IBSL Diploma in Compliance Exam

Which of the following is considered the foundational element of an effective compliance framework in a banking institution?

• AA strong internal audit function
• BRobust technology infrastructure
• CA clear 'tone from the top' set by senior management and the board
• DComprehensive external legal counsel engagement

What is the primary role of the Chief Compliance Officer (CCO) within a banking institution's compliance framework?

• ATo directly manage all banking operations and ensure profitability
• BTo design, implement, and oversee the compliance program across the institution
• CTo conduct external audits of the bank's financial statements
• DTo act as the sole decision-maker for all risk management activities

Which of the following best describes the 'three lines of defense' model in the context of a banking compliance framework?

• ABusiness units, Compliance function, Internal Audit
• BExternal Audit, Regulator, Board of Directors
• CLegal Department, Risk Management, Operations
• DSenior Management, Middle Management, Front-line Staff

Why is 'risk assessment' a critical component of a banking compliance framework?

• AIt determines the bank's overall profitability targets for the year.
• BIt identifies, assesses, and prioritizes compliance risks the bank faces, enabling target…
• CIt solely focuses on IT security vulnerabilities within the bank's systems.
• DIt replaces the need for continuous compliance monitoring activities.

What is the main objective of 'compliance policies and procedures' within a bank?

• ATo dictate the bank's marketing strategies to attract new customers.
• BTo provide clear guidance to employees on how to comply with relevant laws, regulations,…
• CTo minimize the bank's tax liabilities through complex financial engineering.
• DTo exclusively focus on human resources policies for employee recruitment.

Which of the following is a key responsibility of the Board of Directors regarding the compliance framework?

• AExecuting daily compliance monitoring activities.
• BApproving the bank's annual marketing budget.
• COverseeing the effectiveness of the compliance function and ensuring adequate resources.
• DDeveloping detailed compliance training materials for all staff.

Continuous monitoring and testing of controls are essential in a compliance framework primarily because:

• AThey allow for the immediate detection of new marketing opportunities.
• BThey provide assurance that compliance controls are operating effectively and identify an…
• CThey are a substitute for having clear compliance policies and procedures.
• DThey are only required immediately after a regulatory fine has been imposed.

What is the significance of 'escalation procedures' within a banking compliance framework?

• AThey define the steps for employees to climb the career ladder.
• BThey outline the process for reporting and addressing identified compliance breaches or c…
• CThey are used exclusively for escalating customer complaints to the legal department.
• DThey detail how to escalate internal audit findings to external regulators directly.

Why is 'compliance training and awareness' considered an indispensable part of a compliance framework?

• AIt allows employees to opt out of compliance requirements if they complete the training.
• BIt ensures that all employees understand their compliance obligations and the bank's poli…
• CIt is primarily used as a marketing tool to enhance the bank's public image.
• DIt serves only as a formality to satisfy regulatory inspection requirements without real…

Which regulatory body typically sets the overarching standards and expectations for banking compliance frameworks internationally?

• AWorld Health Organization (WHO)
• BUnited Nations Educational, Scientific and Cultural Organization (UNESCO)
• CBasel Committee on Banking Supervision (BCBS)
• DInternational Monetary Fund (IMF)

An effective compliance framework should be dynamic and adaptable. What does this imply for its design and implementation?

• AIt should only be updated once every ten years to maintain consistency.
• BIt must be able to evolve and respond to new laws, emerging risks, and changes in the ban…
• CIt should remain static to ensure predictability for employees.
• DIt implies that the framework can be bypassed when market conditions are challenging.

What role does technology play in modern banking compliance frameworks?

• AIt exclusively replaces human oversight and judgment in compliance matters.
• BIt serves as a tool to automate monitoring, data analysis, reporting, and enhance efficie…
• CIt is primarily used to generate profits through algorithmic trading.
• DIt creates new regulatory exemptions for banks using advanced systems.

A robust compliance framework should foster a 'speak-up' culture. What does this mean in practice?

• AEncouraging employees to openly criticize management decisions in public forums.
• BProviding safe and confidential channels for employees to report concerns, suspected brea…
• CRequiring employees to only communicate positive news about the bank's compliance efforts.
• DPromoting public debates among employees on controversial compliance topics.

What is the primary purpose of a 'compliance risk appetite statement' in a banking context?

• ATo specify the maximum amount of financial profit the bank aims to achieve.
• BTo articulate the level and types of compliance risk the bank is willing to accept to ach…
• CTo outline the maximum number of compliance staff the bank intends to hire.
• DTo document the historical compliance breaches the bank has experienced.

How does the 'independence' of the compliance function contribute to its effectiveness?

• AIt allows the compliance function to operate without any budget constraints.
• BIt ensures the compliance function can make unbiased assessments and decisions, free from…
• CIt enables the compliance function to dictate business strategy to other departments.
• DIt implies that the compliance function does not need to report to the Board of Directors.

