I85PREP
⌘ K
BR-ANAC-PLH study materials
BR-ANAC-PLH study resources

BR-ANAC-PLH practice questions

One question at a time. Build your BR-ANAC-PLH understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Regulatory Framework and Governance

Under the Basel Convention's prior informed consent procedure, when may a transboundary movement of hazardous waste legally commence?

  1. When the importing state fails to object within thirty days
  2. Once the carrier has signed the shipping documentation
  3. As soon as the waste leaves the exporting state's territorial waters
  4. After the exporter files a notification and receives written consent from the importing state Correct answer.

Explanation

The Basel Convention requires the state of export to notify the competent authority of the state of import and any transit states. The movement may only start after the state of import has consented in writing, and the consent must be documented. Silence or inaction does not substitute for affirmative written consent.

Question 2Regulatory Framework and Governance

Which body serves as the governing plenary of the Basel Convention and adopts amendments and decisions?

  1. The Secretariat
  2. The Open-ended Working Group
  3. The Compliance Committee
  4. The Conference of the Parties Correct answer.

Explanation

The Conference of the Parties is the supreme decision-making body of the Basel Convention and meets periodically to adopt amendments and decisions. The Secretariat administers the Convention but cannot amend it. The Open-ended Working Group and the Compliance Committee are subsidiary bodies that prepare recommendations or address implementation issues.

Question 3Regulatory Framework and Governance

The Basel Convention's core obligation on waste generation is best described as which of the following?

  1. Banning all generation of hazardous waste within member states
  2. Requiring all hazardous waste to be treated within the generating facility
  3. Transferring responsibility for waste reduction to importing states
  4. Reducing hazardous waste generation to a minimum in light of social, technological and economic considerations Correct answer.

Explanation

Article 4 obliges parties to take practical steps to ensure that hazardous waste generation is reduced to a minimum, taking into account social, technological and economic considerations. The Convention does not impose an absolute ban on generation, since some waste is unavoidable. The duty rests with the state where the waste is generated.

Question 4Regulatory Framework and Governance

Which instrument is a legally binding global agreement specifically addressing persistent organic pollutants?

  1. The Stockholm Convention Correct answer.
  2. The Montreal Protocol
  3. The Minamata Convention
  4. The Rotterdam Convention

Explanation

The Stockholm Convention targets persistent organic pollutants, requiring parties to eliminate or restrict listed substances and to manage stockpiles and releases. The Rotterdam Convention governs information exchange and consent for certain chemicals in trade. The Minamata Convention addresses mercury, and the Montreal Protocol addresses ozone-depleting substances.

Question 5Regulatory Framework and Governance

Under the Rotterdam Convention, what does the prior informed consent procedure primarily govern?

  1. Discharges of ballast water from ships
  2. Imports of listed industrial chemicals and pesticides that have been banned or severely restricted Correct answer.
  3. Transboundary movements of household waste
  4. Emissions of greenhouse gases from industrial plants

Explanation

The Rotterdam Convention applies to certain hazardous chemicals and pesticides that parties have banned or severely restricted, creating an information-exchange and consent mechanism for imports. It does not regulate household waste, greenhouse gases or ballast water, which fall under other regimes. The procedure helps importing states make informed decisions about whether to accept shipments.

Question 6Regulatory Framework and Governance

Which entity is responsible for preparing technical guidelines on environmentally sound management under the Basel Convention?

  1. Individual exporting companies acting alone
  2. The World Trade Organization
  3. The United Nations Security Council
  4. The Secretariat in consultation with parties and expert groups Correct answer.

Explanation

Technical guidelines on environmentally sound management are developed under the auspices of the Conference of the Parties, with the Secretariat coordinating input from parties and technical expert groups. The WTO and the Security Council have no role in drafting these waste-management guidelines. Private companies may follow the guidelines but do not author them.

Question 7Regulatory Framework and Governance

What is the primary function of the Basel Convention's Compliance Committee?

  1. Setting global prices for recycled materials
  2. Issuing binding rulings that override national courts
  3. Assisting parties in implementing their obligations and reviewing implementation difficulties Correct answer.
  4. Imposing criminal penalties on individual waste traders

Explanation

The Compliance Committee is a non-confrontational mechanism that helps parties overcome difficulties in implementing the Convention and reviews compliance matters. It does not prosecute individuals, set commodity prices, or override national judicial systems. Its mandate is facilitative rather than punitive.

