Certificate in Ethical Artificial Intelligence (Level 3) Free Practice Test Set Two

Correct: In the United States financial markets, fixed-income securities are subject to interest rate risk, where an increase in prevailing market rates leads to a decrease in the price of existing bonds. This occurs because the fixed interest payments of older bonds are less attractive compared to new bonds issued at the higher current rates, necessitating a price drop to align the older bond’s yield with the market.

Incorrect: The strategy of assuming bond values rise with interest rates incorrectly interprets the relationship between yield and price, as higher market rates actually devalue existing lower-coupon instruments. Relying solely on the Securities Exchange Act of 1934 to justify static valuations is a misunderstanding of US GAAP and SEC fair value reporting requirements which often require mark-to-market accounting. Focusing only on credit events or SEC re-registration ignores the systematic impact of market-wide interest rate fluctuations on bond pricing, which occurs independently of the issuer’s specific credit status.

Takeaway: Bond prices share an inverse relationship with interest rates, representing a primary source of market risk for fixed-income portfolios.

Correct: The Truth in Lending Act (TILA), implemented through Regulation Z, requires that the Annual Percentage Rate (APR) reflects the total cost of credit. This calculation must include not only the interest rate but also any mandatory finance charges or service fees. By excluding these fees, the institution provides an inaccurate representation of the borrowing cost, which prevents consumers from making informed comparisons between different loan products.

Correct: A discretionary account is a type of brokerage or investment account where the client provides written power of attorney to the adviser or broker. This legal authorization allows the professional to make investment decisions, such as which securities to buy or sell and at what price, without needing to contact the client for approval before each trade.

Correct: Certificates of Deposit are time deposits that require the customer to leave funds with the bank for a predetermined period. In the United States, the Truth in Savings Act, implemented through Regulation DD, requires banks to disclose the fixed interest rate and the specific penalties that apply if the depositor withdraws the principal before the maturity date.

Incorrect: The strategy of providing unlimited check-writing capabilities describes a demand deposit or checking account rather than a time-bound savings instrument. Claiming that these products are excluded from Federal Deposit Insurance Corporation protection is incorrect because they are standard bank deposits covered up to the legal limit. Opting for a mandatory monthly interest rate adjustment mischaracterizes the product, as these instruments are typically defined by their fixed-rate nature for the duration of the term.

Takeaway: Certificates of Deposit are time-bound savings instruments offering fixed rates and requiring penalties for early withdrawal under United States banking standards.

Correct: Under SEC and FINRA regulations, broker-dealers have a rigorous duty of best execution, which requires them to seek the most favorable terms for customer orders. When a firm receives payment for order flow from market makers, internal auditors must verify that these financial incentives do not result in inferior execution prices or slower execution speeds for the client.

Correct: Under the Investment Company Act of 1940 and subsequent SEC rules like Rule 38a-1, registered investment companies are required to have a board of directors to oversee the fund’s operations. A significant portion of these directors must be independent (disinterested) to protect shareholders from potential conflicts of interest with the fund’s adviser. Furthermore, the fund must designate a Chief Compliance Officer (CCO) who is responsible for administering the compliance policies and must report directly to the board of directors rather than just the fund management.

Incorrect: The strategy of using a fixed capitalization structure is characteristic of closed-end funds, not open-end investment companies which must issue and redeem shares continuously at net asset value. Choosing to provide a guaranteed net asset value or price floor is generally prohibited under US securities laws as it misleads investors regarding the market risks inherent in the investment. Relying solely on the fund manager’s discretion for asset valuation without independent oversight or custodial checks fails to meet the rigorous valuation and safeguarding requirements established by the SEC to prevent fraud.

Takeaway: The Investment Company Act of 1940 mandates independent board oversight and a Chief Compliance Officer to protect investors in collective schemes.

Correct: Under the Truth in Lending Act (Regulation Z), financial institutions must provide accurate and timely disclosures of the APR to consumers. A failure to synchronize the actual interest rates managed by the treasury or lending departments with the information presented in marketing materials indicates a breakdown in internal change management controls, leading to regulatory non-compliance and potential legal risk.

