I85PREP
⌘ K
SIDC Module 9 study materials
SIDC Module 9 study resources

SIDC Module 9 practice questions

One question at a time. Build your SIDC Module 9 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Unspecified content domain (source does not enumerate Module 9 domains)

Under the UK's sanctions framework, which body is responsible for granting licences that authorise activity otherwise prohibited by financial sanctions?

  1. The Prudential Regulation Authority (PRA)
  2. HM Treasury's Office of Financial Sanctions Implementation (OFSI) Correct answer.
  3. The Bank of England's Monetary Policy Committee
  4. The Financial Conduct Authority's authorisations department

Explanation

OFSI, within HM Treasury, administers financial sanctions in the UK and issues general and specific licences permitting conduct that would otherwise breach prohibitions. The PRA and FCA handle prudential and conduct regulation rather than sanctions licensing, and the MPC sets monetary policy.

Question 2Unspecified content domain (source does not enumerate Module 9 domains)

A portfolio manager receives price-sensitive information about an issuer from a sell-side analyst under a legitimate research arrangement. Which principle best determines whether dealing is permissible?

  1. Whether the analyst signed a confidentiality agreement with the issuer
  2. Whether the trade is executed on a regulated market or over the counter
  3. Whether the position size exceeds the fund's internal concentration limit
  4. Whether the information is materially non-public and the recipient knows or ought to know its source Correct answer.

Explanation

Market abuse rules turn on whether information is inside information and whether the recipient knows or should know that it is. Confidentiality agreements and execution venue are not the operative test, and position limits are a separate risk control.

Question 3Unspecified content domain (source does not enumerate Module 9 domains)

Which statement correctly describes the client money segregation requirement for an investment firm holding client assets?

  1. Client money must be held in a trust status account separate from the firm's own money Correct answer.
  2. Client money must be converted into government bonds within one business day
  3. Client money may be commingled with firm money provided records are kept
  4. Client money may be lent to affiliates if disclosed in the client agreement

Explanation

Client money rules require firms to hold client funds in designated trust accounts segregated from the firm's own assets so that clients are protected on insolvency. Commingling, lending to affiliates, and forced conversion are inconsistent with that protection.

Question 4Unspecified content domain (source does not enumerate Module 9 domains)

A firm's transaction reporting shows a trade reported to the wrong venue. Which control most directly prevents recurrence of this error?

  1. Increasing the frequency of the firm's annual compliance training
  2. Reconciling the venue identifier against the execution data at the point of reporting Correct answer.
  3. Shortening the settlement cycle for the affected instrument
  4. Adding a second approver to the client onboarding process

Explanation

A reconciliation control that validates the venue identifier against source execution data catches mismatches before submission. Training, onboarding approvals, and settlement timing address different risks and would not detect the reporting error.

Question 5Unspecified content domain (source does not enumerate Module 9 domains)

Under a risk-based approach to anti-money laundering, which factor should most increase a customer's risk rating?

  1. The customer has opted for paper statements
  2. The customer receives salary payments from a domestic employer
  3. The customer has held the account for more than five years
  4. The customer is a politically exposed person from a higher-risk jurisdiction Correct answer.

Explanation

PEP status combined with a higher-risk jurisdiction raises the risk of corruption-related laundering and warrants enhanced due diligence. Long tenure, domestic salary payments, and statement preferences are not risk escalators in themselves.

Question 6Unspecified content domain (source does not enumerate Module 9 domains)

A fund manager delegates portfolio management to a sub-adviser. Which arrangement best satisfies the expectation that delegation does not diminish the manager's accountability?

  1. The manager limits client communications to the sub-adviser's disclosures
  2. The manager retains oversight, monitoring and ultimate responsibility for the delegated activity Correct answer.
  3. The manager transfers the relevant regulatory permissions to the sub-adviser
  4. The sub-adviser accepts full regulatory responsibility in place of the manager

Explanation

Delegation does not transfer regulatory responsibility; the delegating firm must retain oversight and remain accountable. Permissions cannot be transferred wholesale, and responsibility cannot be disclaimed by contract.