Question 8Regulatory Framework and Governance

Which principle underpins the Basel Convention's approach that waste should be managed as close as possible to where it is generated?

  1. The common but differentiated responsibilities principle
  2. The polluter pays principle
  3. The precautionary principle
  4. The proximity principle Correct answer.

Explanation

The proximity principle holds that waste should be treated and disposed of as close as possible to its point of generation, reducing the risks of long-distance transport. The polluter pays principle concerns cost allocation, while precaution and differentiated responsibilities address risk-taking and equity between states. Proximity is specifically about the location of management.

Question 9Regulatory Framework and Governance

A state party wishes to amend an annex to the Basel Convention. Which route is generally available for adopting amendments to annexes?

  1. Adoption by the Conference of the Parties, with entry into force for parties that have not objected after a specified period Correct answer.
  2. Adoption by the Secretariat without party involvement
  3. Automatic adoption upon a single party's written request
  4. Adoption only through a unanimous vote of all parties

Explanation

Annex amendments are typically adopted by the Conference of the Parties and enter into force for parties that have not submitted a notification of non-acceptance within a defined period. Unanimity is not required, and neither a single party nor the Secretariat can amend annexes unilaterally. This opt-out structure allows the regime to evolve without stalling on a single objection.

Question 10Regulatory Framework and Governance

Under the Basel Convention, what is the status of a transboundary movement of hazardous waste that is found to be illegal?

  1. The state of export must ensure re-import or environmentally sound disposal, with responsibility allocated accordingly Correct answer.
  2. The carrier may abandon the waste at the nearest port
  3. The importing state must accept the waste without conditions
  4. The waste automatically becomes the property of the transit state

Explanation

When a movement is illegal, the Convention places duties on the states involved to ensure the waste is taken back or otherwise disposed of in an environmentally sound manner. Responsibility is allocated according to which state's conduct caused the illegality. Abandonment is prohibited, and property does not simply vest in a transit state.

Question 11Regulatory Framework and Governance

A company exports waste containing a substance listed in Annex I but not exhibiting any Annex III hazard characteristic. How is such waste treated under the Convention?

  1. It is automatically hazardous regardless of its characteristics
  2. It is prohibited from all international trade
  3. It may fall outside the Convention's scope unless national law or the importing state classifies it as hazardous Correct answer.
  4. It is treated as household waste and exempt from notification

Explanation

The Convention's definition of hazardous waste generally requires that a waste listed in Annex I also display an Annex III characteristic, unless national legislation classifies it more broadly. A listed substance without a hazard characteristic may therefore fall outside the Convention's scope. Individual parties may still regulate it under domestic law.

Question 12Regulatory Framework and Governance

Which obligation does the Basel Convention place on states regarding the export of hazardous waste to a non-party state?

  1. Such exports require no notification because the receiving state is not a party
  2. Such exports are encouraged to promote recycling capacity
  3. Such exports are generally prohibited unless a separate bilateral, multilateral or regional agreement meets Convention standards Correct answer.
  4. Such exports are permitted with only an oral agreement

Explanation

The Convention restricts movements to non-parties, generally prohibiting them unless there is a separate agreement whose provisions are not less environmentally sound than those of the Convention. Oral arrangements are insufficient, and the absence of party status does not waive notification. Exports to non-parties are not encouraged by the regime.

Question 13Regulatory Framework and Governance

What does the term 'environmentally sound management' require under the Basel Convention?

  1. Taking all practicable steps to ensure waste is managed in a manner that protects human health and the environment Correct answer.
  2. Choosing the lowest-cost disposal option available
  3. Storing waste indefinitely until technology improves
  4. Relying solely on the exporting state's standards

Explanation

Environmentally sound management means taking all practicable steps to ensure hazardous waste and other wastes are managed in a way that protects human health and the environment from adverse effects. It is not satisfied by indefinite storage, cost minimisation alone, or unilateral reliance on the exporter's standards. It requires a protective, comprehensive approach throughout the waste chain.

Question 14Regulatory Framework and Governance

Which of the following best describes the Basel Convention's ban amendment concerning hazardous waste movements?

