hold the transaction pending screening Correct answer.
  2. Return the funds to the sender without any review
  3. Ask the customer to split the transfer into smaller amounts
  4. Process the transfer and file an STR later

Explanation

Transactions involving sanctioned jurisdictions or parties must be screened and escalated before processing, because sanctions compliance may require blocking or rejecting the funds. Splitting transfers would itself be a prohibited evasion technique.

Question 10Anti-Money Laundering (AML)

What distinguishes enhanced due diligence (EDD) from standard customer due diligence?

  1. EDD replaces the need for any recordkeeping
  2. EDD requires additional scrutiny such as source of funds and senior management approval for higher-risk relationships Correct answer.
  3. EDD applies only to domestic customers
  4. EDD removes the obligation to monitor transactions

Explanation

EDD applies additional measures for higher-risk relationships, such as establishing source of wealth and funds, obtaining senior management approval, and conducting more intensive monitoring. It supplements rather than replaces standard CDD and recordkeeping.

Question 11Anti-Money Laundering (AML)

A customer's business involves repeated round-dollar transfers to unrelated third parties in multiple countries with no apparent commercial rationale. Which red flag does this most directly illustrate?

  1. Transactions inconsistent with the customer's known business profile Correct answer.
  2. Routine tax withholding
  3. Proper payroll processing
  4. Standard foreign exchange conversion

Explanation

Activity that lacks commercial logic and does not fit the customer's known profile is a classic red flag warranting escalation. Round-dollar, cross-border transfers to unrelated parties suggest layering rather than legitimate commerce.

Question 12Anti-Money Laundering (AML)

What is the primary role of a correspondent banking relationship in AML risk management?

  1. It eliminates the need for the respondent bank to conduct CDD
  2. It allows a bank to provide services to another bank and requires due diligence on the respondent institution Correct answer.
  3. It is a type of insurance contract
  4. It is a consumer lending product

Explanation

In correspondent banking, one bank provides services to another, and the correspondent must conduct due diligence on the respondent institution and understand its AML controls. This relationship creates cross-border exposure that requires enhanced scrutiny.

Question 13Anti-Money Laundering (AML)

When should a financial institution consider filing a suspicious transaction report?

  1. Only when a transaction exceeds a fixed dollar threshold
  2. Only after a court conviction for a predicate offense
  3. When it knows, suspects, or has reasonable grounds to suspect that funds are the proceeds of crime or linked to terrorist financing Correct answer.
  4. Only when the customer requests a report

Explanation

The STR trigger is knowledge, suspicion, or reasonable grounds to suspect criminal proceeds or terrorist financing, not a conviction or fixed threshold. Threshold-based reporting is a separate currency transaction reporting regime.

Question 14Anti-Money Laundering (AML)

Which practice best supports an effective risk-based AML program?

  1. Disabling transaction monitoring to reduce alerts
  2. Periodically assessing and updating the institution's money laundering risk assessment Correct answer.
  3. Relying solely on manual review with no documented methodology
  4. Applying identical controls to every customer regardless of risk

Explanation

A risk-based program requires periodic assessment of the institution's money laundering and terrorist financing risks, with controls calibrated accordingly. Uniform controls ignore risk differences, and disabling monitoring undermines detection.

Question 15Anti-Money Laundering (AML)

What is the purpose of a currency transaction report (CTR)?

  1. To report cash transactions above a defined threshold to the FIU Correct answer.
  2. To document loan underwriting decisions
  3. To record customer complaints
  4. To report only suspected terrorist financing

Explanation

A CTR reports cash transactions exceeding a specified threshold, providing authorities with a systematic record of large cash movements. Suspicion-based reporting is handled separately through STRs.

Question 16Anti-Money Laundering (AML)

A customer refuses to provide beneficial ownership information for a company account and becomes evasive. What is the most appropriate response under a risk-based CDD regime?

