CISI UAE Financial Rules and Regulations (FRR) — Questions and Answers
Question 1: What is the primary purpose of the Emirates Securities and Commodities Authority's (SCA) disclosure requirements?
- To increase government tax revenue
- To limit the number of listed companies
- To ensure transparency and protect investors through timely disclosure of material information (Correct answer)
- To control stock prices
Correct answer: To ensure transparency and protect investors through timely disclosure of material information
SCA disclosure requirements mandate that listed companies provide timely, accurate, and complete information to the market, ensuring transparency and protecting investor interests.
Question 2: Under UAE law, predicate offences that can give rise to money laundering include:
- Only drug trafficking offences
- Exclusively terrorism-related offences
- All serious crimes including drug trafficking, corruption, fraud, and cybercrime (Correct answer)
- Tax offences only
Correct answer: All serious crimes including drug trafficking, corruption, fraud, and cybercrime
UAE law adopts an 'all-crimes' approach, meaning any serious criminal offence can be a predicate offence for money laundering, including drug trafficking, corruption, fraud, human trafficking, and cybercrime.
Question 3: The ADGM's 'Courts' can enforce judgments in the UAE onshore courts through:
- Direct execution by ADGM authorities in onshore UAE
- Recognition and enforcement arrangements between ADGM Courts and UAE federal courts (Correct answer)
- Automatic enforcement without any further process
- Only through re-litigation in UAE federal courts
Correct answer: Recognition and enforcement arrangements between ADGM Courts and UAE federal courts
Recognition and enforcement arrangements enable ADGM Court judgments to be recognised and enforced through UAE federal courts, making ADGM Court decisions practically effective across the UAE.
Question 4: The CBUAE's Financial Consumer Protection Framework emphasises which principle regarding product suitability?
- Suitability assessments apply only to investments above AED 500,000
- Suitability is irrelevant for standardised retail products
- Suitability is solely the customer's responsibility
- Products must be designed and sold only to customers for whom they are appropriate (Correct answer)
Correct answer: Products must be designed and sold only to customers for whom they are appropriate
Product governance requires financial institutions to identify the target market for each product, ensure distribution channels reach appropriate customers, and conduct suitability assessments to match products with customer needs.
Question 5: What does 'de-dollarisation risk' mean in the UAE AML context?
- Decrease in dollar-denominated investments
- Risk of the UAE abandoning its USD peg
- Reduced use of dollars in trade finance
- Risk of USD correspondent banks withdrawing services due to AML concerns (Correct answer)
Correct answer: Risk of USD correspondent banks withdrawing services due to AML concerns
De-dollarisation risk refers to major US dollar correspondent banks terminating relationships with UAE banks due to AML/CFT concerns, potentially cutting off access to USD clearing — a significant financial stability risk.
Question 6: What is a 'shell company' in the context of AML typologies?
- A company registered in a free zone
- A newly incorporated company with no trading history
- A company with no real operations used to obscure beneficial ownership (Correct answer)
- A subsidiary of a foreign multinational
Correct answer: A company with no real operations used to obscure beneficial ownership
Shell companies have no significant assets or operations but are used to create layers of ownership that obscure the identity of the true beneficial owner, facilitating money laundering and tax evasion.
Question 7: The CBUAE's approach to 'operational resilience' requires banks to focus on:
- Compliance with business hours regulations
- Maintaining critical business services through disruptions, not just recovering IT systems (Correct answer)
- Physical security of bank branches
- Disaster recovery of technology infrastructure exclusively
Correct answer: Maintaining critical business services through disruptions, not just recovering IT systems
Operational resilience focuses on maintaining delivery of critical services (payments, customer access) through any disruption, setting impact tolerances and testing continuity — broader than traditional IT disaster recovery.
Question 8: The Securities and Commodities Authority (SCA) regulates which markets in the UAE?
- Islamic banking only
- DIFC financial markets only
- ADGM financial markets only
- Onshore UAE securities and commodities markets (Correct answer)
Correct answer: Onshore UAE securities and commodities markets
The SCA regulates the onshore UAE securities and commodities markets, including the Abu Dhabi Securities Exchange (ADX) and Dubai Financial Market (DFM).
