I85PREP
⌘ K
OBB study materials
OBB study resources

OBB practice questions

One question at a time. Build your OBB understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Regulatory Framework and Supervisory Requirements

Which body issues the Basel Framework standards that national banking supervisors use as a reference for capital and liquidity rules?

  1. The World Trade Organization
  2. The International Monetary Fund
  3. The Basel Committee on Banking Supervision Correct answer.
  4. The Financial Stability Board

Explanation

The Basel Committee on Banking Supervision is the standard-setting body that publishes the Basel Framework, covering capital adequacy, liquidity, and related supervisory standards. National authorities then transpose those standards into binding local rules. The other institutions have broader or different mandates and do not issue the Basel standards.

Question 2Regulatory Framework and Supervisory Requirements

Under the Basel Framework, what is the minimum ratio of Common Equity Tier 1 to risk-weighted assets that banks must meet, before any additional buffers are applied?

  1. 2.0%
  2. 6.0%
  3. 4.5% Correct answer.
  4. 8.0%

Explanation

The Basel Framework sets the minimum Common Equity Tier 1 ratio at 4.5% of risk-weighted assets. The 6.0% figure applies to total Tier 1 capital and 8.0% to total capital. The 2.0% figure corresponds to the capital conservation buffer rather than a minimum capital ratio.

Question 3Regulatory Framework and Supervisory Requirements

A bank's supervisor requires it to hold a countercyclical capital buffer. What is the primary purpose of this buffer?

  1. To cover operational losses from cyber incidents
  2. To fund deposit insurance schemes
  3. To build capital during credit expansions so it can be released during stress Correct answer.
  4. To replace the minimum capital requirements entirely

Explanation

The countercyclical capital buffer is designed to be built up when credit growth is excessive and system-wide risk is rising, then released in a downturn to help absorb losses without constraining lending. It supplements, rather than replaces, the minimum capital requirements. Deposit insurance and cyber losses are addressed through other regimes.

Question 4Regulatory Framework and Supervisory Requirements

Which liquidity standard requires a bank to hold sufficient high-quality liquid assets to survive a 30-day stress scenario?

  1. The Liquidity Coverage Ratio Correct answer.
  2. The large exposures limit
  3. The leverage ratio
  4. The Net Stable Funding Ratio

Explanation

The Liquidity Coverage Ratio requires enough high-quality liquid assets to cover net cash outflows over a 30-calendar-day stress period. The Net Stable Funding Ratio addresses structural funding over a one-year horizon. The leverage ratio and large exposures limit are capital and concentration measures, not short-term liquidity standards.

Question 5Regulatory Framework and Supervisory Requirements

A supervisor designates a bank as a global systemically important bank. What additional requirement does this designation typically trigger?

  1. A ban on holding government bonds
  2. A higher loss absorbency requirement based on the bank's systemic importance score Correct answer.
  3. A reduction in the minimum CET1 ratio
  4. Exemption from the leverage ratio

Explanation

G-SIBs must meet an additional loss absorbency requirement, commonly called the G-SIB buffer, calibrated to their systemic importance score. This raises, rather than lowers, their effective capital requirements. The designation does not prohibit sovereign holdings or exempt a bank from the leverage ratio.

Question 6Regulatory Framework and Supervisory Requirements

Which of the following best describes the supervisory review process known as Pillar 2 under the Basel Framework?

  1. The public disclosure of a bank's risk profile
  2. The calculation of minimum capital for credit risk
  3. The process by which supervisors assess a bank's risks and require additional capital where needed Correct answer.
  4. The setting of deposit insurance premiums

Explanation

Pillar 2 is the supervisory review process: supervisors evaluate whether a bank's capital is adequate for risks not fully captured by Pillar 1, such as concentration or interest rate risk in the banking book, and can impose add-ons. Pillar 3 covers disclosure, and Pillar 1 covers minimum risk-based capital calculations. Deposit insurance premiums are set outside the Basel capital pillars.

Question 7Regulatory Framework and Supervisory Requirements

A regulator requires banks to submit quarterly reports on large exposures. What risk is this reporting primarily intended to monitor?