  1. Ask a colleague to guess the ownership structure
  2. Open the account and obtain ownership data later at renewal
  3. Proceed because the customer is a long-standing client
  4. Decline to establish the relationship or terminate it, and consider filing an STR Correct answer.

Explanation

Institutions cannot establish or continue a relationship when they cannot verify beneficial ownership, so they should decline or terminate and consider reporting. Inability to complete CDD is itself a reportable red flag.

Question 17Anti-Money Laundering (AML)

Which activity is a common indicator of trade-based money laundering?

  1. Over-invoicing or under-invoicing of goods to move value across borders Correct answer.
  2. Routine salary payments
  3. Accurate invoicing with matching shipping documents
  4. Domestic retail purchases with receipts

Explanation

Trade-based money laundering often uses mispriced invoices, such as over-invoicing or under-invoicing, to transfer value between parties across borders. Accurate documentation and domestic retail activity do not move value in this way.

Question 18Anti-Money Laundering (AML)

What does the FATF 'travel rule' require for wire transfers?

  1. That all transfers be reported to the United Nations
  2. That transfers be limited to domestic banks
  3. That transfers be conducted only in cash
  4. That originator and beneficiary information accompany the transfer Correct answer.

Explanation

The travel rule requires that identifying information about the originator and beneficiary travel with the payment message through the chain. This supports traceability and screening by intermediary institutions.

Question 19Anti-Money Laundering (AML)

Why do shell banks present heightened money laundering risk?

  1. They are required to publish beneficial ownership data
  2. They have no physical presence in any jurisdiction and are typically unregulated Correct answer.
  3. They only serve government customers
  4. They are licensed and supervised in the jurisdiction where they operate

Explanation

Shell banks lack physical presence and meaningful regulation in any jurisdiction, making them attractive for concealing ownership and laundering proceeds. FATF standards prohibit relationships with unlicensed shell banks.

Question 20Anti-Money Laundering (AML)

What is the primary purpose of ongoing transaction monitoring in an AML program?

  1. To eliminate the need for customer due diligence
  2. To detect unusual activity and generate alerts for review Correct answer.
  3. To set interest rates for deposits
  4. To calculate tax liabilities for customers

Explanation

Transaction monitoring compares activity against expected customer behavior to detect unusual patterns and generate alerts for investigation. It complements CDD rather than replacing it.

Question 21Anti-Money Laundering (AML)

A correspondent bank is asked to open an account for a foreign bank that has no physical presence and is not affiliated with a regulated institution. How should the correspondent respond?

  1. Open the account if the respondent pays a higher fee
  2. Open the account with standard due diligence
  3. Decline, because relationships with unlicensed shell banks are prohibited Correct answer.
  4. Open the account and monitor it quarterly

Explanation

FATF standards prohibit establishing correspondent relationships with shell banks that lack physical presence and are not affiliated with a regulated financial group. Fees or monitoring cannot cure the prohibition.

Question 22Anti-Money Laundering (AML)

An institution's automated monitoring generates a high volume of alerts, most of which are false positives. Which approach best improves effectiveness while maintaining coverage?

  1. Raise every threshold to the maximum to reduce workload
  2. Tune thresholds and rules using risk data and document the rationale for changes Correct answer.
  3. Ignore all alerts below a fixed dollar amount without analysis
  4. Disable the monitoring system entirely

Explanation

Alert tuning uses risk data and documented methodology to reduce false positives while preserving detection of genuine risk. Arbitrary threshold changes or disabling monitoring can create blind spots and are not defensible.

Question 23Anti-Money Laundering (AML)

Which scenario best illustrates the layering stage of money laundering?

  1. A laundered business purchases office furniture for its legitimate operations
  2. A customer withdraws cash to pay a supplier
  3. A customer deposits cash from drug sales into a bank account
  4. A network moves funds through multiple offshore companies and wire transfers to obscure their origin Correct answer.