Question 9: UAE securities regulations require investment research analysts to:
- Restrict research distribution to institutional investors only
- Never hold securities in companies they cover
- Disclose conflicts of interest, including holdings in recommended securities (Correct answer)
- Obtain client approval before publishing research
Correct answer: Disclose conflicts of interest, including holdings in recommended securities
Analysts must disclose material conflicts of interest — including personal holdings, banking relationships, and market-making activities — enabling investors to assess potential biases in research recommendations.
Question 10: The UAE's Executive Office for Control and Non-Proliferation (EOCN) oversees:
- Targeted financial sanctions and proliferation financing risks (Correct answer)
- Export licences for defence equipment
- Cybercrime and digital fraud
- General AML compliance for banks
Correct answer: Targeted financial sanctions and proliferation financing risks
The EOCN coordinates the implementation of targeted financial sanctions and oversees the UAE's strategy to combat proliferation financing, working with financial institutions to freeze designated assets.
Question 11: What is credit risk in the context of UAE banking?
- The risk of system failures
- The risk of natural disasters
- The risk of regulatory changes
- The risk that a borrower will fail to meet their financial obligations (Correct answer)
Correct answer: The risk that a borrower will fail to meet their financial obligations
Credit risk is the risk that a borrower or counterparty will fail to meet their financial obligations, such as repaying a loan, and is a primary concern for UAE banks which must maintain adequate provisions.
Question 12: UAE market conduct rules require that securities advertisements:
- Include clear risk warnings and be fair, clear, and not misleading (Correct answer)
- Be approved by the SCA 30 days in advance
- Focus exclusively on potential returns
- Target only qualified professional investors
Correct answer: Include clear risk warnings and be fair, clear, and not misleading
Securities advertisements must include prominent risk warnings, be balanced between potential returns and risks, and not be misleading — the same principles applying to product marketing as to advice.
Question 13: Under UAE conduct regulations, a 'discretionary mandate' allows a portfolio manager to:
- Override the client's investment policy statement
- Trade any securities without restriction
- Charge performance fees without disclosure
- Make investment decisions on behalf of a client within agreed parameters without prior approval for each trade (Correct answer)
Correct answer: Make investment decisions on behalf of a client within agreed parameters without prior approval for each trade
A discretionary mandate grants the portfolio manager authority to make investment decisions within agreed parameters (risk profile, asset allocation, restrictions) without requiring client approval for each individual trade.
Question 14: Under UAE regulations, what is the maximum period for retaining customer identification records after the business relationship ends?
- 10 years
- 5 years (Correct answer)
- 3 years
- Indefinitely
Correct answer: 5 years
UAE AML regulations require financial institutions to retain customer identification records and transaction data for at least five years after the end of the business relationship.
Question 15: Under UAE consumer protection regulations, what must a bank do before changing the terms of a customer's existing product?
- Notify the customer only through in-app notifications
- Provide advance written notice of at least 60 days (Correct answer)
- Change terms immediately without notice
- Obtain verbal consent from the customer
Correct answer: Provide advance written notice of at least 60 days
Banks must give customers at least 60 days' advance written notice before making material changes to existing product terms, allowing customers time to consider their options and switch if necessary.
Question 16: What is the UAE's primary legislation for combating money laundering and terrorism financing?
- Intellectual Property Law
- Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering (Correct answer)
- Commercial Companies Law
- Labour Law
Correct answer: Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering
Federal Decree-Law No. 20 of 2018 (as amended) is the UAE's comprehensive AML/CFT legislation, establishing the legal framework for preventing money laundering and terrorism financing.
Question 17: What is transaction monitoring and how must UAE institutions implement it?
- Only monitoring transactions above AED 1 million
- Monitoring only wire transfers
- Manually reviewing every transaction daily
- Using automated systems to detect unusual patterns and flag potentially suspicious transactions for review (Correct answer)
Correct answer: Using automated systems to detect unusual patterns and flag potentially suspicious transactions for review
UAE regulations require financial institutions to implement automated transaction monitoring systems that detect unusual patterns, flag potentially suspicious activity, and generate alerts for human review and potential SAR filing.