  1. It bans the generation of hazardous waste in developing states
  2. It prohibits all recycling of hazardous waste worldwide
  3. It prohibits exports of hazardous waste destined for disposal from listed parties to certain other parties Correct answer.
  4. It eliminates the prior informed consent procedure

Explanation

The ban amendment addresses exports of hazardous waste for disposal from parties listed in the amendment to certain other parties, particularly developing states. It does not eliminate recycling globally, ban generation, or replace the consent procedure. Its scope is defined by the categories of parties and the destination of the waste.

Question 15Regulatory Framework and Governance

A transit state through which hazardous waste will pass under the Basel Convention must generally be treated how?

  1. It must be informed only after the shipment arrives
  2. It may be bypassed if the exporter deems notification unnecessary
  3. It must be notified and its consent obtained in accordance with the Convention's procedures Correct answer.
  4. It must issue a permit only if it is also the importing state

Explanation

States of transit must be notified and their consent obtained under the prior informed consent procedure, so that they can assess and manage risks. Notification after arrival defeats the purpose of prior consent, and exporters cannot unilaterally waive the requirement. Transit states are treated as participants in the procedure regardless of whether they are also importers.

Question 16Regulatory Framework and Governance

Which of the following is a key feature of the Minamata Convention's regulatory approach?

  1. A trading system for mercury credits
  2. A single prohibition on all mining activities
  3. A voluntary reporting scheme without binding obligations
  4. Controls across the mercury life cycle, including trade, use and releases Correct answer.

Explanation

The Minamata Convention regulates mercury throughout its life cycle, covering supply and trade, products and processes, emissions and releases, and contaminated sites. It does not impose a blanket ban on all mining, nor is it purely voluntary. It does not establish a mercury credit trading system.

Question 17Regulatory Framework and Governance

What role does the Basel Convention Regional Centre network play?

  1. Providing training and technical assistance to help parties implement the Convention Correct answer.
  2. Issuing export licences on behalf of national authorities
  3. Setting the global list of hazardous waste substances
  4. Adjudicating disputes between exporting and importing states

Explanation

Regional centres deliver training, technology transfer and capacity-building support to help parties meet their Convention obligations. They do not adjudicate disputes, issue national export licences, or set the annex lists, which are adopted by the Conference of the Parties. Their function is facilitative and regional in focus.

Question 18Regulatory Framework and Governance

How does the Basel Convention address waste generated aboard ships that is offloaded at a port?

  1. It is generally subject to the Convention when it meets the hazardous waste definition and is managed through the port state Correct answer.
  2. It is entirely excluded because it originated at sea
  3. It is governed only by the exporting vessel's flag state
  4. It is treated as ballast water under marine pollution rules

Explanation

Waste offloaded from ships can fall within the Convention where it meets the hazardous waste definition, with the port state playing a key role in its management. Origin at sea does not automatically exclude it, and flag state authority does not displace the Convention. Ballast water is a distinct regulatory category.

Question 19Regulatory Framework and Governance

Which statement best captures the relationship between the Basel Convention and regional waste regimes such as the Bamako Convention?

  1. Regional agreements automatically override the global Convention for all parties
  2. The Basel Convention prohibits regional agreements on waste
  3. Regional agreements must be identical in every respect to the global Convention
  4. Regional agreements may impose stricter standards, and the Basel Convention permits such stricter rules Correct answer.

Explanation

The Basel Convention allows parties to enter into bilateral, multilateral or regional agreements that are not less environmentally sound and may be stricter. Regional regimes can therefore supplement and strengthen the global framework. They do not need to be identical, do not automatically override the Convention, and are not prohibited.

Question 20Regulatory Framework and Governance

What is the function of the notification document in the Basel Convention's movement procedure?

  1. To certify that the waste is non-hazardous in all cases
  2. To provide the importing and transit states with information needed to evaluate and consent to the proposed movement Correct answer.
  3. To replace the need for any consent from the importing state
  4. To transfer title of the waste to the carrier

Explanation

The notification document supplies the importing and transit states with details about the waste, its origin, destination and management so they can make an informed decision. It does not transfer title, certify non-hazardous status, or substitute for consent. Consent remains a separate and essential step.

Question 21Regulatory Framework and Governance

A party discovers that waste exported under a valid notification is being managed in the importing state in a way that threatens human health. What does the Convention require?