Explanation

Layering involves complex, multi-step transactions designed to distance funds from their criminal source and obscure the audit trail. Cash deposit is placement, while spending laundered funds on legitimate assets is integration.

Question 24Anti-Money Laundering (AML)

A bank discovers that a customer is a close associate of a foreign PEP and the account shows large incoming transfers from state-owned entities. Which set of measures is most appropriate?

  1. Apply standard CDD and continue normal monitoring
  2. Apply enhanced due diligence, establish source of wealth and funds, obtain senior management approval, and conduct enhanced monitoring Correct answer.
  3. Close the account immediately without any review or report
  4. Reduce monitoring because the customer is politically connected

Explanation

PEPs and their close associates are higher-risk and require EDD, including source of wealth and funds verification, senior management approval, and enhanced ongoing monitoring. Immediate closure without review or reporting can itself create risk and may not be required.

Question 25Anti-Money Laundering (AML)

Which design feature most strengthens the independence of an institution's AML compliance function?

  1. Combining the function with marketing to share resources
  2. Relying on the sales team to approve its own alerts
  3. Reporting to the business line whose revenue the function monitors
  4. Direct reporting lines to senior management or the board with separate escalation channels Correct answer.

Explanation

Independence is strengthened when compliance reports to senior management or the board and has separate escalation channels free from business-line influence. Reporting to the monitored business line or sales undermines objectivity.

Question 26Anti-Money Laundering (AML)

Under the FATF Recommendations, which document is the primary international statement of the standards countries should implement to combat money laundering and terrorist financing?

  1. The Wolfsberg Group Correspondent Banking Principles
  2. The FATF Recommendations Correct answer.
  3. The Vienna Convention on Diplomatic Relations
  4. The Basel Core Principles for Effective Banking Supervision

Explanation

The FATF Recommendations are the globally recognized standards that jurisdictions are assessed against through mutual evaluations. Other documents offer sector guidance or treaty obligations but do not serve as the universal AML/CFT standard.

Question 27Anti-Money Laundering (AML)

Which element is a required component of a customer due diligence process under the risk-based approach?

  1. Verifying the identity of the customer using reliable, independent sources Correct answer.
  2. Guaranteeing that the customer will never conduct a suspicious transaction
  3. Requiring every customer to submit to an in-person interview
  4. Collecting the customer's social media passwords

Explanation

CDD requires identifying the customer and verifying that identity with reliable, independent source documents, data, or information. It is a risk-based process and does not involve guarantees or intrusive credential collection.

Question 28Anti-Money Laundering (AML)

An analyst reviewing an account notes that a customer regularly deposits cash just below the reporting threshold at several different branches on the same day. Which money laundering technique does this pattern most directly suggest?

  1. Insider trading
  2. Invoice manipulation
  3. Structuring Correct answer.
  4. Ponzi scheme operation

Explanation

Structuring is the deliberate splitting or sizing of transactions to fall below reporting or recordkeeping thresholds, often spread across branches to avoid attention. The described pattern of sub-threshold cash deposits across locations fits this technique.

Question 29Anti-Money Laundering (AML)

A compliance officer is designing the institution's AML training program. Which approach best reflects a risk-based philosophy?

  1. Using a single generic video for all new hires with no refresher
  2. Tailoring training content and frequency to the risks of each business line and function Correct answer.
  3. Restricting training to the compliance department only
  4. Delivering identical annual training to all staff regardless of role

Explanation

A risk-based training program differentiates content and frequency according to the money laundering risks staff face in their specific roles. Front-line staff handling cash or international wires generally need more targeted training than back-office functions.

Question 30Anti-Money Laundering (AML)

An institution's risk assessment identifies that a newly onboarded corporate customer operates a money services business but was classified at onboarding as a low-risk retailer. Which control failure does this most directly represent?