Question 18: Under UAE AML law, 'self-dealing' by a bank officer handling AML investigations refers to:
- An officer filing false STRs against competitors
- An officer conducting their own transactions through the bank
- An officer reviewing their own account transactions
- An officer tipping off a customer about an STR in exchange for personal benefit (Correct answer)
Correct answer: An officer tipping off a customer about an STR in exchange for personal benefit
Self-dealing in this context involves an AML officer corruptly disclosing STR information to a subject in exchange for personal gain, combining tipping off with corruption — a serious criminal offence.
Question 19: What are the penalties for money laundering offenses in the UAE?
- Only administrative fines
- Imprisonment of up to 10 years and fines of up to AED 5 million (Correct answer)
- Loss of UAE residency only
- Community service only
Correct answer: Imprisonment of up to 10 years and fines of up to AED 5 million
UAE law provides severe penalties for money laundering including imprisonment for up to 10 years, fines ranging from AED 100,000 to AED 5 million, and confiscation of proceeds of crime.
Question 20: What is the regulatory approach to churning in UAE securities markets?
- It is only prohibited for foreign brokers
- It is permitted if the client does not complain
- Excessive trading in a client's account primarily to generate commissions is prohibited (Correct answer)
- It is encouraged to increase market volume
Correct answer: Excessive trading in a client's account primarily to generate commissions is prohibited
Churning, or excessive trading in a client's account primarily to generate commissions rather than benefit the client, is prohibited under UAE regulations as it violates the duty to act in the client's best interest.
Question 21: The UAE's Beneficial Ownership Regulation requires companies to maintain a register that is accessible to:
- The general public on a free online portal
- Foreign governments automatically
- Only the company's auditors
- Competent authorities upon request (Correct answer)
Correct answer: Competent authorities upon request
UAE companies must maintain beneficial ownership registers accessible to competent authorities (regulators, law enforcement) upon request, supporting AML/CFT transparency without full public disclosure.
Question 22: Which UAE federal authority is primarily responsible for regulating the securities and commodities markets?
- Securities and Commodities Authority (SCA) (Correct answer)
- Dubai Financial Services Authority (DFSA)
- Abu Dhabi Global Market (ADGM)
- Central Bank of the UAE (CBUAE)
Correct answer: Securities and Commodities Authority (SCA)
The Securities and Commodities Authority (SCA) is the federal body responsible for regulating and supervising the UAE securities and commodities markets under Federal Law No. 4 of 2000.
Question 23: Under the UAE's Market Conduct Regulations, 'price stabilisation' following an IPO is:
- Prohibited as a form of market manipulation
- Permitted within regulated limits to support an orderly market post-listing (Correct answer)
- Only permitted for government-related issuers
- Required for all IPOs regardless of size
Correct answer: Permitted within regulated limits to support an orderly market post-listing
Stabilisation activities by designated stabilisation managers are permitted within regulated limits following an IPO or secondary offering to prevent artificial price volatility, subject to disclosure and regulatory safe harbours.
Question 24: The CBUAE's conduct requirements prohibit bank staff from:
- Charging for advice services
- Mis-selling products that are unsuitable for a customer's stated needs (Correct answer)
- Offering English-language documentation
- Refusing to provide services in Arabic
Correct answer: Mis-selling products that are unsuitable for a customer's stated needs
Mis-selling — recommending products that are not suitable for the customer's circumstances, needs, and risk tolerance — is a serious conduct breach prohibited by CBUAE consumer protection regulations.
Question 25: The UAE's sanctions framework covers which categories of designated entities?
- Exclusively entities from FATF high-risk jurisdictions
- Only domestic financial crime suspects
- UN-designated terrorists and proliferators, and UAE-designated individuals and entities (Correct answer)
- Only individuals listed by the US Treasury OFAC
Correct answer: UN-designated terrorists and proliferators, and UAE-designated individuals and entities
The UAE implements UN Security Council sanctions and maintains its own domestic sanctions list, requiring financial institutions to screen against both the UAE Cabinet's designated list and UN lists.
Question 26: What is the T+2 settlement cycle used in UAE stock exchanges?
- Trades must be reversed within 2 hours
- Taxes are applied 2 days after trading
- Traders have 2 minutes to confirm orders
- Settlement of trades occurs two business days after the trade date (Correct answer)
Correct answer: Settlement of trades occurs two business days after the trade date
T+2 means that the settlement of a securities trade (delivery of shares and payment) occurs two business days after the trade execution date on UAE exchanges.