  1. The exporting company may disclaim responsibility once the waste crosses the border
  2. The state of export must ensure the waste is taken back or otherwise managed in an environmentally sound manner Correct answer.
  3. The Secretariat must physically seize the waste
  4. The importing state alone bears all consequences with no recourse

Explanation

Where a movement cannot be completed in accordance with the notification and in an environmentally sound manner, the state of export has a duty to ensure the waste is taken back or otherwise disposed of soundly. Responsibility does not end at the border, and the Secretariat does not conduct physical seizures. The importing state may seek cooperation rather than bearing all consequences alone.

Question 22Regulatory Framework and Governance

How does the Basel Convention's definition of hazardous waste interact with a party's domestic classification of waste as hazardous?

  1. A party may narrow the definition to exclude wastes the Convention covers
  2. A party may apply broader domestic classifications, extending Convention obligations to additional wastes Correct answer.
  3. Domestic law is irrelevant to the Convention's application
  4. Only the Secretariat can determine whether domestic classifications apply

Explanation

Parties may classify additional wastes as hazardous under national law, thereby extending Convention obligations to them. They cannot narrow the Convention's coverage to escape obligations, and domestic law is central to implementation. The Secretariat does not determine the content of national classifications.

Question 23Regulatory Framework and Governance

Which interpretation best explains why the Basel Convention requires consent from transit states that are not parties?

  1. Because the Secretariat requires all states to sign annual declarations
  2. To allow transit states to claim ownership of the waste
  3. To avoid creating gaps in protection where waste passes through jurisdictions outside the regime Correct answer.
  4. Because non-party states automatically become parties upon notification

Explanation

Requiring notification and consent from transit states, including non-parties, prevents protective gaps along the shipment route. Notification does not make a state a party, nor does it confer ownership of the waste. There is no Secretariat requirement for annual declarations of this kind.

Question 24Regulatory Framework and Governance

In assessing whether a proposed waste movement is lawful, which combination of factors is most decisive under the Basel Convention?

  1. Whether the carrier holds the lowest freight quote and the fastest route
  2. Whether the exporting company is publicly listed
  3. Whether the importing state has signed a trade agreement with the exporter
  4. Whether the waste meets the Convention definition, whether all relevant states have consented, and whether management will be environmentally sound Correct answer.

Explanation

Lawfulness turns on the waste falling within the Convention's definition, on prior informed consent from all relevant states, and on environmentally sound management at destination. Commercial factors such as freight cost, corporate listing status or trade agreements do not determine the Convention's applicability. These regulatory elements must all be satisfied.

Question 25Regulatory Framework and Governance

What distinguishes the obligation to minimise hazardous waste generation from the obligation to ensure environmentally sound management?

  1. Minimisation targets the quantity and hazard of waste produced, while sound management targets how waste is handled Correct answer.
  2. Sound management applies only to household waste, while minimisation applies only to industrial waste
  3. Minimisation is voluntary, while sound management is binding
  4. Minimisation applies only to importing states, while sound management applies only to exporters

Explanation

Minimisation addresses the front end of the waste stream by reducing the quantity and hazardous character of waste generated. Environmentally sound management addresses how waste is stored, transported, treated and disposed of. Both are binding obligations, and neither is confined to particular categories of states or waste in the way the other options suggest.

Question 26Regulatory Framework and Governance

Under the Basel Convention, what is the primary purpose of the prior informed consent (PIC) procedure for transboundary movements of hazardous wastes?

  1. To provide a voluntary mechanism that parties may choose to follow at their discretion
  2. To facilitate trade by standardizing documentation for all waste shipments
  3. To allow the exporting state to unilaterally approve shipments without consulting other states
  4. To ensure that the importing and transit states are notified and give consent before the movement begins Correct answer.

Explanation

The PIC procedure requires the exporting state to notify and obtain consent from the importing state and any transit states before a transboundary movement of hazardous waste can proceed. This ensures that receiving states are aware of and agree to accept the waste, supporting environmentally sound management and the right to refuse shipments. It is a binding obligation for parties, not a voluntary or unilateral process.

Question 27Regulatory Framework and Governance

Which body under the Basel Convention is responsible for adopting amendments to the Convention and its annexes?