  1. Interest rate risk in the trading book
  2. Short-term liquidity mismatch
  3. Operational losses from outsourcing
  4. Concentration of credit risk to individual counterparties or connected groups Correct answer.

Explanation

Large exposures regimes limit and monitor the concentration of credit risk arising from exposures to a single counterparty or a group of connected counterparties. They are not designed to measure liquidity mismatch, trading book interest rate risk, or outsourcing losses. Those risks are addressed through other supervisory tools.

Question 8Regulatory Framework and Supervisory Requirements

What is the main objective of the supervisory review and evaluation process that supervisors perform annually on banks?

  1. To set the bank's retail lending rates
  2. To evaluate a bank's overall risk profile and capital adequacy across all material risks Correct answer.
  3. To audit the bank's financial statements for accounting errors
  4. To approve individual customer loan applications

Explanation

The supervisory review and evaluation process assesses a bank's risk profile, governance, and capital adequacy across all material risks, and feeds into supervisory capital expectations. It is a prudential review, not a financial statement audit. Supervisors do not set retail lending rates or approve individual loans.

Question 9Regulatory Framework and Supervisory Requirements

A bank operates a branch in a foreign country. Which principle generally governs how the host supervisor and home supervisor share responsibility for that branch?

  1. Only the host supervisor has any supervisory role
  2. The home supervisor oversees the bank on a consolidated basis while the host supervisor oversees local operations Correct answer.
  3. The branch is supervised by an international court
  4. Only the home supervisor has any supervisory role

Explanation

Under the Basel Concordat principles, the home supervisor is responsible for consolidated supervision of the group, while the host supervisor oversees the local branch or subsidiary and its compliance with local rules. Effective supervision requires cooperation and information exchange between both. Neither supervisor acts alone, and no international court performs this role.

Question 10Regulatory Framework and Supervisory Requirements

Which of the following is the primary purpose of stress testing in prudential supervision?

  1. To calculate the bank's tax liability
  2. To assess how a bank's capital and liquidity would perform under severe but plausible adverse scenarios Correct answer.
  3. To determine the bank's current share price
  4. To verify the accuracy of customer identity records

Explanation

Stress testing examines whether a bank could withstand severe but plausible adverse scenarios, informing capital and liquidity planning and supervisory judgment. It is forward-looking and scenario-based, not a valuation, tax, or identity-verification exercise. Those tasks belong to other functions and rules.

Question 11Regulatory Framework and Supervisory Requirements

A supervisor requires a bank to maintain a recovery plan and a resolution plan. What distinguishes resolution planning from recovery planning?

  1. Resolution planning is prepared only by deposit insurers
  2. Resolution planning prepares for orderly wind-down or restructuring by authorities if recovery fails Correct answer.
  3. Resolution planning focuses on marketing new products
  4. Resolution planning replaces the bank's business strategy

Explanation

Recovery planning addresses actions a bank itself would take to restore viability, while resolution planning prepares authorities to wind down or restructure the bank in an orderly way if recovery fails. Resolution plans are prepared by the bank in cooperation with authorities, not solely by deposit insurers. Neither plan is a marketing or strategy document.

Question 12Regulatory Framework and Supervisory Requirements

What does the term 'risk-based capital' mean in prudential regulation?

  1. A fixed capital amount required of every bank regardless of activities
  2. Capital held only in the form of cash
  3. Capital raised exclusively through government bonds
  4. Capital requirements that vary with the riskiness of a bank's assets and exposures Correct answer.

Explanation

Risk-based capital links required capital to the risk profile of assets and exposures, so riskier portfolios require more capital. It is distinct from a flat capital requirement that ignores risk. Capital may be held in various eligible forms, and government bonds are one asset type rather than the definition of risk-based capital.

Question 13Regulatory Framework and Supervisory Requirements

A supervisor finds that a bank's internal models understate tail risk. Under the Basel market risk framework, what supervisory action is most appropriate?