Question 27: The UAE's market conduct rules impose 'close period' restrictions on listed company directors, requiring them to:
- Refrain from trading in the company's shares in the period before financial results are announced (Correct answer)
- Trade only through the company's own dealing desk
- Disclose all trades to shareholders within 24 hours
- Increase their shareholdings before results announcement
Correct answer: Refrain from trading in the company's shares in the period before financial results are announced
Close periods (typically 30-60 days before financial results announcements) prohibit directors and other insiders from trading in the company's securities when they are likely to possess undisclosed price-sensitive information.
Question 28: Under UAE regulations, banks must provide credit card statements:
- Quarterly
- Monthly, with clear itemisation of transactions and charges (Correct answer)
- Annually
- Only on customer request
Correct answer: Monthly, with clear itemisation of transactions and charges
Banks must provide monthly credit card statements showing all transactions, fees, interest charges, minimum payment, and payment due date, enabling customers to track spending and manage repayments.
Question 29: What type of collective investment scheme is most commonly offered to retail investors in the UAE?
- Private equity funds
- Hedge funds
- Open-ended mutual funds (Correct answer)
- Venture capital funds
Correct answer: Open-ended mutual funds
Open-ended mutual funds are the most common collective investment schemes available to retail investors in the UAE, offering diversification, professional management, and daily liquidity.
Question 30: The CBUAE's regulation on 'responsible lending' requires banks to:
- Lend to all customers who request credit
- Assess customer affordability before approving credit (Correct answer)
- Offer credit only to customers with existing accounts
- Approve credit applications within 24 hours
Correct answer: Assess customer affordability before approving credit
Responsible lending requires banks to assess whether a customer can afford repayments before approving credit, considering income, existing debts, and expenses to prevent over-indebtedness.
Question 31: Under UAE regulations, the maximum annual percentage rate (APR) cap on personal loans from banks is:
- No statutory cap, but CBUAE guidance sets expected ranges (Correct answer)
- As agreed between the bank and customer freely
- 30% APR
- 5% APR
Correct answer: No statutory cap, but CBUAE guidance sets expected ranges
While there is no hard statutory APR cap for banks, the CBUAE issues guidance on pricing, monitors market rates, and can intervene where rates are found to be exploitative or to cause consumer harm.
Question 32: Under UAE AML laws, the maximum prison sentence for a money laundering conviction is:
- 2 years
- Life imprisonment
- 5 years
- 10 years (Correct answer)
Correct answer: 10 years
Federal Decree-Law No. 20 of 2018 provides for imprisonment of up to 10 years and substantial fines for money laundering offences, with enhanced penalties for aggravated cases.
Question 33: Under UAE SCA regulations, 'insider trading' occurs when a person trades on:
- Information from general market commentary
- Publicly available analyst reports
- Material non-public information about a listed company (Correct answer)
- News published in financial newspapers
Correct answer: Material non-public information about a listed company
Insider trading involves using material, non-public information — to which a person has access by virtue of their position — to trade in securities, gaining an unfair advantage over other market participants.
Question 34: What is the Basel III framework's relevance to UAE banks?
- It has no relevance to UAE banks
- It sets international standards for bank capital adequacy, stress testing, and liquidity that UAE banks must follow (Correct answer)
- It regulates insurance companies only
- It only applies to European banks
Correct answer: It sets international standards for bank capital adequacy, stress testing, and liquidity that UAE banks must follow
The CBUAE has adopted Basel III standards, requiring UAE banks to maintain minimum capital ratios, conduct stress tests, and meet liquidity requirements to ensure financial system stability.
Question 35: Under the UAE's risk management framework, 'Wrong Way Risk' refers to:
- Model errors that underestimate actual risk
- Risk that increases when markets move in the expected direction
- Trading positions taken against internal risk limits
- Correlation between counterparty default risk and the value of the exposure increasing simultaneously (Correct answer)
Correct answer: Correlation between counterparty default risk and the value of the exposure increasing simultaneously
Wrong Way Risk occurs when exposure to a counterparty increases at the same time as the probability of their default — for example, buying protection from a counterparty whose creditworthiness is linked to the reference asset.