In the context of compliance, what does 'due diligence' primarily refer to?

• AThe process of applying for a bank loan.
• BThe ongoing monitoring of an employee's attendance record.
• CThe reasonable steps taken to avoid committing a tort or crime, often involving thorough…
• DThe daily reconciliation of the bank's ledger accounts.

Which component of a compliance framework specifically addresses the prevention of money laundering and terrorist financing?

• AData privacy policies (GDPR, CCPA, etc.)
• BAnti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) programs
• CEnvironmental, Social, and Governance (ESG) reporting standards
• DMarket conduct rules for trading activities

What is the main challenge banks face in maintaining an effective compliance framework in today's environment?

• ALack of customer interest in banking products.
• BThe static and unchanging nature of regulatory requirements.
• CThe increasing volume, complexity, and global reach of regulations, coupled with rapid te…
• DThe universal availability of unlimited compliance staff resources.

How does 'root cause analysis' contribute to the improvement of a compliance framework?

• AIt focuses on blaming individuals for compliance failures.
• BIt helps identify the underlying systemic issues that led to a compliance breach, allowin…
• CIt exclusively tracks the financial cost of compliance incidents.
• DIt is a technique solely used by external auditors for financial reporting.

Which principle emphasizes that compliance responsibilities are not solely for the compliance department but are shared across all business lines?

• ACentralized compliance management
• BPrinciple of 'compliance ownership by the business'
• CExternalized compliance outsourcing
• DExclusive compliance departmentalization

Which Sri Lankan legislation primarily governs the reporting of financial transactions to combat money laundering and terrorist financing?

• AThe Banking Act No. 30 of 1988
• BThe Financial Transactions Reporting Act (FTRA) No. 6 of 2006
• CThe Companies Act No. 7 of 2007
• DThe Exchange Control Act No. 24 of 1953

What is the primary role of the Financial Intelligence Unit (FIU) of Sri Lanka?

• ATo regulate all financial institutions in Sri Lanka
• BTo investigate all financial crimes directly
• CTo receive, analyze, and disseminate financial intelligence on suspected money laundering…
• DTo prosecute individuals involved in financial fraud

Under Sri Lankan AML/CFT regulations, what is a 'reporting entity' primarily required to do?

• AMaintain strict secrecy about all customer accounts
• BReport all financial transactions to the FIU
• CImplement Customer Due Diligence (CDD) measures and report suspicious transactions
• DProvide financial advice to customers on legal investment avenues

What is the threshold for reporting cash transactions (CTR) by reporting entities to the FIU in Sri Lanka?

• ALKR 100,000 or more
• BLKR 500,000 or more
• CLKR 1,000,000 or more
• DThere is no fixed threshold; all cash transactions must be reported

Which of the following is considered a 'Designated Non-Financial Business and Profession (DNFBP)' under Sri Lankan AML/CFT regulations?

• ACommercial banks
• BLicensed finance companies
• CPawnbrokers
• DInsurance companies

What does 'Politically Exposed Person (PEP)' mean in the context of Sri Lankan AML/CFT regulations?

• AAny individual who has made political donations
• BAn individual entrusted with prominent public functions, or their family members and clos…
• CAny person who holds a government job, regardless of their position
• DA person who has been convicted of a political crime

Which of the following describes the 'tipping-off' offense under Sri Lankan AML/CFT laws?

• AReporting a suspicious transaction to the FIU
• BInforming the subject of an STR or a third party that an STR has been filed or that an in…
• CSharing customer information with another financial institution for marketing purposes
• DDisclosing internal AML/CFT policies to employees

When must a reporting entity conduct enhanced Customer Due Diligence (ECDD) in Sri Lanka?

• AFor all new customers, regardless of risk
• BOnly for low-risk customers to ensure thoroughness
• CFor high-risk customers, including PEPs, and in situations involving complex or unusual t…
• DOnly when a customer explicitly requests it

What is the consequence for a reporting entity failing to submit a Suspicious Transaction Report (STR) without reasonable excuse in Sri Lanka?

• AA verbal warning from the FIU
• BNo consequences, as long as no actual money laundering occurred
• CFines and/or imprisonment for responsible officers and the entity itself
• DMandatory participation in an AML/CFT training program

Which international body's recommendations heavily influence Sri Lanka's AML/CFT framework?

• AInternational Monetary Fund (IMF)
• BWorld Trade Organization (WTO)
• CFinancial Action Task Force (FATF)
• DUnited Nations Educational, Scientific and Cultural Organization (UNESCO)

What is the primary purpose of a risk-based approach (RBA) in AML/CFT compliance for reporting entities?

• ATo eliminate all risks associated with money laundering and terrorist financing
• BTo apply the most stringent controls to all customers and transactions
• CTo allocate resources efficiently by focusing on areas of higher money laundering and ter…
• DTo simplify compliance procedures for all customers

What is the final stage of money laundering, where illicit funds are integrated back into the legitimate economy?