  1. Reduce the bank's capital requirement to offset the model error
  2. Ignore the finding because internal models are never challenged
  3. Publish the bank's model code to the public
  4. Require additional capital through a multiplier add-on or model rejection until the model is remediated Correct answer.

Explanation

Where internal models are deficient, supervisors can apply a multiplier add-on to the model-based capital charge or withdraw model approval until remediation occurs. This preserves capital adequacy despite model weakness. Ignoring the finding or lowering capital would compound the understatement, and publishing model code is not a supervisory remedy.

Question 14Regulatory Framework and Supervisory Requirements

Which of the following instruments is generally eligible as Additional Tier 1 capital under the Basel Framework?

  1. A secured loan from a commercial bank
  2. Perpetual instruments with discretionary, non-cumulative dividends that can absorb losses Correct answer.
  3. A five-year term deposit from a retail customer
  4. Ordinary shares held by the bank in another company

Explanation

Additional Tier 1 capital consists of perpetual instruments that are subordinated, have fully discretionary non-cumulative distributions, and can absorb losses on a going-concern basis. Retail term deposits and secured interbank loans are liabilities, not regulatory capital. Holdings of another company's shares are assets, not capital instruments issued by the bank.

Question 15Regulatory Framework and Supervisory Requirements

What is the purpose of the leverage ratio in the Basel Framework?

  1. To constrain the build-up of excessive on-balance-sheet leverage independent of risk weights Correct answer.
  2. To set maximum interest rates on loans
  3. To measure short-term liquidity outflows
  4. To determine the bank's deposit insurance premium

Explanation

The leverage ratio is a non-risk-based backstop that limits excessive leverage by relating Tier 1 capital to a broad exposure measure regardless of risk weights. It complements, rather than duplicates, risk-based capital requirements. It does not measure liquidity outflows, set lending rates, or determine deposit insurance premiums.

Question 16Regulatory Framework and Supervisory Requirements

A bank wants to reduce its risk-weighted assets by using credit risk mitigation. Which condition must generally be satisfied for a guarantee to be recognised?

  1. The guarantor must be eligible and the guarantee must be legally effective and direct Correct answer.
  2. The guarantor must be a retail customer of the bank
  3. The guarantee must be verbal and undocumented
  4. The guarantee must cover less than one percent of the exposure

Explanation

Credit risk mitigation is recognised only where the protection is legally effective, direct, and provided by an eligible guarantor, with robust documentation and operational processes. Verbal or undocumented guarantees fail these tests. The guarantor's status as a retail customer or the size of the covered portion does not by itself determine eligibility.

Question 17Regulatory Framework and Supervisory Requirements

What role does the Basel Committee's supervisory review pillar play in relation to interest rate risk in the banking book?

  1. The risk is fully captured by credit risk weights so no review is needed
  2. The risk is transferred to deposit insurers
  3. Supervisors assess the risk and may require capital where it is not adequately captured Correct answer.
  4. The risk is prohibited from being measured

Explanation

Interest rate risk in the banking book is addressed under Pillar 2, where supervisors evaluate a bank's measurement and management of the risk and can impose capital add-ons if needed. It is not fully captured by credit risk weights, nor is it prohibited. Deposit insurers do not assume this market risk.

Question 18Regulatory Framework and Supervisory Requirements

Which of the following best describes the Basel principle on the supervisory approach to corporate governance at banks?

  1. Supervisors should assess whether the bank has robust governance, including an effective board and risk management Correct answer.
  2. Supervisors should manage the bank's daily operations
  3. Supervisors should appoint the bank's board members directly
  4. Supervisors should set executive remuneration levels for all staff

Explanation

Basel corporate governance principles expect supervisors to assess the adequacy of a bank's governance arrangements, including board effectiveness, risk management, and internal controls, and to act when deficiencies are found. Supervisors do not appoint board members, set all remuneration, or run daily operations, which remain the bank's responsibility.

Question 19Regulatory Framework and Supervisory Requirements

A supervisor is assessing whether a bank's capital buffer can be used during a period of stress. Which statement reflects the Basel buffer framework?