Question 36: UAE market conduct rules on 'short selling' require:
- Approval of each short sale by the SCA
- Complete prohibition of all short selling
- Short selling only through designated broker-dealers
- Disclosure of significant net short positions and compliance with approved short selling frameworks (Correct answer)
Correct answer: Disclosure of significant net short positions and compliance with approved short selling frameworks
Regulated short selling is permitted in UAE markets subject to disclosure requirements, approved securities lists, and compliance with SCA frameworks, balancing market efficiency with protection against abusive short selling.
Question 37: Under UAE consumer protection regulations, debt collection practices must:
- Be conducted within CBUAE guidelines prohibiting harassment, threats, and contact outside permitted hours (Correct answer)
- Allow third-party collectors to contact family members freely
- Use any means necessary to recover debts
- Include daily calls to a debtor's workplace
Correct answer: Be conducted within CBUAE guidelines prohibiting harassment, threats, and contact outside permitted hours
CBUAE regulations prohibit abusive, harassing, or deceptive debt collection practices, restricting contact hours, prohibiting threats, and preventing contact with third parties such as family or employers.
Question 38: What distinguishes NASDAQ Dubai from the Dubai Financial Market (DFM)?
- DFM only allows UAE nationals to trade
- They are the same exchange with different names
- NASDAQ Dubai only trades commodities
- NASDAQ Dubai operates within the DIFC under DFSA regulation, while DFM is SCA-regulated (Correct answer)
Correct answer: NASDAQ Dubai operates within the DIFC under DFSA regulation, while DFM is SCA-regulated
NASDAQ Dubai operates within the Dubai International Financial Centre under DFSA regulation, while DFM operates under federal SCA regulation, giving them different regulatory frameworks.
Question 39: What is a Real Estate Investment Trust (REIT) as regulated in the UAE?
- A publicly traded fund that owns and operates income-generating real estate (Correct answer)
- A private real estate development company
- A type of mortgage product
- A government housing scheme
Correct answer: A publicly traded fund that owns and operates income-generating real estate
REITs in the UAE are SCA-regulated investment vehicles that pool investor funds to own and manage income-generating real estate properties, distributing most income as dividends.
Question 40: What is the purpose of the UAE's 'Ultimate Beneficial Owner' (UBO) registry?
- To create a government record of who truly owns and controls companies in the UAE (Correct answer)
- To facilitate tax collection from high-net-worth individuals
- To track the movement of beneficial ownership interests in real-time
- To replace the need for CDD by financial institutions
Correct answer: To create a government record of who truly owns and controls companies in the UAE
The UBO registry, maintained by company registrars, creates a record of beneficial owners of UAE companies, supporting AML/CFT investigations and making corporate transparency more effective.
Question 41: The SCA requires that investment managers provide clients with performance reports:
- At least quarterly, showing returns, fees, and portfolio composition (Correct answer)
- Only on specific client request
- Annually in a standardised format
- After each individual transaction
Correct answer: At least quarterly, showing returns, fees, and portfolio composition
Periodic performance reporting — at minimum quarterly — enables clients to monitor portfolio performance, assess whether managers are meeting objectives, and understand fees charged against their portfolio.
Question 42: The CBUAE's regulations on insurance intermediaries require brokers to:
- Act exclusively in the interest of the insurer
- Avoid recommending Islamic insurance products
- Charge standardised commissions set by the regulator
- Act in the best interests of their clients and disclose their remuneration (Correct answer)
Correct answer: Act in the best interests of their clients and disclose their remuneration
Insurance brokers must act in the client's best interest as their agent, and must disclose their remuneration (commissions, fees) to clients to manage conflicts of interest transparently.
Question 43: The CBUAE's framework for 'Systemically Important Banks' (D-SIBs) requires them to hold:
- Additional capital buffers (D-SIB surcharge) above standard Basel III minimums (Correct answer)
- Lower capital ratios due to their systemic importance
- Reduced liquidity requirements
- Exemption from stress testing requirements
Correct answer: Additional capital buffers (D-SIB surcharge) above standard Basel III minimums
Domestic Systemically Important Banks must hold additional capital surcharges (D-SIB buffers) reflecting their systemic importance — the larger the systemic footprint, the higher the additional buffer.
Question 44: What is 'layering' in the money laundering process?