  1. Misclassification of customer risk leading to inappropriate due diligence Correct answer.
  2. Inadequate record retention of transaction receipts
  3. Excessive reliance on biometric authentication
  4. Failure to file a currency transaction report for a single deposit

Explanation

Operating a money services business is a higher-risk activity, so classifying the customer as a low-risk retailer is a risk-assessment error that would result in insufficient due diligence and monitoring. Accurate customer risk classification is foundational to applying proportionate controls.

Question 31Fraud Prevention and Detection

A fraud examiner compares an employee's signature on a vendor master record with the signature on the same person's employment application and finds they differ markedly. Which fraud risk indicator does this most directly support?

  1. Fictitious vendor scheme involving an employee-controlled shell company Correct answer.
  2. Skimming of cash receipts before they are recorded
  3. Payroll ghost employee added through the timekeeping system
  4. Bid-rigging among prequalified contractors

Explanation

A mismatch between signatures on vendor records and personnel files suggests the employee may have created a vendor entity under a false identity to divert payments. This is a classic red flag for a fictitious vendor (shell company) scheme. Bid-rigging, ghost employees, and skimming do not center on vendor master signatures.

Question 32Fraud Prevention and Detection

Which concept describes the fraud triangle's element of opportunity?

  1. The actual concealment method used to hide the fraud
  2. The pressure or incentive that motivates a person to commit fraud
  3. The condition or situation that allows fraud to occur, such as weak internal controls Correct answer.
  4. The rationalization a person uses to justify dishonest behavior

Explanation

The fraud triangle consists of pressure, opportunity, and rationalization. Opportunity is the situational condition, often a control weakness, that permits the fraud to be carried out. Pressure is the motive and rationalization is the justification.

Question 33Fraud Prevention and Detection

An auditor runs a test to identify duplicate invoice numbers paid within the same accounting period. Which fraud risk is this test primarily designed to detect?

  1. Unauthorized changes to the chart of accounts
  2. Duplicate or double payment of the same invoice Correct answer.
  3. Understatement of accounts payable
  4. Improper revenue cutoff at year end

Explanation

Searching for repeated invoice numbers or identical amounts paid more than once is a standard data analytics test for duplicate payments, a common disbursement fraud. It targets overpayment rather than understatement, cutoff, or account structure.

Question 34Fraud Prevention and Detection

Which of the following best describes the purpose of a fraud risk assessment?

  1. To identify and prioritize fraud risks so controls can be designed to address them Correct answer.
  2. To guarantee that no fraud can occur in the organization
  3. To determine the exact dollar amount of past fraud losses
  4. To replace the external audit function

Explanation

A fraud risk assessment systematically identifies where fraud could occur, evaluates likelihood and impact, and helps prioritize preventive and detective controls. It is a risk-management tool, not a guarantee against fraud or a substitute for audit.

Question 35Fraud Prevention and Detection

Which of the following is the strongest example of a preventive anti-fraud control?

  1. Annual external audit of the financial statements
  2. Segregation of duties between check preparation and check signing Correct answer.
  3. Hotline tip reporting by employees
  4. Monthly review of the exception report by the controller

Explanation

Preventive controls stop fraud before it happens; segregating duties so one person cannot both prepare and sign checks removes the opportunity. Exception reviews, audits, and hotlines are detective because they identify problems after the fact.

Question 36Fraud Prevention and Detection

A company's accounts payable clerk is also responsible for maintaining the vendor master file and approving new vendors. Which fraud scheme is this weakness most likely to enable?

  1. Theft of physical inventory from the warehouse
  2. Manipulation of the fixed asset depreciation schedule
  3. Unauthorized payroll rate changes for existing employees
  4. Creation of a fictitious vendor to which payments are diverted Correct answer.

Explanation

When one person can both add vendors and process payments, they can create a shell vendor and route funds to it without independent review. Inventory theft, depreciation manipulation, and payroll rate changes involve different systems and controls.

Question 37Fraud Prevention and Detection

Which of the following best characterizes occupational fraud?