  1. Buffers are only available to banks with no lending activity
  2. Buffers must be rebuilt within one week of any drawdown
  3. Buffers can never be used under any circumstances
  4. Buffers can be drawn down in stress, but restrictions on distributions apply when buffers are breached Correct answer.

Explanation

Capital buffers are designed to be usable in stress, absorbing losses while the bank continues to operate. When a bank's buffer falls below the required level, automatic restrictions on distributions such as dividends and bonuses apply until it is restored. Buffers are not permanently locked, and no one-week rebuild deadline applies.

Question 20Regulatory Framework and Supervisory Requirements

Which of the following is a core element of the Basel Framework's approach to operational risk capital?

  1. A standardised approach that links capital to a bank's business indicator Correct answer.
  2. A requirement to hold capital only against credit losses
  3. A fixed capital charge identical for all banks worldwide
  4. A rule that operational risk is exempt from capital

Explanation

The Basel operational risk framework uses a standardised approach in which the capital charge is based on a business indicator reflecting the bank's income and business mix. Operational risk is not exempt from capital, nor is it covered by credit loss capital. A single fixed charge for all banks would not reflect differing business profiles.

Question 21Regulatory Framework and Supervisory Requirements

A bank's supervisor requires it to disclose capital, risk exposures, and risk management practices publicly. Which Basel pillar governs this requirement?

  1. Pillar 3 Correct answer.
  2. Pillar 2
  3. Pillar 1
  4. The leverage ratio framework

Explanation

Pillar 3 establishes market discipline through public disclosure requirements covering capital, risk exposures, and risk management. Pillar 1 sets minimum capital calculations, and Pillar 2 covers the supervisory review process. The leverage ratio is a capital measure, not a disclosure pillar.

Question 22Regulatory Framework and Supervisory Requirements

What is the purpose of a supervisory college for a cross-border banking group?

  1. To set the group's commercial strategy
  2. To market the group's products to investors
  3. To facilitate information exchange and coordinated supervision among home and host authorities Correct answer.
  4. To audit the group's tax returns

Explanation

Supervisory colleges bring together home and host authorities to share information, coordinate supervisory activities, and assess the group's risks on a consolidated basis. They do not set commercial strategy, audit tax returns, or market products. Those activities belong to the bank and other professional functions.

Question 23Regulatory Framework and Supervisory Requirements

Which of the following scenarios would most likely trigger the application of a systemic risk buffer by a national authority?

  1. A routine software update at one branch
  2. A single customer defaulting on a small loan
  3. A bank changing its brand name
  4. Persistent build-up of sectoral risk that threatens the financial system as a whole Correct answer.

Explanation

A systemic risk buffer addresses long-term, non-cyclical systemic risks, including sectoral concentrations that could threaten the wider financial system. A single small default, a rebranding, or a routine software update would not meet the threshold of system-wide risk. Such events are handled through ordinary risk management and supervisory follow-up.

Question 24Regulatory Framework and Supervisory Requirements

Under the Basel Framework, what is the treatment of a bank's holdings of its own Common Equity Tier 1 instruments for capital purposes?

  1. They are ignored entirely for capital purposes
  2. They are deducted from Common Equity Tier 1 capital Correct answer.
  3. They are counted as Additional Tier 1 capital
  4. They are added to Tier 2 capital

Explanation

Holdings of a bank's own CET1 instruments are deducted from CET1 capital to avoid double counting and to ensure capital is genuinely available to absorb losses. They cannot be counted as Additional Tier 1 or Tier 2 capital. They are not simply ignored, because deduction is required.

Question 25Regulatory Framework and Supervisory Requirements

What is the primary function of a bank's internal capital adequacy assessment process?

  1. To replace all regulatory reporting obligations
  2. To allow the bank to assess its capital needs relative to its own risk profile and business plan Correct answer.
  3. To determine the salaries of the board
  4. To set the bank's marketing budget

Explanation

The internal capital adequacy assessment process is the bank's own forward-looking evaluation of capital needs against its risk profile and business plan, complementing the supervisor's review. It does not replace regulatory reporting, which continues in parallel. Marketing budgets and board salaries are unrelated governance matters.