- Placing cash into the banking system
- Using complex transactions to distance funds from their criminal origin (Correct answer)
- Investing laundered funds in legitimate businesses
- Filing false suspicious transaction reports
Correct answer: Using complex transactions to distance funds from their criminal origin
Layering involves creating complex transaction chains — wire transfers, currency conversions, offshore accounts, investments — to obscure the audit trail and make it difficult to link funds to their criminal source.
Question 45: Under UAE insurance consumer protection rules, insurers must settle valid claims within:
- Only after litigation is completed
- Defined timeframes specified by the regulator (typically within 15-30 business days for straightforward claims) (Correct answer)
- 5 years of the claim being submitted
- No defined timeframe — at the insurer's discretion
Correct answer: Defined timeframes specified by the regulator (typically within 15-30 business days for straightforward claims)
UAE insurance regulations specify timeframes within which insurers must assess and settle valid claims, preventing unreasonable delays that cause hardship to claimants.
Question 46: Under UAE consumer protection regulations, a customer switching banks must have their credit facilities ported or settled:
- Only upon production of a court order
- Within agreed timeframes without unreasonable barriers or penalties beyond regulatory caps (Correct answer)
- Only if the new bank accepts the liability
- With a minimum 12-month lock-in period
Correct answer: Within agreed timeframes without unreasonable barriers or penalties beyond regulatory caps
Regulations promote banking mobility by ensuring customers can switch banks without unreasonable obstacles, with processes for settling or transferring credit facilities subject to regulatory fee caps.
Question 47: The CBUAE's regulation on credit cards requires that minimum payment disclosures include:
- The bank's internal cost of funds
- Warning about the total cost and time to repay if only minimum payments are made (Correct answer)
- Comparison with competitor rates
- Only the minimum payment amount
Correct answer: Warning about the total cost and time to repay if only minimum payments are made
Minimum payment warnings must show customers the full cost and extended repayment period of paying only the minimum, preventing customers from unknowingly incurring substantial interest charges.
Question 48: The UAE's AML/CFT supervisory framework assigns primary AML oversight of banks to which body?
- Ministry of Economy
- UAE Financial Intelligence Unit (UAEFIU)
- Central Bank of the UAE (CBUAE) (Correct answer)
- Abu Dhabi Executive Council
Correct answer: Central Bank of the UAE (CBUAE)
The CBUAE is the primary AML/CFT supervisor for banks and other financial institutions it licenses, conducting examinations and enforcing compliance with AML regulations.
Question 49: What are the three stages of money laundering?
- Placement, layering, and integration (Correct answer)
- Detection, reporting, and prosecution
- Identification, verification, and monitoring
- Suspicion, investigation, and freezing
Correct answer: Placement, layering, and integration
Money laundering proceeds through placement (introducing illicit funds into the financial system), layering (obscuring the trail through complex transactions), and integration (reintroducing funds as legitimate).
Question 50: What information must be disclosed in a UAE credit card agreement under consumer protection rules?
- Only the credit limit and annual fee
- Annual fees, interest rates, minimum payment requirements, and late payment charges (Correct answer)
- The credit card network's processing fees
- The bank's internal cost of funds
Correct answer: Annual fees, interest rates, minimum payment requirements, and late payment charges
Credit card agreements must clearly disclose all material terms including annual fees, interest rates (APR), minimum payment amounts, late payment charges, and the consequences of minimum payment only.
Question 51: What is a sukuk in Islamic finance as practiced in the UAE?
- A derivative instrument
- An Islamic financial certificate similar to a bond but compliant with Sharia law (Correct answer)
- A type of insurance product
- A conventional interest-bearing bond
Correct answer: An Islamic financial certificate similar to a bond but compliant with Sharia law
Sukuk are Islamic financial certificates that represent ownership in an underlying asset or project, providing returns without charging interest, making them Sharia-compliant alternatives to bonds.
Question 52: What is the UAE's approach to combating terrorism financing?
- Only focusing on large cash transactions
- A comprehensive framework including criminalization, freezing of terrorist assets, and international cooperation (Correct answer)
- Relying entirely on international organizations
- Only monitoring foreign nationals
Correct answer: A comprehensive framework including criminalization, freezing of terrorist assets, and international cooperation
The UAE has established a comprehensive counter-terrorism financing framework including criminal penalties, mechanisms for freezing terrorist assets without delay, and active participation in international cooperation.