  1. Fraud committed by an employee against the employing organization for personal gain Correct answer.
  2. Fraud committed by a company against its investors through financial misstatement
  3. Fraud committed by a vendor against a competitor
  4. Fraud committed by an outside party against a customer's credit card

Explanation

Occupational fraud is the use of one's occupation for personal enrichment through the deliberate misuse of the employer's resources or assets. Card fraud by outsiders and vendor-versus-competitor fraud are not occupational. Financial statement fraud is a distinct category aimed at misleading investors.

Question 38Fraud Prevention and Detection

Which red flag most strongly suggests a ghost employee on the payroll?

  1. An employee with no withholding elections, no deductions, and a post office box address Correct answer.
  2. An employee who has direct deposit at a local bank
  3. An employee whose pay rate was increased at the annual review
  4. An employee who regularly takes approved vacation

Explanation

Ghost employees often lack normal payroll attributes such as tax withholding, benefit deductions, and a verifiable residential address, and may use a P.O. box to receive pay. Regular vacation, normal raises, and local direct deposit are ordinary characteristics.

Question 39Fraud Prevention and Detection

A fraud examiner wants to identify payments made to vendors whose addresses match employee home addresses. Which analytic technique is most appropriate?

  1. Matching the vendor address file against the employee address file Correct answer.
  2. Reviewing the general ledger for round-dollar amounts only
  3. Comparing budgeted to actual revenue by month
  4. Calculating the average days payable outstanding

Explanation

Cross-matching vendor addresses to employee addresses reveals conflicts of interest or fictitious vendors controlled by employees. Days payable, round-dollar testing, and budget variance analysis address different risks.

Question 40Fraud Prevention and Detection

During an investigation, an examiner notices that journal entries are frequently posted late at night by a single user shortly before period close. This pattern most directly suggests which risk?

  1. Inventory shrinkage from the receiving dock
  2. Unauthorized use of a company credit card
  3. Management override or improper top-side adjustments Correct answer.
  4. Cash skimming at the point of sale

Explanation

Unusual journal entries posted at odd hours by one user near period end are a recognized red flag for management override and improper top-side adjustments used to manipulate results. Skimming, shrinkage, and card misuse involve different transaction streams.

Question 41Fraud Prevention and Detection

Which of the following best explains why collusion is difficult for internal controls to prevent?

  1. It relies on a single employee exceeding their authority
  2. It allows two or more people to circumvent segregation of duties by working together Correct answer.
  3. It requires management to approve the transaction
  4. It always involves external auditors

Explanation

Segregation of duties assumes individuals will not cooperate to defeat the control. Collusion lets participants combine their access and bypass that separation. It is not a single-person act, does not involve auditors as perpetrators, and does not depend on management approval.

Question 42Fraud Prevention and Detection

A tip hotline receives an anonymous report that a manager is receiving gifts from a supplier. Which step should the fraud examiner take first?

  1. Publicize the allegation to deter other employees
  2. Immediately confront the accused manager with the allegation
  3. Assess the allegation and gather preliminary information to determine whether an investigation is warranted Correct answer.
  4. Terminate the supplier relationship without further inquiry

Explanation

Allegations should be triaged: the examiner evaluates credibility and gathers preliminary facts before deciding whether a formal investigation is needed. Confronting the accused, ending the relationship, or publicizing the claim prematurely could destroy evidence or unfairly harm individuals.

Question 43Fraud Prevention and Detection

In Benford's Law analysis, which outcome most warrants follow-up?

  1. A dataset containing only round-dollar amounts
  2. A digit distribution that deviates significantly from the expected logarithmic pattern Correct answer.
  3. A dataset with fewer than 100 transactions
  4. A digit distribution that closely matches the expected pattern

Explanation

Benford's Law predicts the frequency of leading digits in naturally occurring data. Significant deviation from the expected distribution signals possible manipulation and merits investigation. A close match provides comfort, while small datasets and round-dollar-only data are unsuitable for the test.