Question 26Regulatory Framework and Supervisory Requirements

Which body issues the Basel Framework that national supervisors use as the basis for bank capital rules?

  1. The Financial Stability Board
  2. The Basel Committee on Banking Supervision Correct answer.
  3. The World Trade Organization
  4. The International Monetary Fund

Explanation

The Basel Committee on Banking Supervision is the standard-setting body that publishes the Basel Framework, including the capital, liquidity and disclosure standards. National authorities then transpose those standards into binding local rules, often with adjustments. The other institutions have broader mandates but do not issue the Basel standards themselves.

Question 27Regulatory Framework and Supervisory Requirements

Under the Basel Framework, what minimum ratio of Common Equity Tier 1 to risk-weighted assets applies to internationally active banks?

  1. 2.0 percent
  2. 4.5 percent Correct answer.
  3. 6.0 percent
  4. 8.0 percent

Explanation

The Basel III framework sets the minimum Common Equity Tier 1 requirement at 4.5 percent of risk-weighted assets. The Tier 1 minimum is 6 percent and the total capital minimum is 8 percent. These minima sit below the buffer requirements that apply on top of them.

Question 28Regulatory Framework and Supervisory Requirements

What does the Basel liquidity coverage ratio require a bank to hold?

  1. Liquid assets equal to 20 percent of total deposits
  2. Stable funding for all loans maturing within one year
  3. Cash reserves covering outflows over a 90-day horizon
  4. High-quality liquid assets sufficient to cover net cash outflows over 30 calendar days Correct answer.

Explanation

The liquidity coverage ratio compares a stock of high-quality liquid assets with total net cash outflows expected over a 30-day stress period, and the stock must be at least 100 percent of those outflows. It is designed to ensure short-term resilience to a liquidity shock. The net stable funding ratio, by contrast, addresses structural funding over a one-year horizon.

Question 29Regulatory Framework and Supervisory Requirements

Which committee within a bank's governance structure is typically responsible for overseeing the internal capital adequacy assessment process and approving its risk appetite?

  1. The external auditor
  2. The internal audit function
  3. The board risk committee Correct answer.
  4. The asset-liability pricing desk

Explanation

The board and its risk committee are responsible for setting risk appetite and overseeing the internal capital adequacy assessment process, which is a board-level exercise rather than a purely technical one. Senior management then implements the framework within that approved appetite. Internal audit provides independent assurance rather than ownership of the process.

Question 30Regulatory Framework and Supervisory Requirements

A supervisor is deciding how to treat a bank's equity investment in an unlisted company under the standardised approach. Which Basel rule generally applies to such holdings?

  1. Equities receive the same weight as residential mortgages
  2. Equities are always risk-weighted at zero
  3. Equity exposures are excluded from the calculation of risk-weighted assets
  4. A 250 percent risk weight applies to equity exposures under the standardised approach Correct answer.

Explanation

Under the standardised approach for credit risk, equity exposures generally attract a 250 percent risk weight, reflecting their higher loss potential compared with senior debt. Some jurisdictions apply national discretion to certain equity holdings, but the default Basel treatment is the 250 percent weight. Equities are not excluded from risk-weighted assets.

Question 31Regulatory Framework and Supervisory Requirements

A bank's total capital ratio falls into the buffer range above its minimum requirements. What restriction applies under the capital conservation buffer regime?

  1. The bank must immediately raise new common equity within five business days
  2. Distributions such as dividends and bonuses are constrained according to the quartile of the buffer range the bank occupies Correct answer.
  3. The bank loses its licence to accept deposits
  4. The bank must convert all Tier 2 instruments into common equity

Explanation

When a bank's capital falls within the capital conservation buffer range, automatic limits apply to distributions, including dividends, share buybacks and discretionary bonus payments. The severity of the restriction increases as capital moves closer to the minimum. The mechanism is designed to keep capital inside the bank during stress rather than to trigger immediate resolution.

Question 32Regulatory Framework and Supervisory Requirements

A supervisor is calibrating a countercyclical capital buffer for its jurisdiction. Which consideration is most consistent with the Basel guidance?