Question 53: Under UAE conduct rules, a firm receiving 'soft commission' (research paid for through client brokerage) must:
- Use soft commissions exclusively for entertainment expenses
- Keep soft commission arrangements confidential from clients
- Disclose the arrangement to clients and ensure it benefits them (Correct answer)
- Obtain SCA approval for each soft commission arrangement
Correct answer: Disclose the arrangement to clients and ensure it benefits them
Soft commission arrangements must be disclosed to clients and the benefits — primarily investment research and execution services — must genuinely benefit the clients whose business generated the commissions.
Question 54: Which UAE regulatory authority primarily supervises Takaful operators in the onshore UAE market following the 2020 regulatory restructuring?
- Financial Services Regulatory Authority (FSRA)
- Securities and Commodities Authority (SCA)
- Dubai Financial Services Authority (DFSA)
- Central Bank of the UAE (CBUAE), which absorbed the former Insurance Authority (Correct answer)
Correct answer: Central Bank of the UAE (CBUAE), which absorbed the former Insurance Authority
The former Insurance Authority was integrated into the CBUAE under Federal Decree-Law No. 25 of 2020, so the CBUAE now supervises Takaful operators in the onshore market.
Question 55: What is the role of market makers on UAE stock exchanges?
- To audit listed companies
- To provide continuous buy and sell quotes to enhance market liquidity (Correct answer)
- To set listing fees for new companies
- To approve new investor accounts
Correct answer: To provide continuous buy and sell quotes to enhance market liquidity
Market makers on UAE exchanges provide continuous two-way quotes (bid and ask prices), enhancing liquidity and enabling smoother trading by ensuring there is always a counterparty available.
Question 56: 'Correspondent banking' in UAE regulation refers to:
- Direct lending between two UAE banks
- Central Bank emergency liquidity facilities
- Services provided by one bank (correspondent) to another (respondent) for cross-border transactions (Correct answer)
- Interbank deposit arrangements within the UAE only
Correct answer: Services provided by one bank (correspondent) to another (respondent) for cross-border transactions
Correspondent banking involves a bank providing payment, clearing, and other services to a foreign respondent bank, facilitating cross-border transactions but creating AML/CFT risks requiring due diligence.
Question 57: The CBUAE requires banks to have a 'Business Continuity Plan' (BCP) that addresses:
- Plans for voluntary bank liquidation
- Annual staff rotation procedures
- Procedures for expanding into new markets
- Recovery of critical functions within defined timeframes after a disruption (Correct answer)
Correct answer: Recovery of critical functions within defined timeframes after a disruption
BCPs must ensure banks can recover and continue critical operations within agreed Recovery Time Objectives (RTOs) after any significant disruption, whether from technology failure, natural disaster, or other events.
Question 58: What is 'Expected Loss' (EL) in credit risk modelling used by UAE banks?
- EL = Probability of Default × Loss Given Default × Exposure at Default (Correct answer)
- EL = Stress tested loss × confidence interval
- EL = Non-performing loans / total loans
- EL = Historical loss rate × total loan book
Correct answer: EL = Probability of Default × Loss Given Default × Exposure at Default
EL is calculated as PD (probability of borrower defaulting) multiplied by LGD (proportion of exposure lost if default occurs) multiplied by EAD (outstanding balance at time of default), providing the average expected loss.
Question 59: Which principle underpins the UAE's risk-based approach to financial regulation?
- Focusing oversight exclusively on foreign-owned firms
- Applying identical rules to all financial institutions
- Allocating supervisory resources proportionate to assessed risk (Correct answer)
- Regulating only systemically important banks
Correct answer: Allocating supervisory resources proportionate to assessed risk
A risk-based approach means that regulators identify, assess, and understand risks, then apply supervisory resources and controls proportionate to those risks rather than using a one-size-fits-all approach.
