Free Advanced-CAMS-Audit sample questions

Correct answer: The independence of the Second Line is compromised as they are performing First Line operational duties, rendering them unable to independently monitor those activities.

The Three Lines of Defense model relies on the separation of duties. The First Line owns and manages risk (operations), while the Second Line oversees and monitors risk (compliance). If Compliance performs operational tasks (alert adjudication), they cannot objectively monitor or test those same tasks, creating a fundamental governance failure.

Correct answer: Functional reporting to the CFO impairs auditor independence, as the audit function must report functionally to the Audit Committee or Board to remain objective.

To ensure independence, the internal audit function (Third Line) must report functionally to the Board of Directors or its Audit Committee. Reporting functionally to the CFO (management) creates a conflict of interest and impairs the auditor's ability to report on management's performance without fear of retaliation or constraint.

Correct answers: Significant changes in the bank's risk profile, such as the introduction of new products or entry into new jurisdictions.; Identification of a new potential control weakness or a regulatory enforcement action against a peer institution for similar control failures.

The Wolfsberg Principles highlight that material changes in the risk profile (new products, services, geographies) are key triggers for reviewing the adequacy of the AML program.

Triggers for audit/review include identified weaknesses or external factors like regulatory actions against peers that suggest a need to verify the institution's own controls.

Correct answer: The Service Level Agreement (SLA) defining quality assurance metrics and the bank's right to audit.

The SLA is the foundational governance document for outsourcing. It must specify performance metrics (quality/timeliness), the specific AML responsibilities, and crucially, the bank's 'right to audit' the vendor. Without this, the bank cannot assure the regulator that the outsourced function is compliant.

Correct answer: The lack of interpretability regarding how the model reaches specific decisions or alert generation conclusions.

The 'Black Box' problem refers to the difficulty in explaining the internal decision-making logic of complex AI/ML models. For AML audit and regulatory purposes, 'explainability' is critical to demonstrate why a customer was flagged or not flagged. If the model's logic cannot be interpreted, its effectiveness cannot be validated.

Correct answer: False

False. The First Line (Business) and Second Line (Compliance) are responsible for designing and implementing controls. The Third Line (Internal Audit) provides independent assurance on the effectiveness of those controls but does not design or implement them to maintain independence.