  1. Tying the buffer strictly to the level of the policy interest rate
  2. Raising the buffer when credit growth is associated with a build-up of system-wide risk Correct answer.
  3. Lowering the buffer whenever bank profits rise
  4. Setting the buffer permanently at its maximum to simplify compliance

Explanation

The countercyclical capital buffer is intended to build capital during periods of excess credit growth and rising system-wide risk, and to be released during downturns. Jurisdictions may use credit-to-GDP gaps and other indicators as guides, but the decision involves judgement. It is not a fixed or permanently maximal requirement.

Question 33Regulatory Framework and Supervisory Requirements

A bank wants to use a guarantee from an eligible protection provider to reduce credit risk under the standardised approach. Which condition must be met for the protection to be recognised?

  1. The provider must be a subsidiary of the borrower
  2. The protection must be direct, explicit, irrevocable and unconditional, and the provider must be on the eligible list Correct answer.
  3. The protection must cover only the first loss portion of the exposure
  4. The guarantee must be oral but confirmed in a board minute

Explanation

Credit risk mitigation is recognised only when the protection is legally effective and satisfies the Basel conditions for eligibility, including being direct, explicit, irrevocable and unconditional. The protection provider must fall within the eligible categories such as sovereigns, banks and certain other entities. Informal or related-party arrangements do not qualify.

Question 34Regulatory Framework and Supervisory Requirements

What is the primary purpose of the supervisory review process in ensuring a bank holds capital commensurate with its risk profile?

  1. To require banks to hold capital above minimum levels where their specific risks are not fully captured by the rules Correct answer.
  2. To determine the salaries of senior risk officers
  3. To replace the minimum capital requirements with supervisory judgement
  4. To set each bank's dividend policy directly

Explanation

The supervisory review process exists because minimum requirements cannot capture every bank-specific risk. Supervisors assess a bank's internal capital adequacy and may impose additional capital or other measures where needed. It supplements rather than replaces the minimum requirements.

Question 35Regulatory Framework and Supervisory Requirements

A bank discloses its risk-weighted assets, capital ratios and remuneration practices in its annual report. Which part of the Basel Framework governs these disclosures?

  1. The net stable funding ratio standard
  2. The large exposures framework
  3. The liquidity coverage ratio standard
  4. The Pillar 3 disclosure requirements Correct answer.

Explanation

Pillar 3 of the Basel Framework sets out public disclosure requirements covering capital, risk exposures, risk management and remuneration. The aim is to promote market discipline by giving stakeholders comparable information. The other standards set substantive prudential requirements rather than disclosure rules.

Question 36Regulatory Framework and Supervisory Requirements

A supervisor is evaluating whether a bank's internal ratings-based model for corporate exposures is acceptable. Which requirement is central to the Basel approval process?

  1. The model must be approved by the bank's shareholders at a general meeting
  2. The model must produce risk weights identical to the standardised approach
  3. The bank must demonstrate that the model has been used for internal risk management purposes for a sufficient period Correct answer.
  4. The model must be reviewed by the bank's marketing department

Explanation

Use test requirements mean a bank must show that its internal models are genuinely used in credit decisions and risk management, not built only for regulatory capital. Supervisors also assess data quality, validation and governance before granting approval. Models will naturally produce different weights from the standardised approach.

Question 37Regulatory Framework and Supervisory Requirements

A bank holds a securitisation position rated investment grade by an eligible external credit assessment institution. Under the standardised approach for securitisation, how is the risk weight generally determined?

  1. By using the borrower's internal score without reference to the rating
  2. By mapping the external rating to the prescribed risk weight table Correct answer.
  3. By applying a flat 100 percent weight to all securitisation positions
  4. By assigning a zero weight to all rated tranches

Explanation

Under the standardised approach for securitisation, external ratings from eligible agencies are mapped to prescribed risk weights that vary with seniority and rating grade. Unrated positions follow a separate treatment, often involving supervisory formulas. The approach is not a flat weight for all tranches.