  1. The Secretariat
  2. The Conference of the Parties Correct answer.
  3. The Compliance Committee
  4. The Open-ended Working Group

Explanation

The Conference of the Parties (COP) is the governing body of the Basel Convention and has the authority to adopt amendments to the Convention and its annexes. The Secretariat provides administrative support, while the Compliance Committee and Open-ended Working Group have specific, more limited mandates. Amendments are typically adopted at COP meetings following the procedures set out in the Convention.

Question 28Regulatory Framework and Governance

A party to the Basel Convention plans to export hazardous waste to a non-party state. What does the Convention generally require in this situation?

  1. The export is permitted if the non-party state provides written consent
  2. The export is prohibited unless a bilateral or multilateral agreement meeting Basel standards is in place Correct answer.
  3. The export is allowed if the waste will be used for recycling in the non-party state
  4. The export is permitted provided the exporting state notifies the Secretariat in advance

Explanation

Under the Basel Convention, parties are prohibited from exporting hazardous wastes to non-parties unless a bilateral, multilateral, or regional agreement exists that ensures environmentally sound management and is compatible with the Convention's requirements. Consent alone from the non-party is insufficient without such an agreement. This provision aims to prevent waste from being shipped to states that have not committed to the Convention's standards.

Question 29Regulatory Framework and Governance

How does the Basel Convention's Ban Amendment alter the rules for transboundary movements of hazardous wastes?

  1. It bans exports of hazardous wastes from parties listed in Annex VII to all other states Correct answer.
  2. It requires prior informed consent for exports from Annex VII parties to developing countries
  3. It prohibits all exports of hazardous wastes from any party to any other party
  4. It allows exports from Annex VII parties only if the waste is destined for recycling

Explanation

The Ban Amendment prohibits the export of hazardous wastes from parties listed in Annex VII (OECD members, EU members, and Liechtenstein) to all other states. It does not ban all exports between any parties, nor does it create a consent-based exception or allow recycling exports. The amendment aims to prevent hazardous waste from being shipped from developed to developing countries.

Question 30Regulatory Framework and Governance

A party to the Basel Convention is drafting legislation to implement its obligations. Which approach best reflects the Convention's requirement regarding the minimization of hazardous waste generation?

  1. Focusing solely on recycling and reuse without addressing generation levels
  2. Allowing unlimited generation provided that waste is disposed of in approved landfills
  3. Requiring all hazardous waste to be exported for treatment in countries with better facilities
  4. Encouraging waste generators to adopt cleaner production methods and reduce waste at the source Correct answer.

Explanation

The Basel Convention requires parties to take measures to minimize the generation of hazardous wastes, including through cleaner production and source reduction. This obligation is distinct from ensuring environmentally sound management of waste that is generated. Exporting waste or relying solely on disposal or recycling does not fulfill the minimization requirement.

Question 31Compliance Program Design and Risk Assessment

In a compliance program, what is the primary purpose of a risk assessment?

  1. To document employee disciplinary actions
  2. To guarantee that no regulatory violation can ever occur
  3. To replace the need for internal policies and procedures
  4. To identify, analyze, and prioritize risks so controls can be targeted effectively Correct answer.

Explanation

A risk assessment is a structured process that identifies the risks an institution faces, evaluates their likelihood and impact, and ranks them so that resources and controls are directed where they matter most. It informs, but does not replace, policies, controls, and monitoring.

Question 32Compliance Program Design and Risk Assessment

Which activity best represents the first step of a risk-based compliance program?

  1. Hiring additional sales staff
  2. Conducting a customer survey about service quality
  3. Inventorying applicable laws, regulations, and obligations Correct answer.
  4. Publishing an annual report

Explanation

A risk-based program begins by understanding the legal and regulatory obligations that apply to the institution, since these define the boundaries of acceptable conduct. Only after obligations are identified can the institution assess where it may fall short and design controls.

Question 33Compliance Program Design and Risk Assessment

A bank's compliance officer wants to express risk exposure as a combination of two dimensions. Which pairing is standard in compliance risk assessment?

  1. Tenure and seniority
  2. Likelihood and impact Correct answer.
  3. Revenue and headcount
  4. Branch count and geography

Explanation

Compliance risk is commonly scored along two dimensions: the likelihood that an event occurs and the impact if it does. Multiplying or combining these yields a risk rating that supports prioritization and comparison across business lines.