Incorrect: Simply seeking written confirmation from every customer for website views is an impractical and non-standard requirement that does not address the underlying accuracy of the disclosure. The strategy of requiring personal Board approval for every minor marketing update is an inefficient use of governance resources and does not scale for operational rate changes. Opting for a fixed-rate model over a variable-rate model is a product design choice and does not mitigate the risk of inaccurate disclosures if rates were to change in the future.

Takeaway: Internal auditors must ensure change management controls effectively synchronize interest rate updates with all consumer-facing disclosures to maintain regulatory compliance.

Correct: The Truth in Lending Act (TILA), implemented by Regulation Z, is a critical United States federal law that ensures consumers receive meaningful disclosure of credit terms. An internal auditor must prioritize verifying that the credit product complies with these legal mandates while also ensuring the product’s risk profile fits within the organization’s predefined risk appetite to protect the institution from regulatory and financial risk.

Incorrect: Relying solely on interest rate positioning relative to the federal funds rate focuses on market strategy and profitability rather than the audit’s primary objective of risk and compliance oversight. The strategy of involving the Securities and Exchange Commission is incorrect because standard consumer credit products are not classified as securities and therefore do not fall under their registration requirements. Opting for an inspection of physical fire safety standards addresses operational facilities management rather than the core credit risk and regulatory compliance issues inherent in a new financial product.

Takeaway: Internal auditors must prioritize federal disclosure compliance and risk appetite alignment when evaluating new consumer credit products.

Correct: Financial intermediaries in the United States, such as commercial banks, perform maturity transformation by converting short-term liabilities (deposits) into long-term assets (loans). This process inherently creates liquidity risk, as depositors may demand their funds before the long-term loans mature or can be easily liquidated. Internal auditors must evaluate if the bank has sufficient high-quality liquid assets (HQLA) and contingency funding plans to manage this mismatch, especially under stress scenarios monitored by the Federal Reserve and the OCC.

Incorrect: The strategy of treating deposits as unregistered investment contracts is incorrect because the SEC does not typically regulate standard bank deposits as securities under the Securities Act of 1933. Focusing only on physical certificates for securities ignores the reality of the US book-entry system and the role of the Depository Trust & Clearing Corporation (DTCC) in modern settlement. Relying on the idea that the Federal Reserve would eliminate the discount window for specific lending activities is a misunderstanding of the Fed’s role as the lender of last resort, which is designed to provide liquidity to the banking system as a whole rather than targeting specific loan types.

Takeaway: Maturity transformation is a core function of financial intermediaries that necessitates robust liquidity risk management and internal audit oversight.

Correct: Financial intermediation is the fundamental process where institutions like banks and broker-dealers bridge the gap between surplus units and deficit units. By pooling the resources of individual savers and directing them toward productive investments or corporate needs, these intermediaries facilitate capital formation and economic efficiency in the United States.

Incorrect: Confusing the role of a private financial institution with the monetary policy functions of the Federal Reserve leads to an incorrect understanding of market participation. The strategy of identifying a commercial entity as a primary regulator under the Dodd-Frank Act is inaccurate because private firms are subject to oversight rather than exercising it. Suggesting that intermediation removes the requirement for secondary markets ignores the fact that intermediaries actually provide the liquidity and infrastructure necessary for those markets to function.

Takeaway: Financial intermediation facilitates the efficient transfer of capital from savers to borrowers within the United States financial system.

Correct: The internal auditor’s primary responsibility is to evaluate whether the existing controls, such as pre-clearance and blackout period monitoring, are functioning effectively to prevent insider trading under the Securities Exchange Act of 1934. Assessing the design and operating effectiveness of these systems helps identify if the breach was an isolated incident or a systemic failure in the compliance framework.

Correct: Under the Securities Exchange Act of 1934, the Securities and Exchange Commission (SEC) requires public companies to file a Form 8-K to report significant corporate events. A material definitive agreement is a reportable event that must be disclosed within four business days of the occurrence. This ensures that the investing public receives timely information regarding events that could significantly impact the company’s financial position or stock price.

Incorrect: Relying on the annual Form 10-K fails to meet the requirement for timely disclosure of material events that occur between periodic reports. The strategy of notifying the Federal Reserve Board is incorrect as the SEC, not the Fed, oversees corporate disclosures for publicly traded companies. Focusing on updating a registration statement under the Securities Act of 1933 is inappropriate because that Act primarily governs the initial offering of securities rather than ongoing reporting obligations.