Question 7Unspecified content domain (source does not enumerate Module 9 domains)

Which action best demonstrates that a firm has embedded a speak-up culture?

  1. Independent channels for raising concerns with escalation and non-retaliation protections Correct answer.
  2. A requirement that concerns be raised first with the line manager
  3. An annual email reminding staff of the whistleblowing policy
  4. A policy stored on the intranet without monitoring of its use

Explanation

Effective speak-up arrangements require accessible independent channels, clear escalation, and protection against retaliation. A single annual reminder, mandatory line-manager escalation, and unmonitored policies are weaker indicators.

Question 8Unspecified content domain (source does not enumerate Module 9 domains)

A firm discovers that a staff member has been circumventing a trading limit by splitting orders. Which control weakness does this most directly indicate?

  1. The firm's market risk appetite statement is out of date
  2. Trade settlement reconciliation is performed weekly
  3. Client suitability assessments are incomplete
  4. Order-level surveillance does not aggregate related orders to detect splitting Correct answer.

Explanation

Order-splitting evasion is detected by surveillance that aggregates related orders and looks for patterns rather than isolated tickets. Risk appetite documentation, settlement timing, and suitability are separate control areas.

Question 9Unspecified content domain (source does not enumerate Module 9 domains)

Which statement best describes the purpose of the Senior Managers and Certification Regime for individuals?

  1. It replaces all prudential capital requirements for banks
  2. It assigns defined responsibilities to senior managers and requires firms to certify fitness of key staff Correct answer.
  3. It sets the maximum remuneration payable to executives
  4. It removes the need for firms to conduct fitness checks

Explanation

The regime allocates prescribed responsibilities to senior managers and requires firms to certify the fitness and propriety of staff in significant roles. It does not replace capital rules, cap pay, or eliminate fitness checks.

Question 10Unspecified content domain (source does not enumerate Module 9 domains)

A client instructs a firm to execute a trade that the firm believes is unsuitable for the client's stated objectives. Under a suitability obligation, what is the most appropriate response?

  1. Execute without comment because the client gave a direct instruction
  2. Warn the client of the unsuitability and proceed only if the client gives informed instruction where permitted Correct answer.
  3. Refuse all future business with the client
  4. Report the client to the regulator for unsuitable instructions

Explanation

Where execution-only or client-directed activity is permitted, the firm should warn the client about unsuitability and document the instruction. Silent execution ignores the obligation, while refusing business or reporting the client is disproportionate.

Question 11Unspecified content domain (source does not enumerate Module 9 domains)

Which scenario most clearly constitutes a conflict of interest requiring disclosure and management?

  1. A firm publishes its order execution policy on its website
  2. A firm's research team is incentivised by investment banking revenue from issuers it covers Correct answer.
  3. A firm uses a single custodian for all client assets
  4. A firm charges clients a disclosed management fee

Explanation

Linking research analyst incentives to investment banking revenue creates a conflict between objective research and revenue generation. Custody arrangements, disclosed fees, and published policies are not conflicts in themselves.

Question 12Unspecified content domain (source does not enumerate Module 9 domains)

A firm's operational resilience programme identifies an important business service. Which step should follow identification according to a typical resilience framework?

  1. Set impact tolerances and map the people, processes and systems supporting the service Correct answer.
  2. Increase the marketing budget for the service
  3. Immediately outsource the service to a third party
  4. Reduce the number of staff supporting the service

Explanation

Resilience frameworks require firms to set impact tolerances for important business services and map dependencies so that disruption can be tested and managed. Outsourcing, marketing, or staffing cuts do not follow from identification.

Question 13Unspecified content domain (source does not enumerate Module 9 domains)

Which practice best supports the integrity of a firm's personal account dealing policy?