Question 34Compliance Program Design and Risk Assessment

What role does senior management play in an effective compliance program?

  1. Delegating all compliance decisions to front-line staff
  2. Reviewing only the marketing materials
  3. Setting the tone at the top and committing adequate resources Correct answer.
  4. Approving individual customer transactions

Explanation

Senior management sets the tone at the top, demonstrates commitment to compliance, and allocates the people, systems, and budget the program needs. This visible leadership is a recognized pillar of effective compliance programs.

Question 35Compliance Program Design and Risk Assessment

Which of the following is a recognized element of an effective compliance program?

  1. Restricting reporting channels to written mail only
  2. Eliminating all internal audit functions
  3. Reducing documentation to a minimum
  4. Training and awareness for employees Correct answer.

Explanation

Ongoing training and awareness is a core element because staff must understand the rules and how they apply to their work. Programs also typically include policies, a designated compliance officer, monitoring, and reporting channels.

Question 36Compliance Program Design and Risk Assessment

What is the purpose of a compliance risk appetite statement?

  1. To describe the marketing strategy for new products
  2. To list every regulation the institution must follow
  3. To set employee salary bands
  4. To define the level of risk the institution is willing to accept in pursuit of its objectives Correct answer.

Explanation

A risk appetite statement articulates how much risk the institution is prepared to accept and provides a benchmark against which actual exposures are judged. It guides decision-making and escalation when risk exceeds tolerable levels.

Question 37Compliance Program Design and Risk Assessment

Which statement best describes the relationship between the three lines of defense model and compliance?

  1. Only the third line is responsible for compliance
  2. The first line owns and manages risk, the second oversees, and the third provides independent assurance Correct answer.
  3. The model removes the need for a compliance function
  4. All three lines perform identical functions

Explanation

In the three lines model, business units (first line) own and manage risk day to day, the compliance and risk functions (second line) provide oversight and frameworks, and internal audit (third line) gives independent assurance. The separation creates checks and balances.

Question 38Compliance Program Design and Risk Assessment

Why should a compliance program be documented?

  1. To provide evidence that controls exist and are operating as designed Correct answer.
  2. To avoid the need for employee training
  3. To replace independent testing
  4. To increase the volume of paperwork for its own sake

Explanation

Documentation creates an auditable record showing that policies, procedures, and controls are in place and functioning. It supports regulatory examinations, internal reviews, and continuity when staff change.

Question 39Compliance Program Design and Risk Assessment

A compliance team is mapping risks to business processes. Which approach best ensures the assessment is comprehensive?

  1. Assess only the largest revenue-generating unit
  2. Interview a single manager from each department
  3. Break the business into processes and assess risks within each Correct answer.
  4. Rely solely on prior-year assessment results

Explanation

Decomposing the business into processes and assessing risk within each helps ensure no activity is overlooked and that risks are tied to where they actually arise. This process-level view supports targeted controls and clear ownership.

Question 40Compliance Program Design and Risk Assessment

An institution launches a new product with novel features. What should the compliance function do as part of program design?

  1. Assume existing controls fully cover the new features
  2. Wait until the first regulatory examination to evaluate it
  3. Delegate all product risk decisions to the marketing team
  4. Conduct a risk assessment of the product before launch and design appropriate controls Correct answer.

Explanation

New products and activities should undergo a risk assessment before launch so that any additional or changed risks are identified and mitigating controls are built in. This proactive step is a hallmark of a risk-based program.

Question 41Compliance Program Design and Risk Assessment

A compliance officer finds that a high-risk process has only informal, undocumented controls. What is the most appropriate response?

  1. Ignore the gap because the process has not yet failed
  2. Lower the risk rating so the gap disappears
  3. Document the controls and assess whether they are adequate for the risk Correct answer.
  4. Remove the process from the risk inventory

Explanation

Controls should be documented and evaluated against the level of risk they are meant to address. If the risk is high and controls are informal, the institution should formalize them and determine whether they are sufficient.

Question 42Compliance Program Design and Risk Assessment

Which factor most directly increases the inherent compliance risk of a business activity?