• APlacement
• BLayering
• CIntegration
• DCollection

Under Sri Lankan AML/CFT regulations, what is the 'ultimate beneficial owner'?

• AThe individual who opened the account
• BThe individual who legally owns the company's shares
• CThe natural person(s) who ultimately owns or controls a customer and/or the natural perso…
• DThe CEO or highest-ranking official of a company

What measure should a reporting entity take if it cannot complete Customer Due Diligence (CDD) measures for a new customer?

• AProceed with the business relationship, but monitor closely
• BReport the inability to complete CDD to the FIU and consider not establishing the busines…
• CRefer the customer to another financial institution
• DComplete CDD only for transactions exceeding the CTR threshold

What is the primary objective of a 'Compliance Officer' within a reporting entity under Sri Lankan AML/CFT regulations?

• ATo manage the entity's investment portfolio
• BTo ensure the entity adheres to all applicable AML/CFT laws, regulations, and internal po…
• CTo negotiate loan agreements with high-value clients
• DTo oversee the entity's IT security infrastructure

Which of the following is an indicator of potential terrorist financing, as distinct from general money laundering?

• ALarge, structured deposits of cash
• BTransactions involving high-value assets like real estate
• CSmall, frequent transactions with no apparent legitimate purpose, often crossing borders
• DUse of shell companies to obscure ownership

What is the requirement for reporting entities regarding employee training on AML/CFT?

• ATraining is only required for senior management
• BNo formal training is necessary if employees are experienced
• CRegular and ongoing training for all relevant employees, commensurate with their roles
• DTraining only upon joining the company, with no further updates

Which of the following describes a 'Shell Company' often used in money laundering schemes?

• AA company that primarily deals in seashells and marine products
• BA legitimate company with a fully functional office and active business operations
• CA company that exists only on paper, with no independent staff or physical presence, used…
• DA publicly listed company with a large market capitalization

What is the record-keeping requirement for reporting entities regarding customer identification and transaction records under FTRA?

• ARecords must be kept for a minimum of one year
• BRecords must be kept for a minimum of three years
• CRecords must be kept for a minimum of six years
• DRecords need only be kept until the customer relationship ends

When conducting Customer Due Diligence (CDD) for a legal person (e.g., a company) in Sri Lanka, what is a key piece of information a reporting entity must obtain?

• AThe preferred music genre of the CEO
• BDetails of the company's social media accounts
• CThe identity of the ultimate beneficial owner(s)
• DA list of all employees and their home addresses

Which Sri Lankan legislation primarily governs the licensing and regulation of banking institutions?

• ACompanies Act No. 07 of 2007
• BBanking Act No. 30 of 1988
• CFinancial Transactions Reporting Act No. 06 of 2006
• DInsolvency Ordinance No. 01 of 1853

Under the Banking Act, what is the minimum statutory liquid assets ratio that a licensed commercial bank must maintain, as prescribed by the Monetary Board?

• A5%
• B10%
• CA ratio determined by the Monetary Board from time to time
• D15%

Which of the following acts is directly relevant to anti-money laundering (AML) and combating the financing of terrorism (CFT) in Sri Lanka's banking sector?

• APayment and Settlement Systems Act, No. 28 of 2005
• BRegistered Stock and Securities Ordinance
• CFinancial Transactions Reporting Act (FTRA) No. 06 of 2006
• DDebt Recovery (Special Provisions) Act, No. 02 of 1990

What is the primary role of the Financial Intelligence Unit (FIU) of Sri Lanka?

• ATo regulate interest rates for banks
• BTo conduct forensic audits for all financial institutions
• CTo receive, analyze, and disseminate suspicious transaction reports (STRs) and other fina…
• DTo manage the foreign exchange reserves of the country

Under the FTRA, what is the maximum time frame within which a financial institution must report a suspicious transaction to the FIU after forming a suspicion?

• AAs soon as practicable, but no later than two working days
• BWithin 7 working days
• CWithin 30 calendar days
• DAt the end of the financial quarter

Which of the following best describes 'Customer Due Diligence' (CDD) in the context of banking compliance?

• AOnly verifying the customer's identity at the time of account opening.
• BThe process of identifying and verifying the identity of a customer and understanding the…
• CMaintaining a positive relationship with high-net-worth clients.
• DMonitoring only transactions above a certain monetary threshold.

What is the primary objective of the Recovery of Loans by Banks (Special Provisions) Act, No. 4 of 1990?

• ATo regulate the interest rates charged on bank loans.
• BTo facilitate the speedy recovery of defaulted loans by banks through specific enforcemen…
• CTo provide guidelines for granting new loans by banks.
• DTo establish a deposit insurance scheme for bank customers.