Takeaway: US public companies must report material events via Form 8-K within four business days to comply with SEC disclosure rules.

Correct: Under the Securities Exchange Act of 1934 and SEC Rule 10b-5, firms are required to maintain and enforce written policies and procedures reasonably designed to prevent the misuse of material non-public information (MNPI). Testing the logical access controls and the integrity of information barriers (Chinese Walls) is the most effective way to determine if the firm’s controls failed to prevent insider dealing, as it directly addresses the mechanism by which the trader may have obtained sensitive information before it was public.

Incorrect: Focusing only on the trader’s personnel file and training records is an administrative check that does not test the operational effectiveness of the technical barriers designed to prevent market abuse. The strategy of analyzing trade profitability based on materiality thresholds is flawed because insider trading violations are based on the illegal use of information regardless of the dollar amount gained. Choosing to verify the simultaneous distribution of the research report addresses Regulation Fair Disclosure (Reg FD) for issuers but does not address the primary risk of internal insider dealing by the firm’s own employees.

Takeaway: Internal auditors must test the technical and physical information barriers that prevent the unauthorized flow of material non-public information to mitigate insider trading risks.

Correct: Under the Investment Company Act of 1940 and SEC Rule 22e-4, a registered open-end investment company (mutual fund) is prohibited from acquiring any illiquid investment if, immediately after the acquisition, the fund would have invested more than 15% of its net assets in illiquid investments. This rule is designed to ensure that funds can meet shareholder redemption requests in a timely manner without significant price concessions.

Incorrect: The strategy of allowing up to 25% illiquid holdings based on credit lines is incorrect because the SEC maintains a strict 15% cap regardless of external financing. Focusing only on a 10% threshold based on volatility misinterprets the specific percentage-based limit mandated by federal securities laws. Opting for a requirement of 50% highly liquid assets is a misunderstanding of the rule, which focuses on the ceiling for illiquid assets rather than a specific universal floor for highly liquid ones.

Takeaway: U.S. open-end funds must limit illiquid investments to 15% of net assets to maintain sufficient liquidity for shareholder redemptions.

Correct: Under US securities laws and exchange rules (such as those from Nasdaq and NYSE), registered market makers have an ‘affirmative obligation’ to maintain continuous, two-sided quotes (both a bid and an offer) during regular market hours. This requirement is designed to ensure market liquidity and price discovery, even during periods of high volatility, provided the quotes are reasonably related to the prevailing market price.

Incorrect: The strategy of suspending quotes during volatility would generally constitute a failure to meet the market maker’s affirmative obligations to maintain a fair and orderly market. Opting for agency-only transactions contradicts the fundamental role of a market maker, which is to act as a principal and use its own capital to facilitate trades. Choosing to provide preferential execution speeds to high-volume clients would violate fair access requirements and the principle of equitable treatment of all market participants under US regulatory standards.

Takeaway: US market makers must maintain continuous two-sided quotes to provide liquidity and support fair and orderly markets under SEC and SRO rules.

Correct: Internal auditors must ensure that management takes corrective action to address identified control weaknesses. Implementing automated validation and formal reviews directly addresses the manual entry errors and strengthens the control environment for SEC reporting under the Dodd-Frank Act.

Incorrect: Choosing to wait for an SEC examination before correcting known errors is a failure of fiduciary duty and could lead to significant legal and reputational damage. The strategy of having internal audit perform monthly reconciliations is inappropriate because it shifts operational responsibility to the audit function, compromising its independence. Opting to reclassify the firm’s status to avoid reporting requirements is an improper attempt to circumvent federal regulations and does not address the underlying data integrity issues.

Takeaway: Internal auditors must verify that management implements sustainable corrective actions for regulatory reporting failures while maintaining professional objectivity.

Correct: Under the Securities Exchange Act of 1934, the SEC requires that a Form 8-K be filed within four business days for most material events. This ensures that the public receives timely information regarding significant corporate developments.

Incorrect: Relying on a ten-day window after the month-end is an outdated standard that does not meet current SEC requirements for accelerated disclosure. Simply waiting to include the event in the quarterly Form 10-Q is insufficient because current reports are mandatory for material changes between periodic filings. The strategy of delaying the disclosure until the annual Form 10-K is submitted would violate federal laws requiring prompt notification of events that could impact stock prices.

