APRP Risk Assessment & Mitigation 5

Question 1

A payments firm's risk appetite statement specifies a maximum tolerable fraud loss rate of 0.05% of gross payment volume. What is the BEST use of this threshold?

Accepted Answer

To define trigger points for escalating fraud control decisions to senior management

Answer

Risk appetite thresholds serve as governance escalation triggers — when actual metrics approach or exceed them, decisions are elevated to appropriate leadership.

Question 2

Which of the following BEST describes 'concentration risk' in a merchant portfolio?

Accepted Answer

Excessive exposure to a single merchant, industry, or geography that could cause outsized losses

Answer

Concentration risk occurs when a portfolio is heavily weighted toward a single entity, sector, or region, so problems in that segment cause disproportionate harm.

Question 3

Under a risk-based AML program, what is the primary factor that determines the level of customer due diligence (CDD) applied to a new merchant?

Accepted Answer

The overall risk profile of the merchant based on business type, geography, and expected transaction patterns

Answer

Risk-based CDD calibrates the depth of due diligence to the customer's composite risk profile, applying enhanced measures where risk indicators are elevated.

Question 4

When a payments organization conducts a 'gap analysis' against PCI DSS requirements, it is performing which step of the risk management lifecycle?

Accepted Answer

Risk identification and assessment

Answer

A gap analysis compares current controls against required standards to identify deficiencies, which is a risk identification and assessment activity.

Question 5

In payments fraud risk, which model performance metric indicates the percentage of actual fraud cases correctly identified by a detection system?

Accepted Answer

Recall (sensitivity)

Answer

Recall measures what fraction of actual fraudulent transactions the model successfully catches, directly reflecting how well the system identifies true fraud.

APRP - Accredited Payments Risk Professional Practice Test

APRP - Accredited Payments Risk Professional Practice Test

APRP Risk Assessment & Mitigation 5