  1. Relying on staff to self-certify annually without monitoring
  2. Exempting senior staff from personal dealing rules
  3. Allowing staff to trade any instrument after notifying compliance retrospectively
  4. Requiring pre-clearance of trades and maintaining a register of personal holdings Correct answer.

Explanation

Pre-clearance and a holdings register prevent and detect conflicts between staff dealings and firm or client activity. Retrospective notification, self-certification alone, and senior exemptions undermine the policy.

Question 14Unspecified content domain (source does not enumerate Module 9 domains)

Which statement about the treatment of inside information under market abuse rules is accurate?

  1. Insider lists are only required for listed issuers, never for advisers
  2. Inside information loses its status once it is discussed internally
  3. Firms must control access to inside information and maintain insider lists where required Correct answer.
  4. Inside information may be shared with clients if it may increase trading volumes

Explanation

Firms must restrict access to inside information and maintain insider lists for relevant transactions. Sharing to stimulate trading would be unlawful disclosure, and internal discussion does not remove the information's status.

Question 15Unspecified content domain (source does not enumerate Module 9 domains)

A firm discovers a payment to a sanctioned individual that was processed before the sanctions screening alert was cleared. What is the most appropriate immediate action?

  1. Delete the screening alert to avoid duplicate records
  2. Continue processing further payments pending legal advice
  3. Reverse the payment and take no further action
  4. Freeze the relevant funds, escalate internally and consider a disclosure to the competent authority Correct answer.

Explanation

Dealing with sanctioned persons triggers obligations to freeze funds, report to the competent authority, and investigate. Simply reversing the payment, continuing processing, or deleting records would breach those obligations.

Question 16Unspecified content domain (source does not enumerate Module 9 domains)

Which element is essential to a valid client categorisation as an elective professional client?

  1. The firm decides unilaterally that the client is professional
  2. The client is a regulated entity in any jurisdiction
  3. The client meets quantitative thresholds and confirms in writing that it wishes to be treated as professional Correct answer.
  4. The client has been a customer for at least ten years

Explanation

Elective professional status requires the client to meet specified thresholds and to give written consent after being informed of the protections lost. Tenure, foreign regulation, or unilateral firm decisions are insufficient.

Question 17Unspecified content domain (source does not enumerate Module 9 domains)

Which outcome best indicates that a firm's complaints handling process is effective?

  1. All complaints are closed within one day regardless of complexity
  2. Complaints are logged but not reported to senior management
  3. Complaints are resolved promptly, root causes are analysed and recurring issues drive remediation Correct answer.
  4. Complainants are asked to withdraw complaints before investigation

Explanation

Effective complaints handling resolves issues promptly, analyses root causes, and feeds lessons into remediation and management information. Closing without investigation, withholding reporting, or discouraging complaints undermines the process.

Question 18Unspecified content domain (source does not enumerate Module 9 domains)

A firm uses a third-party cloud provider to host client records. Which arrangement best reflects expected outsourcing and operational resilience standards?

  1. Verbal assurances from the provider about data security
  2. Transfer of regulatory responsibility to the cloud provider
  3. Documented due diligence, contractual access and audit rights, and exit planning Correct answer.
  4. Reliance on the provider's public certifications without further review

Explanation

Material outsourcing requires due diligence, contractual rights including access and audit, and a credible exit plan. Relying on public certifications alone, transferring responsibility, or accepting verbal assurances is inadequate.

Question 19Unspecified content domain (source does not enumerate Module 9 domains)

Which measure best mitigates the risk that a firm's algorithmic trading system generates erroneous orders?

  1. Allowing traders to override all automated controls
  2. Increasing the number of order routing venues
  3. Deploying changes directly to production without testing
  4. Pre-trade risk controls with kill-switch functionality and testing before deployment Correct answer.

Explanation

Pre-trade controls, kill switches, and pre-deployment testing are standard safeguards against erroneous algorithmic orders. More venues, unrestricted overrides, and untested deployment increase rather than reduce risk.