Correct: Section 301 of the Sarbanes-Oxley Act and SEC Rule 10A-3 require that each member of a listed company’s audit committee be independent. To be considered independent, a member may not, other than in their capacity as a board or committee member, accept any consulting, advisory, or other compensatory fee from the issuer or any subsidiary.

Correct: Under the Securities and Exchange Commission (SEC) Regulation SCI, entities that meet certain volume thresholds must establish, maintain, and enforce written policies and procedures reasonably designed to ensure their systems have levels of capacity, integrity, resiliency, availability, and security adequate to maintain their operational capability. Evaluating capacity planning and stress testing is a core audit procedure to ensure the system can handle market stress without causing systemic disruptions, which is the primary goal of Regulation SCI.

Incorrect: The strategy of seeking a full exemption from the Securities Exchange Act of 1934 is incorrect because ATSs operate under specific exemptions provided by Regulation ATS while remaining subject to SEC oversight. Opting for manual secondary authorization for every trade is an impractical control for high-speed trading systems and does not address the systemic resilience requirements of Regulation SCI. Focusing on a transition to decentralized ledgers is based on a misunderstanding of regulatory requirements, as FINRA and the SEC maintain technology-neutral stances on record-keeping media provided they meet specific integrity and accessibility standards.

Takeaway: Internal auditors must ensure that high-volume trading systems comply with Regulation SCI by verifying robust capacity planning and stress testing protocols.

Correct: Under the Dodd-Frank Wall Street Reform and Consumer Protection Act, US public companies are required to provide shareholders with a non-binding advisory vote on the compensation of named executive officers. This ‘Say-on-Pay’ requirement must be fulfilled at least once every three years to ensure transparency and shareholder engagement in corporate governance.

Correct: Under the Securities Exchange Act of 1934, national securities exchanges in the United States are designated as Self-Regulatory Organizations (SROs). This status requires them to establish rules that govern the conduct of their members, prevent fraudulent and manipulative acts, and enforce compliance with both the exchange’s own rules and federal securities regulations.

Correct: Internal auditors provide assurance on governance by assessing if the organization has established effective processes to comply with SEC regulations. SEC Rule 14a-8 is a critical component of shareholder rights in the US, as it dictates the requirements for including shareholder-sponsored resolutions in the company’s proxy materials. By evaluating these controls, the auditor ensures that the board is meeting its regulatory obligations and respecting shareholder input.

Incorrect: Engaging in direct negotiations with investors regarding executive compensation is a management responsibility that would impair the internal auditor’s objectivity. The strategy of focusing exclusively on the mathematical reconciliation of fractional shares addresses a minor administrative task rather than the fundamental governance rights of shareholders. Opting to draft formal legal responses to regulators like the SEC places the auditor in a management role, which is a direct violation of professional standards regarding independence. Relying on administrative verification of the shareholder ledger ignores the qualitative aspects of shareholder engagement and the regulatory framework governing proxy access.

Takeaway: Internal auditors assess the effectiveness of governance processes that ensure compliance with SEC rules governing shareholder proposals and proxy access.

Correct: The Investment Company Act of 1940 requires investment companies to register with the Securities and Exchange Commission (SEC). Form N-8A serves as the initial notification, while Form N-1A provides the detailed registration statement and prospectus required for mutual funds.

Correct: Under US corporate governance frameworks and IIA Standards, the Board (through the Audit Committee) is responsible for ensuring that the internal audit function is adequately resourced and possesses the necessary competencies to address the organization’s risk profile. By approving the resources needed to acquire specialized expertise, the Board ensures that the internal audit activity can provide effective, independent assurance over high-risk areas like digital transformation and cloud security.

Incorrect: The strategy of having the Chief Information Officer oversee audit testing is flawed because it impairs the independence and objectivity of the internal audit function by placing it under the influence of the management team responsible for the system. Relying solely on third-party SOC reports is insufficient as it neglects the organization’s specific implementation risks and the Board’s duty to maintain an effective internal oversight mechanism. Focusing only on manual workarounds and outputs while ignoring the technical infrastructure fails to address the root causes of potential system failures and does not fulfill the Board’s responsibility to oversee enterprise-wide risk management.

Takeaway: The Board must ensure the internal audit function has sufficient resources and expertise to effectively evaluate significant organizational risks.