  1. The length of the employee handbook
  2. The number of parking spaces at headquarters
  3. The volume and complexity of transactions involved Correct answer.
  4. The color scheme of the customer portal

Explanation

Inherent risk rises with factors such as transaction volume, complexity, and the nature of the activity, because these increase the chance and potential severity of compliance failures. Cosmetic or administrative details do not affect inherent risk.

Question 43Compliance Program Design and Risk Assessment

What distinguishes residual risk from inherent risk?

  1. Residual risk exists only after the institution closes
  2. Residual risk is always higher than inherent risk
  3. Residual risk applies only to credit exposures
  4. Residual risk is the exposure remaining after controls are applied Correct answer.

Explanation

Inherent risk is the exposure before considering controls, while residual risk is what remains once existing controls are taken into account. Comparing the two helps show whether controls are reducing risk as intended.

Question 44Compliance Program Design and Risk Assessment

A compliance manager must prioritize limited resources across several risk areas. Which approach is most defensible?

  1. Fund only the areas that management finds most interesting
  2. Defer all prioritization until year-end
  3. Focus on the areas with the highest assessed risk after considering controls Correct answer.
  4. Allocate equally regardless of risk level

Explanation

A risk-based approach directs resources to the areas of greatest assessed risk, taking existing controls into account. This maximizes the program's effectiveness with finite resources and is consistent with regulatory expectations.

Question 45Compliance Program Design and Risk Assessment

Which of the following best describes the function of a compliance risk taxonomy?

  1. A structured classification of risk types used to organize assessment and reporting Correct answer.
  2. A list of approved vendors
  3. A schedule of board meetings
  4. A method for calculating tax liabilities

Explanation

A risk taxonomy provides a common, structured language for classifying risks, which supports consistent assessment, aggregation, and reporting across the institution. It helps ensure risks are compared and communicated on a like-for-like basis.

Question 46Compliance Program Design and Risk Assessment

How does a compliance program typically address third-party risk?

  1. By prohibiting all outsourcing
  2. By reviewing third parties only after a complaint
  3. By assuming vendors have their own programs and taking no action
  4. By conducting due diligence and ongoing monitoring of third parties Correct answer.

Explanation

Third parties can expose an institution to compliance risk, so programs perform risk-based due diligence before engagement and monitor the relationship on an ongoing basis. Contracts and periodic reviews reinforce accountability.

Question 47Compliance Program Design and Risk Assessment

A compliance assessment shows a control is designed well but operating inconsistently. What does this indicate?

  1. The assessment methodology is invalid
  2. The control design is flawed and must be replaced
  3. The risk should be reclassified as nonexistent
  4. There is a gap between design effectiveness and operating effectiveness Correct answer.

Explanation

Controls have two dimensions: whether they are designed appropriately and whether they operate effectively in practice. A well-designed control that operates inconsistently signals an operating effectiveness gap that requires remediation such as training or monitoring.

Question 48Compliance Program Design and Risk Assessment

Which practice best supports a culture of compliance within an institution?

  1. Discouraging employees from questioning procedures
  2. Rewarding employees solely for sales volume regardless of conduct
  3. Providing confidential channels to raise concerns without fear of retaliation Correct answer.
  4. Limiting compliance communications to senior staff

Explanation

A speak-up culture with confidential reporting and anti-retaliation protections encourages early identification of problems. Incentives should also balance conduct with commercial goals to reinforce the right behaviors.

Question 49Compliance Program Design and Risk Assessment

What is the main benefit of conducting periodic rather than one-time risk assessments?

  1. It eliminates all residual risk
  2. It keeps the assessment aligned with changes in the business and regulatory environment Correct answer.
  3. It guarantees regulators will not examine the institution
  4. It removes the need for any controls

Explanation

Risk profiles change as products, customers, technology, and regulations evolve, so assessments must be refreshed periodically to remain accurate. A current assessment ensures controls continue to address the actual risks.

Question 50Compliance Program Design and Risk Assessment

An institution operates in a jurisdiction with new data privacy rules. How should the compliance program respond?

  1. Continue operating unchanged until a breach occurs
  2. Wait for competitors to act first
  3. Update the risk assessment and controls to reflect the new obligations Correct answer.
  4. Apply the rules only to the legal department

Explanation

New regulatory obligations change the institution's risk profile and must be incorporated into the risk assessment, policies, and controls. Proactive adaptation demonstrates a responsive, risk-based program.