Question 20Unspecified content domain (source does not enumerate Module 9 domains)

Which statement best explains the role of a firm's money laundering reporting officer (MLRO)?

  1. The MLRO personally guarantees the firm's AML compliance to the regulator
  2. The MLRO is responsible for setting the firm's capital adequacy
  3. The MLRO approves all client trades above a set value
  4. The MLRO receives internal suspicious activity reports and decides whether to make an external disclosure Correct answer.

Explanation

The MLRO is the nominated officer who assesses internal reports and decides on external suspicious activity disclosures. Trade approvals, capital adequacy, and personal guarantees fall outside that role.

Question 21Unspecified content domain (source does not enumerate Module 9 domains)

A firm's board is reviewing its risk appetite. Which approach best demonstrates an effective risk appetite framework?

  1. A single statement that the firm has a low appetite for all risks
  2. Limits set only by front-office staff without board involvement
  3. Qualitative statements supported by quantitative limits that are monitored and escalated when breached Correct answer.
  4. An annual review with no monitoring between reviews

Explanation

An effective framework combines qualitative statements with measurable limits, ongoing monitoring, and escalation on breach. A single blanket statement, front-office-only limits, or review without monitoring is inadequate.

Question 22Unspecified content domain (source does not enumerate Module 9 domains)

Which action best supports fair treatment of customers when a product is being designed?

  1. Relying solely on the sales team to identify customer needs
  2. Launching the product before completing the risk assessment
  3. Assessing the target market and testing whether the product meets their needs throughout its lifecycle Correct answer.
  4. Setting the price to maximise margin regardless of customer outcomes

Explanation

Fair treatment begins at product design with target market definition and lifecycle testing of customer outcomes. Margin-first pricing, premature launch, and reliance on sales alone undermine that objective.

Question 23Unspecified content domain (source does not enumerate Module 9 domains)

A firm identifies that a trader has been marking illiquid positions at stale prices to smooth reported performance. Which control should be strengthened?

  1. Increasing the trader's position limits
  2. Allowing traders to approve their own marks
  3. Independent price verification with challenge of valuation inputs and stale-price detection Correct answer.
  4. Reducing the frequency of valuation committee meetings

Explanation

Independent price verification, including challenge of inputs and detection of stale prices, is the key control against valuation manipulation. Raising limits, cutting oversight, or self-approval weakens controls.

Question 24Unspecified content domain (source does not enumerate Module 9 domains)

Which statement about record-keeping obligations for communications is most accurate?

  1. Firms must retain records of business communications for the prescribed period and produce them on request Correct answer.
  2. Communications may be deleted once a trade settles
  3. Retention periods are set by individual employees
  4. Only written letters must be retained

Explanation

Firms are required to retain business communications for prescribed periods and produce them to regulators on request. Deleting after settlement, limiting retention to letters, or leaving periods to staff is inconsistent with those obligations.

Question 25Unspecified content domain (source does not enumerate Module 9 domains)

A firm's independent compliance function reports to the head of the business unit it monitors. Which governance change best strengthens its independence?

  1. Increasing the compliance team's budget without changing reporting lines
  2. Requiring compliance to approve all marketing materials
  3. Establishing a reporting line to the board or a board committee with direct access Correct answer.
  4. Rotating compliance staff into the business unit annually

Explanation

Independence is strengthened when compliance reports to the board or a board committee rather than to the business it oversees. Budget increases, staff rotation, and additional approvals do not remedy the reporting conflict.

Question 26Unspecified content domain (source does not enumerate Module 9 domains)

Under the SIDC framework, which activity requires a firm to hold the appropriate SIDC licence before it can be carried out?

  1. Recruiting staff for a regulated subsidiary
  2. Publishing a general market commentary newsletter for subscribers
  3. Preparing internal management accounts for the firm's board
  4. Dealing in securities as a principal for its own account Correct answer.

Explanation

SIDC licensing is triggered by carrying on specified regulated activities, and dealing in securities as principal is a core regulated activity. Internal administrative functions and general commentary that is not investment advice fall outside the licensed perimeter. The licence must be in place before the activity begins.