Correct: Under SEC Rule 10A-3 and the listing standards of major United States exchanges like the NYSE and NASDAQ, audit committee members must be independent. Independence is strictly defined to prohibit the acceptance of any consulting, advisory, or other compensatory fees from the issuer or any of its subsidiaries, other than fixed compensation for board service.

Correct: Under U.S. securities laws and SEC regulations, firms must maintain robust internal controls, often referred to as Chinese Walls, to prevent the misuse of MNPI. Evaluating the effectiveness of these information barriers and the enforcement of restricted lists ensures that those with access to sensitive data are prohibited from trading or tipping others, which is a core requirement for maintaining market integrity and avoiding liability under Rule 10b-5.

Incorrect: Relying solely on initial non-disclosure agreements is insufficient because it fails to provide active monitoring or preventative controls against real-time trading risks. Focusing only on Section 16 officers is a flawed strategy because the misappropriation theory of insider trading applies to any individual who trades on confidential information in breach of a duty. The strategy of delaying log reviews until a federal inquiry begins is reactive and fails to meet the proactive compliance standards expected by U.S. regulators to prevent market abuse.

Takeaway: Internal auditors must verify that information barriers and trading restrictions are actively enforced for all employees who possess material non-public information.

Correct: Under the Investment Company Act of 1940, a diversified fund must limit investments in any one issuer to 5% of assets and 10% of voting securities for 75% of its portfolio.

Correct: Historical bias occurs when the model is trained on data that reflects past societal prejudices or systemic socio-economic inequalities. In the UK, the FCA Consumer Duty requires firms to act to deliver good outcomes and avoid foreseeable harm. By using a decade of historical default data, the model automates and perpetuates past economic disparities. This leads to systemic exclusion of specific groups based on historical trends rather than current individual merit.

Incorrect: Relying solely on the concept of representation bias is incorrect because the issue is not a lack of data from these regions, but the biased nature of the existing data. Simply conducting an analysis for measurement bias fails here because the postcode is a technically accurate identifier, even if the underlying historical data it points to is ethically problematic. The strategy of identifying aggregation bias is misplaced as the problem stems from the historical quality of the inputs rather than the failure to use distinct sub-models for different groups. Focusing only on algorithmic processing bias ignores the fact that the mathematical logic is functioning correctly on flawed, historically-weighted training sets.

Takeaway: Historical bias arises when AI models replicate and automate systemic inequalities present in the historical data used for training.

Correct: Implementing a defense-in-depth strategy is essential for UK financial institutions to meet operational resilience expectations set by the FCA and PRA. Input sanitisation and output filtering provide critical layers of protection against prompt injection and data exfiltration. These controls ensure that malicious instructions are intercepted before processing and that sensitive information is not inadvertently disclosed in model responses. This approach aligns with the National Cyber Security Centre guidelines for securing AI systems.

Incorrect: Relying solely on internal model alignment is insufficient because sophisticated adversarial techniques can often bypass built-in safety guardrails through creative prompting. The strategy of restricting training data to public sources may reduce some privacy risks but fails to address the operational security of the live interface. Focusing only on weight encryption protects the model’s intellectual property but does not prevent a user from manipulating the model’s logic via the API. Pursuing a single-point defense leaves the system vulnerable to evolving attack vectors that target the interaction layer.

Takeaway: AI security requires a multi-layered defense-in-depth approach to protect against adversarial attacks and ensure operational resilience.

Correct: The Financial Conduct Authority (FCA) Consumer Duty requires firms to support consumer understanding and deliver good outcomes. Implementing a framework for both global and local explainability ensures that staff can provide specific, meaningful reasons for credit denials. This approach directly addresses the transparency requirements of the UK regulatory environment while maintaining the predictive benefits of the AI system.

Incorrect: Relying solely on frequent model retraining addresses technical accuracy and data drift but fails to resolve the fundamental transparency gap for rejected applicants. The strategy of reverting to simpler linear models may significantly degrade predictive performance and competitive advantage without exploring modern explainability techniques. Focusing only on manual overrides for every rejection creates an unsustainable operational burden and does not improve the underlying model transparency or staff understanding.

Takeaway: UK financial firms must integrate explainability into AI systems to meet Consumer Duty standards for transparent and understandable customer communications.