Question 38Regulatory Framework and Supervisory Requirements

A supervisor determines that a bank's internal model for market risk systematically underestimates tail losses. What supervisory response is most consistent with the Basel framework?

  1. Require additional capital through a multiplier add-on or capital surcharge reflecting the model's weaknesses Correct answer.
  2. Remove the bank's trading book entirely without further assessment
  3. Reduce the bank's disclosure obligations to avoid market concern
  4. Accept the model output unchanged because internal models are presumed accurate

Explanation

Where a model fails backtesting or is found to understate risk, the framework provides for a higher multiplication factor and additional capital charges. Supervisors may also require remediation of the model. Accepting deficient output would undermine the purpose of the model-based approach.

Question 39Regulatory Framework and Supervisory Requirements

A bank's supervisor is considering whether a capital instrument qualifies as Tier 2 capital. Which feature is essential for eligibility?

  1. The instrument must be subordinated to depositors and general creditors and have an original maturity of at least five years Correct answer.
  2. The instrument must be secured by a charge over the bank's loan book
  3. The instrument must pay a dividend that steps up automatically at year three
  4. The instrument must be repayable on demand at the holder's option

Explanation

Tier 2 instruments must be subordinated to depositors and general creditors, have an original maturity of at least five years, and be free of features such as step-ups or incentives to redeem that would undermine their loss-absorbing capacity. Secured instruments and demand-repayable instruments do not qualify. Amortisation applies in the final five years to maturity.

Question 40Regulatory Framework and Supervisory Requirements

A bank's supervisor identifies that the bank's internal capital adequacy assessment process relies on a single severe scenario and ignores reverse stress testing. What is the most appropriate supervisory conclusion?

  1. The process is adequate because one severe scenario is sufficient for capital planning
  2. The process is adequate because reverse stress testing is only relevant to insurers
  3. The process is deficient because it should consider a range of scenarios and identify business model vulnerabilities Correct answer.
  4. The process is deficient only if the bank's capital ratio is below the minimum

Explanation

Sound capital planning requires a range of stress scenarios, including severe but plausible ones, and reverse stress testing to identify what would make the business model unviable. Reliance on a single scenario leaves vulnerabilities undetected. The adequacy of the process is assessed independently of the current capital ratio.

Question 41Governance, Risk Management and Internal Controls

Which of the following best describes the primary purpose of an organization's internal control system?

  1. To provide reasonable assurance regarding the achievement of objectives related to operations, reporting, and compliance Correct answer.
  2. To eliminate the need for external audits
  3. To ensure that all employees follow every procedure without exception
  4. To guarantee that the organization will never experience a fraud loss

Explanation

Internal control is a process designed to provide reasonable, not absolute, assurance about achieving objectives in operations, reporting, and compliance. It acknowledges inherent limitations such as human error and collusion, so it cannot guarantee zero fraud or perfect compliance. External audits remain necessary for independent verification.

Question 42Governance, Risk Management and Internal Controls

In the COSO internal control framework, which component sets the tone of an organization and influences the control consciousness of its people?

  1. Control environment Correct answer.
  2. Control activities
  3. Information and communication
  4. Risk assessment

Explanation

The control environment is the set of standards, processes, and structures that provide the basis for carrying out internal control across the organization. It includes integrity and ethical values, board oversight, and organizational structure, and it sets the tone at the top. Risk assessment, control activities, and information and communication are separate components that operate within that environment.

Question 43Governance, Risk Management and Internal Controls

Which of the following is an example of a preventive control?

  1. A monthly bank reconciliation performed by the accounting manager
  2. A review of exception reports by the chief financial officer
  3. A segregation of duties between the purchasing agent and the accounts payable clerk Correct answer.
  4. An annual physical inventory count

Explanation

Preventive controls are designed to stop errors or fraud before they occur. Segregation of duties prevents one person from having both the ability to initiate a transaction and the ability to record or conceal it. Bank reconciliations, exception report reviews, and physical inventory counts are detective controls because they identify problems after the fact.

Question 44Governance, Risk Management and Internal Controls

What is the primary role of the board of directors in an organization's governance structure?