Question 27Unspecified content domain (source does not enumerate Module 9 domains)

A firm's compliance manual states that employees must report suspected market abuse to the compliance department. Which feature of the reporting channel most directly determines whether the channel is effective?

  1. It routes all reports to the line manager of the reporter
  2. It requires reporters to identify themselves in writing
  3. It allows anonymous reporting and protects reporters from retaliation Correct answer.
  4. It is available only during standard office hours

Explanation

An effective escalation channel protects confidentiality and shields reporters from retaliation, which encourages disclosure of suspected abuse. Restricting timing or forcing identification raises barriers that suppress reporting. Routing reports to the reporter's own line manager can create a conflict where that manager is implicated.

Question 28Unspecified content domain (source does not enumerate Module 9 domains)

Which statement accurately describes the treatment of client money held by a SIDC-licensed firm?

  1. Client money may be used for short-term liquidity needs of the firm
  2. Client money must be converted to the firm's base currency on receipt
  3. Client money may be commingled with the firm's own funds provided records are kept
  4. Client money must be segregated and held in designated client accounts Correct answer.

Explanation

Client money rules require segregation from the firm's own assets and holding in designated accounts so that it can be identified and returned if the firm fails. Commingling or using client money for the firm's liquidity breaches that protection. Currency conversion is not a segregation requirement.

Question 29Unspecified content domain (source does not enumerate Module 9 domains)

A SIDC-licensed firm is designing its governance structure. Which arrangement best reflects sound corporate governance for a regulated entity?

  1. Committee membership rotates monthly among junior staff
  2. The chief executive chairs the audit committee to streamline decisions
  3. Independent non-executive directors sit on key board committees Correct answer.
  4. The board delegates all risk oversight to the front office

Explanation

Sound governance relies on independent oversight, and independent non-executive directors on audit and risk committees provide that challenge to executive management. A chief executive chairing the audit committee compromises independence. Delegating risk oversight to the front office removes the necessary separation from revenue generation.

Question 30Unspecified content domain (source does not enumerate Module 9 domains)

Which statement best describes the purpose of a firm's know-your-customer (KYC) process under SIDC requirements?

  1. To generate cross-selling opportunities from client data
  2. To replace the need for ongoing transaction monitoring
  3. To verify identity and understand the client's business before establishing the relationship Correct answer.
  4. To satisfy marketing targets set by the sales desk

Explanation

KYC exists to establish and verify client identity and to understand the nature of the client's business and risk profile before onboarding. It is a control against money laundering and financial crime, not a sales tool. It complements, and does not replace, ongoing monitoring.

Question 31Unspecified content domain (source does not enumerate Module 9 domains)

A firm's training programme on market conduct is being reviewed. Which design choice most likely improves the effectiveness of the training?

  1. A single induction session for all new joiners only
  2. Annual sessions that cover only the text of the rulebook
  3. Scenario-based training tailored to the desks being trained Correct answer.
  4. Training delivered exclusively by the sales team leaders

Explanation

Training is more effective when it uses realistic scenarios relevant to the specific business activities of the audience, making the rules concrete. Rulebook recitation or a one-off induction does not build durable awareness. Delivery by revenue leaders alone risks diluting the compliance message.

Question 32Unspecified content domain (source does not enumerate Module 9 domains)

Which statement correctly describes the role of a firm's compliance function in relation to the first line of defence?

  1. Compliance independently monitors and challenges first-line controls Correct answer.
  2. Compliance sets the firm's commercial strategy
  3. Compliance approves all marketing spend
  4. Compliance executes trades alongside the front office

Explanation

The compliance function provides independent second-line oversight, monitoring and challenging the controls operated by the business. It should not perform front-office execution or commercial strategy roles, which would compromise its independence. Marketing spend approval is a business decision, not a compliance control.