Question 44Fraud Prevention and Detection

An employee submits expense reports with receipts from a restaurant that does not exist at the listed address. Which fraud type does this illustrate?

  1. Check tampering through forged endorsements
  2. Payroll ghost employee scheme
  3. Financial statement fraud through revenue inflation
  4. Expense reimbursement fraud using fabricated supporting documentation Correct answer.

Explanation

Submitting fictitious or altered receipts to obtain reimbursement is expense reimbursement fraud. Ghost employees, check tampering, and revenue inflation involve different mechanisms and targets.

Question 45Fraud Prevention and Detection

Which control most effectively mitigates the risk of check tampering by an employee who has access to blank checks?

  1. Allowing the same employee to reconcile the bank statement
  2. Securing blank check stock and requiring dual signatures above a threshold Correct answer.
  3. Requiring the employee to maintain the check register
  4. Permitting the employee to endorse checks for deposit

Explanation

Physically securing check stock and requiring dual signatures removes the opportunity for one person to forge or alter checks. Letting the same employee reconcile, endorse, or keep the register perpetuates the conflict.

Question 46Fraud Prevention and Detection

A fraud examiner is reviewing a bid process and finds that the winning bidder's proposal contains the same unusual typographical error as a losing bidder's proposal. This most likely indicates which scheme?

  1. Fictitious expense reimbursement
  2. Skimming of customer payments
  3. Payroll rate manipulation
  4. Bid-rigging or collusion among bidders Correct answer.

Explanation

Identical errors, formatting, or language across supposedly independent bids suggest the proposals were prepared by the same party, a hallmark of bid-rigging. The other schemes involve cash receipts, reimbursements, or payroll, not competitive bidding.

Question 47Fraud Prevention and Detection

Which of the following best describes the role of a fraud risk register?

  1. It contains the organization's chart of accounts
  2. It documents identified fraud risks, their likelihood and impact, and related controls and owners Correct answer.
  3. It lists all employees authorized to sign checks
  4. It records the results of the annual external audit

Explanation

A fraud risk register is a structured inventory of fraud risks with assessments of likelihood and impact, mapped to mitigating controls and responsible owners. It is not an audit results log, a signature authority list, or a chart of accounts.

Question 48Fraud Prevention and Detection

An examiner observes that a sales manager's lifestyle far exceeds their salary, with a new luxury car and expensive vacations. Which fraud triangle element does this observation most directly relate to?

  1. Rationalization
  2. Opportunity
  3. Pressure or incentive Correct answer.
  4. Concealment

Explanation

An unexplained high lifestyle relative to income is a classic pressure/incentive indicator, suggesting financial need or greed motivating fraud. Opportunity and rationalization concern the ability and justification, while concealment is part of the act.

Question 49Fraud Prevention and Detection

Which data analytic would best detect possible conflicts of interest between purchasing staff and vendors?

  1. Comparing vendor ownership and address data against employee records Correct answer.
  2. Testing the accuracy of inventory counts
  3. Reviewing the fixed asset register for disposals
  4. Analyzing the aging of accounts receivable

Explanation

Matching vendor ownership, addresses, and bank details against employee records can reveal undisclosed relationships between purchasing staff and vendors. Fixed asset, inventory, and receivable analytics address different risks.

Question 50Fraud Prevention and Detection

A fraud examiner is told that an employee's bank account receives deposits from a company vendor each month. Which scheme does this pattern most directly suggest?

  1. Fictitious revenue recognition
  2. Cash larceny at the point of sale
  3. Inventory write-off manipulation
  4. A kickback scheme in which the employee receives payments for steering business Correct answer.

Explanation

Regular payments from a vendor to an employee suggest a kickback arrangement in exchange for favorable treatment. Larceny, revenue recognition, and write-offs do not involve vendor-to-employee payments.