Which blockchain characteristic makes forensic tracing of transactions possible?
Correct Answer: C
Blockchain's immutability ensures that all transactions remain permanently recorded and tamper-proof, enabling blockchain analytics to trace illicit funds. This property is leveraged in crypto forensic investigations and AML monitoring.
Question 2
A compliance officer at an exchange who is conducting an annual risk assessment identifies an increased volume of transactions to and from unhosted wallets. Based on Financial Action Task Force guidance, which inherent risk rating would be most appropriate for the compliance officer to assign to such activities?
Correct Answer: D
The Financial Action Task Force (FATF) guidance on Virtual Assets and Virtual Asset Service Providers (VASPs) explicitly highlights that transactions involving unhosted wallets (wallets not held or controlled by a regulated entity) pose a high inherent risk for money laundering and terrorist financing. This is because unhosted wallets are more difficult to monitor and control, lack identifiable customer information, and are often exploited for illicit activities. The DFSA AML Module, aligned with FATF recommendations, mandates that Relevant Persons incorporate this risk into their business-wide risk assessments. The increased volume of transactions to and from unhosted wallets should therefore be assigned a high inherent risk rating to trigger enhanced controls such as enhanced due diligence (EDD) and transaction monitoring. Supporting extracts include: FATF Guidance on Virtual Assets (October 2021) states: "Unhosted wallets or transactions with them represent a high risk of ML/TF due to limited or no access to identifying information." DFSA AML Module (AML/VER25/05-24) Section 4.1 & 6.1 on Risk-Based Approach: mandates firms to assess and rate risks posed by customers and products, explicitly including virtual assets and unhosted wallets as high risk. COB Module also requires heightened controls and disclosures when dealing with transactions involving unhosted wallets【AML/VER25/05-24: Sections 4.1, 6.1, COB/VER45/05-24: Sections 6.13, 15.6】. Thus, option D (High) is the correct risk rating.
Question 3
Which risk category best reflects the risks associated with payment methods (e.g., cash, wires, credit cards, virtual assets)?
Correct Answer: D
The risks posed by different payment methods fall under the products and services risk category because payment methods are specific services and products offered by financial institutions or businesses. This category assesses inherent risks linked to how products are designed and used. Geographical (A) relates to location risks; customers (B) relates to the nature of customers; new technologies (C) covers emerging tools but payment methods are classified under products/services.
Question 4
To identify and assess the money laundering risks emerging from virtual assets, countries should ensure that virtual asset service providers are: (Select Two.)
Correct Answer: B,C
To effectively mitigate money laundering risks in the virtual asset sector, countries must ensure that Virtual Asset Service Providers (VASPs) are subject to AML regulations (B), which provide the legal framework for risk-based customer due diligence and reporting suspicious activities. Additionally, VASPs must maintain effective monitoring systems (C) that enable the detection and reporting of suspicious transactions. While connection to regulated financial institutions (A) and beneficial ownership evaluation (E) are important components of AML frameworks, the foundational requirements per FATF and DFSA guidance focus on regulatory oversight and operational controls. Jurisdictional regulatory expectations (D) influence enforcement but do not replace the need for direct AML regulatory application on VASPs.
Question 5
Which is the most important consideration when assessing compromise risks when creating a decentralized finance protocol or smart contract?
Correct Answer: D
Code uniqueness is critical because reuse or replication of vulnerable code exposes protocols to known exploits. Unique, well-audited, and secure code minimizes compromise risk in decentralized finance (DeFi) and smart contracts. Security standards (A), authentication (B), and regulation (C) are important but secondary to the fundamental security of the code itself.