Question 33Unspecified content domain (source does not enumerate Module 9 domains)

A SIDC-licensed firm receives a client complaint about delayed execution. Which first step best reflects an effective complaints handling process?

  1. Wait until several similar complaints accumulate before acting
  2. Forward the complaint to the sales desk for a verbal response only
  3. Log the complaint, acknowledge it promptly and assign it for investigation Correct answer.
  4. Discard the complaint if the client cannot provide written evidence

Explanation

Effective complaints handling requires prompt logging, acknowledgement and investigation so that the issue is addressed and can be analysed for root causes. Discarding complaints or responding only verbally undermines records and accountability. Waiting for accumulation delays redress and hides systemic problems.

Question 34Unspecified content domain (source does not enumerate Module 9 domains)

A firm's anti-money laundering programme includes customer due diligence. Which situation most clearly requires enhanced due diligence?

  1. A corporate client renewing an existing facility with unchanged ownership
  2. A retail client purchasing a low-value savings product
  3. A long-standing client with stable, verified income and low-risk activity
  4. A politically exposed person opening a private wealth account Correct answer.

Explanation

Politically exposed persons present a higher money laundering risk and are a standard trigger for enhanced due diligence, including source-of-wealth checks and senior sign-off. Long-standing low-risk clients and routine renewals normally fall within standard due diligence. Enhanced measures apply where risk is elevated.

Question 35Unspecified content domain (source does not enumerate Module 9 domains)

A firm's board is approving a new product that carries features the firm has not previously offered. Which action best reflects the product governance expectations for a SIDC-licensed firm?

  1. Launch the product and assess risks after the first quarter of sales
  2. Identify the target market and assess risks before approval and launch Correct answer.
  3. Rely on the product provider's risk assessment without independent review
  4. Delegate approval to the sales desk closest to the customers

Explanation

Product governance requires the firm to define the target market and assess the risks and suitability of a product before it is approved and launched. Post-launch assessment or reliance on a provider without independent review leaves customers exposed. Delegating approval to the sales desk removes the necessary challenge.

Question 36Unspecified content domain (source does not enumerate Module 9 domains)

A trader at a SIDC-licensed firm receives a tip about an upcoming takeover from a contact at another firm. Which action is required under market abuse rules?

  1. Share the tip with colleagues so the firm can benefit
  2. Record the tip only if a trade is subsequently executed
  3. Refrain from dealing and report the receipt of inside information Correct answer.
  4. Trade quickly before the information becomes public

Explanation

Receiving inside information obliges the recipient not to deal or encourage others to deal, and to report the receipt to compliance. Trading on the tip or spreading it constitutes market abuse. Recording obligations apply regardless of whether a trade follows.

Question 37Unspecified content domain (source does not enumerate Module 9 domains)

A firm's outsourcing arrangement with a technology provider is being reviewed. Which contractual element is most important to preserve regulatory oversight?

  1. A fixed fee that cannot be adjusted for service failures
  2. A clause allowing the provider to subcontract without notice
  3. Exclusivity preventing the firm from using other providers
  4. Rights for the firm and its regulator to access records and audit the provider Correct answer.

Explanation

Outsourcing contracts must preserve the firm's and the regulator's ability to access records and audit the provider so that oversight is not lost. Unnotified subcontracting can dilute control over critical services. Fee and exclusivity terms do not address regulatory access.

Question 38Unspecified content domain (source does not enumerate Module 9 domains)

A firm's risk register identifies a control that has failed repeatedly. Which response best reflects a sound risk management approach?

  1. Increase the risk appetite so the failure becomes acceptable
  2. Rely on staff vigilance instead of a formal control
  3. Remove the control from the register to reduce reported risk
  4. Assess the root cause and strengthen or redesign the control Correct answer.

Explanation

Repeated control failures call for root-cause analysis and remediation, either strengthening the existing control or redesigning it. Removing the control or relying on vigilance masks rather than manages the risk. Raising risk appetite to accommodate a failing control inverts the logic of risk management.

