Certified Transaction Monitoring Associate Free Sample Questions

Description

Covers the role of transaction monitoring in financial crime prevention, how alerts are generated and validated, investigating money laundering typologies, and reporting investigation outcomes.

12 free sample questions155 in the full practice test

Try simulator

CTMA Sample Questions

  1. Question 1

    Beginner

    Alert Investigation · Money Laundering Typologies and Red Flags

    A transaction monitoring analyst at a regional bank is reviewing an alert for a cash-intensive business customer. The customer, a local convenience store, has deposited $9,500 in cash daily for the past week. The threshold for cash transaction reporting is $10,000. Which financial crime typology does this activity most strongly suggest?

    Answer and explanation

    Correct answer: D

    Structuring (also known as smurfing) involves breaking down large amounts of cash into smaller deposits to avoid regulatory reporting thresholds (such as the $10,000 CTR limit in many jurisdictions). Consistently depositing amounts just below the threshold is a classic red flag for structuring.

  2. Question 2

    Intermediate

    Role of Transaction Monitoring in Financial Crime Prevention · Purpose of Transaction Monitoring in Risk-Based Approach

    During a regulatory examination, an institution is criticized for its Transaction Monitoring (TM) program's lack of alignment with its risk appetite. Which document should the institution's TM rules and scenarios be primarily mapped to in order to resolve this finding?

    Answer and explanation

    Correct answer: B

    The enterprise-wide risk assessment (EWRA) identifies the specific financial crime risks inherent to the institution's customers, products, and geographies. A risk-based TM program must map its scenarios and rules directly to the high-risk areas identified in the EWRA to demonstrate coverage aligned with risk appetite.

  3. Question 3

    IntermediateMultiple answers

    Transaction Monitoring Alert Generation · Scenarios, Rules, Patterns, and Thresholds

    A compliance team is configuring a new transaction monitoring system. They need to decide between 'rule-based' and 'behavior-based' detection methods. Select TWO characteristics that describe behavior-based monitoring. (Select TWO)

    Answer and explanation

    Correct answers: C, D

    Behavior-based monitoring establishes a baseline of 'normal' activity for a customer (or peer group) and generates alerts when deviations from this baseline occur (e.g., a sudden spike in wire volume).

    Because it looks for anomalies rather than specific known patterns, behavior-based monitoring is effective at catching new or evolving financial crime typologies that static rules might miss.

  4. Question 4

    Beginner

    Role of Transaction Monitoring in Financial Crime Prevention · Effectiveness and Quality Assurance

    True or False: A high rate of false positive alerts in a transaction monitoring system indicates that the system is ineffective and requires immediate replacement.

    Answer and explanation

    Correct answer: B

    False. High false positive rates are common in TM systems and do not necessarily mean the system is broken. They often indicate a need for tuning thresholds or segmenting customers more effectively. Replacing the system is a last resort; optimization/tuning is the standard response.

  5. Question 5

    Advanced

    Alert Investigation · Non-AML Financial Crime Typologies

    An investigator is reviewing a series of alerts for a corporate customer involved in import/export. The alerts indicate large payments to a company in a high-risk jurisdiction with no clear business relationship. The investigator finds that the counterparty's name is similar to a sanctioned entity but not an exact match. What is the most appropriate immediate next step?

    Answer and explanation

    Correct answer: A

    Before taking drastic action like closing the account or filing a SAR, the investigator must determine if the partial match is a true positive. This involves gathering additional information (EDD) on the counterparty's address, ownership, and business activities to verify if it is indeed the sanctioned entity.

  6. Question 6

    Intermediate

    Transaction Monitoring Alert Generation · Determining Alert Validity

    Which of the following scenarios describes a 'non-productive' alert rather than a 'false positive'?

    Answer and explanation

    Correct answer: C

    Non-productive alerts are those that provide no value to the investigation process, often caused by data errors, system glitches, or poor configuration (like flagging internal transfers). A 'false positive' usually refers to activity that correctly met the rule criteria but turned out to be benign after investigation.

Register free for 6 more questions

Or unlock all 155 CTMA questions with explanations, timed mode and flashcards.