  1. To manage the day-to-day operations of the organization
  2. To provide independent oversight of management and protect shareholder interests Correct answer.
  3. To conduct the annual external audit
  4. To prepare the organization's financial statements

Explanation

The board of directors is responsible for overseeing management and ensuring that the organization operates in the best interests of shareholders. It provides strategic guidance, monitors performance, and holds management accountable. Day-to-day operations, financial statement preparation, and external audits are performed by management and independent auditors, respectively.

Question 45Governance, Risk Management and Internal Controls

Which of the following best describes the concept of 'tone at the top'?

  1. The frequency of internal audit reports
  2. The physical appearance of the corporate headquarters
  3. The ethical values and leadership style demonstrated by senior management and the board Correct answer.
  4. The level of employee satisfaction with compensation

Explanation

Tone at the top refers to the ethical atmosphere created by an organization's leadership. It reflects the values, attitudes, and behavior of senior management and the board, which influence the control consciousness of employees. Physical appearance, compensation satisfaction, and audit frequency are not components of tone at the top.

Question 46Governance, Risk Management and Internal Controls

Which of the following is a key responsibility of the audit committee?

  1. Overseeing the external audit and the internal audit function Correct answer.
  2. Approving the annual budget
  3. Managing the organization's investment portfolio
  4. Setting the salaries of all employees

Explanation

The audit committee, typically composed of independent directors, oversees the financial reporting process, the external audit, and the internal audit function. It helps ensure the independence and effectiveness of both audit functions. Budget approval, investment management, and salary setting are management or compensation committee responsibilities.

Question 47Governance, Risk Management and Internal Controls

Which of the following best defines 'risk appetite'?

  1. The amount of risk an organization is willing to accept in pursuit of its objectives Correct answer.
  2. The level of risk that remains after controls are applied
  3. The maximum insurance coverage an organization can obtain
  4. The process of eliminating all risks

Explanation

Risk appetite is the amount and type of risk that an organization is willing to accept in pursuit of its strategic objectives. It is set by management and the board and guides risk-taking decisions. Eliminating all risks is impossible, insurance coverage is a risk transfer tool, and residual risk is the risk remaining after controls.

Question 48Governance, Risk Management and Internal Controls

Which of the following is a detective control?

  1. Performing a monthly reconciliation of accounts receivable subsidiary ledger to the general ledger Correct answer.
  2. Restricting physical access to the inventory warehouse
  3. Requiring two signatures on checks above a certain amount
  4. Encrypting sensitive data at rest

Explanation

Detective controls are designed to identify errors or irregularities after they have occurred. A monthly reconciliation of the accounts receivable subsidiary ledger to the general ledger detects discrepancies and is therefore a detective control. Dual signatures, physical access restrictions, and encryption are preventive controls.

Question 49Governance, Risk Management and Internal Controls

In the context of internal control, what does 'segregation of duties' aim to achieve?

  1. To ensure that all employees have access to all systems
  2. To speed up the transaction processing cycle
  3. To prevent one individual from having control over all aspects of a transaction Correct answer.
  4. To reduce the number of employees needed for a process

Explanation

Segregation of duties is a preventive control that separates incompatible functions, such as authorization, custody, and recording, so that no single person can both perpetrate and conceal an error or fraud. It does not aim to broaden access, reduce headcount, or speed up processing; those may be side effects but not the control objective.

Question 50Governance, Risk Management and Internal Controls

A company's internal audit function reports directly to the audit committee rather than to the chief financial officer. What is the primary benefit of this reporting line?

  1. It enhances the independence and objectivity of the internal audit function Correct answer.
  2. It reduces the cost of the internal audit function
  3. It ensures that internal audit findings are ignored by management
  4. It allows internal audit to prepare the financial statements

Explanation

Reporting to the audit committee, which is composed of independent directors, helps internal audit remain free from management influence, thereby enhancing its independence and objectivity. Cost reduction is not the primary benefit, and internal audit does not prepare financial statements. Ignoring findings would be contrary to good governance.