Question 39Unspecified content domain (source does not enumerate Module 9 domains)

Which statement about the reporting of suspicious transactions under SIDC anti-money laundering requirements is most accurate?

  1. Reports are required only for transactions above a fixed threshold
  2. Reports may be shared with the client to obtain clarification
  3. Reports should be filed only after the firm has confirmed the suspicion is correct
  4. Reports should be filed promptly on suspicion and kept confidential Correct answer.

Explanation

Suspicious transaction reports are made promptly on reasonable suspicion, not after proof is established, and confidentiality must be maintained to avoid tipping off. Informing the client risks tipping off and is prohibited. Thresholds do not remove the duty to report genuine suspicion.

Question 40Unspecified content domain (source does not enumerate Module 9 domains)

A firm's conflict of interest policy requires identification and management of conflicts. Which measure best manages a conflict arising from a research analyst also advising the corporate finance team?

  1. Disclose the conflict only after the deal is completed
  2. Impose information barriers and separate reporting lines Correct answer.
  3. Rely on the analyst's personal judgement to stay impartial
  4. Allow the analyst to advise on deals without restriction

Explanation

Managing analyst conflicts typically involves information barriers and separate reporting lines to prevent corporate finance influence over research. Unrestricted involvement or reliance on personal judgement leaves the conflict unmanaged. Disclosure after completion is too late to protect clients.

Question 41Unspecified content domain (source does not enumerate Module 9 domains)

A firm's board is evaluating its operational resilience arrangements. Which outcome best indicates that an important business service can withstand disruption?

  1. The service relies on a single provider with no fallback
  2. The service has never experienced an outage in the past year
  3. The service has a documented owner but no tested recovery plan
  4. The service can continue within impact tolerances during tested severe scenarios Correct answer.

Explanation

Operational resilience is demonstrated when an important business service can remain within its impact tolerances during severe but plausible disruption, verified through testing. A documented owner without testing or a single provider with no fallback leaves the service fragile. Past absence of outages does not prove resilience.

Question 42Unspecified content domain (source does not enumerate Module 9 domains)

Which practice best supports the integrity of a firm's best execution obligation for client orders?

  1. Prioritising the firm's proprietary trades over client orders
  2. Setting execution policy once and never reviewing it
  3. Executing all orders on a single venue regardless of client interests
  4. Monitoring execution quality across venues and reviewing execution factors Correct answer.

Explanation

Best execution requires the firm to take all sufficient steps to obtain the best result for clients, which involves monitoring execution quality across venues and reviewing the relevant execution factors. A single fixed venue, front-running client orders or a static policy undermines that obligation.

Question 43Unspecified content domain (source does not enumerate Module 9 domains)

A firm is assessing whether a new employee is fit and proper for a controlled function. Which factor is most relevant to that assessment?

  1. The employee's competence, honesty and financial soundness Correct answer.
  2. The employee's membership of a professional association
  3. The employee's personal investment portfolio
  4. The employee's length of service at a previous employer alone

Explanation

Fit and proper assessments consider competence, honesty, integrity and financial soundness relevant to the role. Length of service alone, personal investments or association membership do not establish suitability. The assessment focuses on the attributes needed to perform the controlled function properly.

Question 44Unspecified content domain (source does not enumerate Module 9 domains)

A firm discovers that a client's beneficial ownership information was not updated after a change of control. Which action best addresses the deficiency?

  1. Rely on the original onboarding documentation as sufficient
  2. Refresh due diligence promptly and reassess the client's risk rating Correct answer.
  3. Close the account without any further review
  4. Update the records at the next scheduled periodic review only

Explanation

When beneficial ownership changes, the firm should refresh due diligence promptly and reassess the client's risk rating rather than waiting for a routine review. Closing the account without review or relying on outdated documentation leaves the firm exposed to financial crime risk. Ongoing due diligence is a continuing obligation.

Question 45Unspecified content domain (source does not enumerate Module 9 domains)

A firm's senior management is reviewing the escalation of conduct issues. Which arrangement best ensures that serious conduct breaches reach the board?

  1. Escalation depends on the discretion of the individual involved
  2. Breaches are resolved entirely within the originating desk
  3. Only financial losses above a fixed amount are reported upward
  4. Defined escalation thresholds route serious breaches to a board committee Correct answer.

Explanation

Clear escalation thresholds that route serious conduct breaches to a board-level committee ensure that significant issues receive appropriate oversight. Resolving breaches within the desk or relying on individual discretion can conceal serious matters. Financial loss thresholds alone miss non-financial conduct harm.

Question 46Unspecified content domain (source does not enumerate Module 9 domains)

A SIDC-licensed firm is reviewing its approach to managing conflicts between two client accounts with opposing interests in the same security. Which approach best reflects fair treatment of both clients?

  1. Delay both orders indefinitely to avoid the conflict
  2. Favour the larger account because it generates more revenue
  3. Execute only the order of the client who complains first
  4. Apply a disclosed, consistent allocation policy and document the rationale Correct answer.

Explanation

Where client interests conflict, fair treatment requires a disclosed, consistent allocation policy applied with documented rationale. Favouring the larger account or the first complainant is arbitrary and unfair. Indefinite delay harms both clients and does not resolve the conflict.

Question 47Unspecified content domain (source does not enumerate Module 9 domains)

A firm's internal audit function reports findings that a key control has been overridden by a senior manager. Which governance response is most appropriate?

  1. Escalate to the audit committee and require remediation with accountability Correct answer.
  2. Ask the manager to self-certify that the override will not recur
  3. Record the finding but take no further action
  4. Suppress the finding to protect the manager's reputation

Explanation

A control override by a senior manager is a serious governance matter that should be escalated to the audit committee and remediated with clear accountability. Suppressing the finding or relying on self-certification fails to address the breach. Recording without action leaves the control weakness in place.

Question 48Unspecified content domain (source does not enumerate Module 9 domains)

A firm is assessing the adequacy of its market risk limits. Which approach best demonstrates that limits are calibrated to the firm's risk appetite?

  1. Setting limits at the maximum level the trading system allows
  2. Deriving limits from approved risk appetite and reviewing them against utilisation Correct answer.
  3. Setting limits once at inception and leaving them unchanged
  4. Allowing traders to raise their own limits when opportunities arise

Explanation

Limits should be derived from the board-approved risk appetite and reviewed against utilisation so they remain meaningful. Setting limits at system maximums or leaving them static disconnects them from risk appetite. Allowing traders to raise their own limits removes independent control.

Question 49Unspecified content domain (source does not enumerate Module 9 domains)

A firm's compliance monitoring plan covers only activities that generated complaints in the prior year. Which criticism of this approach is most valid?

  1. It relies too heavily on independent testing
  2. It is reactive and may miss emerging or latent conduct risks Correct answer.
  3. It is too broad and duplicates the work of internal audit
  4. It exceeds the resources available to the compliance function

Explanation

A monitoring plan driven solely by past complaints is reactive and can overlook emerging or latent risks that have not yet surfaced as complaints. A risk-based plan should also draw on risk assessments and regulatory developments. The main weakness is coverage, not excessive breadth or over-testing.

Question 50Unspecified content domain (source does not enumerate Module 9 domains)

A firm is designing controls around the use of external electronic communications by staff. Which control design best balances regulatory record-keeping with practical operation?

  1. Capture and retain business communications on approved channels and monitor use Correct answer.
  2. Prohibit all electronic communication with clients
  3. Allow unrecorded channels provided staff keep personal copies
  4. Require staff to summarise verbal conversations from memory

Explanation

Record-keeping obligations are met by capturing and retaining business communications on approved channels while monitoring for unapproved use. Prohibiting all electronic communication is impractical and unnecessary. Unrecorded channels or memory-based summaries fail to produce reliable records.