Question 60: Under UAE regulations, a firm's 'personal account dealing' policy must:
- Allow unrestricted personal trading by all staff
- Apply only to senior management
- Restrict all personal investments by compliance staff only
- Require pre-clearance for trades in securities where the firm has material interests and prohibit trading on inside information (Correct answer)
Correct answer: Require pre-clearance for trades in securities where the firm has material interests and prohibit trading on inside information
Personal account dealing policies must require staff to obtain pre-clearance for trades in covered securities, maintain records, observe blackout periods, and prohibit trading on inside information or in conflict with client interests.
Question 61: Under SCA regulations, what must an investment firm do before accepting a new client for investment services?
- Obtain approval from the SCA for each new client relationship
- Ensure the client holds a minimum balance of AED 500,000
- Conduct a suitability or appropriateness assessment depending on the service type (Correct answer)
- Simply verify the client's identity
Correct answer: Conduct a suitability or appropriateness assessment depending on the service type
Before providing investment advice, firms must assess suitability (goals, risk tolerance, financial situation, knowledge); for execution-only services, they may assess appropriateness based on knowledge and experience.
Question 62: Which UAE regulatory body is responsible for supervising insurance companies onshore?
- Ministry of Finance
- Dubai Financial Services Authority
- Insurance Authority (now part of CBUAE) (Correct answer)
- Securities and Commodities Authority
Correct answer: Insurance Authority (now part of CBUAE)
The Insurance Authority was merged into the CBUAE in 2020, making the CBUAE responsible for regulating and supervising insurance companies operating onshore in the UAE.
Question 63: Under CBUAE regulations, when must a financial institution disclose all fees applicable to a product?
- At the first complaint from the customer
- Before or at the time of signing the agreement (Correct answer)
- Upon request only, not proactively
- Only in the annual account statement
Correct answer: Before or at the time of signing the agreement
Full fee disclosure must be made before or at the point of sale, giving customers the information needed to make informed decisions; post-sale disclosure of undisclosed fees is a regulatory breach.
Question 64: Under UAE AML regulations, what is the threshold for mandatory cash transaction reporting?
- AED 500,000 or equivalent
- AED 10,000 or equivalent
- AED 100,000 or equivalent
- AED 40,000 or equivalent (Correct answer)
Correct answer: AED 40,000 or equivalent
Financial institutions and designated non-financial businesses must report cash transactions of AED 40,000 or more (or equivalent in other currencies) to the relevant authorities.
Question 65: The CBUAE requires banks to make their schedules of charges:
- Known only to relationship managers
- Publicly available and easily accessible to customers (Correct answer)
- Available exclusively in Arabic
- Disclosed only on request
Correct answer: Publicly available and easily accessible to customers
Banks must publish and prominently display their schedules of charges — all fees applicable to products and services — so customers can make informed comparisons and understand the full cost of banking.
Question 66: Under UAE market conduct rules, 'front running' involves:
- A firm releasing research before the market opens
- A broker trading for their own account before executing a large client order to benefit from the price movement (Correct answer)
- Trading securities on behalf of foreign clients
- Placing orders immediately after market opening
Correct answer: A broker trading for their own account before executing a large client order to benefit from the price movement
Front running is a form of market abuse where a broker trades for their own account ahead of executing a large client order, knowing the client's order will move the market price in a predictable direction.
Question 67: Under ADGM's Data Protection Regulations, a 'data breach' must be reported to the ADGM Registration Authority within:
- Annually in the firm's regulatory report
- 30 days of the breach
- Only if the breach affects more than 100 individuals
- 72 hours of becoming aware of the breach (where feasible) (Correct answer)
Correct answer: 72 hours of becoming aware of the breach (where feasible)
Mirroring the EU GDPR requirement, ADGM's Data Protection Regulations require notifying the Registration Authority within 72 hours of discovering a personal data breach, enabling prompt regulatory response.
Question 68: Under UAE regulations, banks must maintain records of customer complaints for:
- 6 months only
- Indefinitely
- Minimum 5 years (Correct answer)
- Until the customer closes their account
Correct answer: Minimum 5 years
Customer complaint records must be retained for at least 5 years, enabling regulators to audit complaint handling quality and trends, and providing evidence in disputes.
Question 69: The concept of 'red flags' in AML compliance refers to:
- Customers who have failed identity verification
- Indicators that a transaction or customer may be connected to money laundering or terrorism financing (Correct answer)
- Accounts with negative balances
- Transactions that have been flagged by the system as errors
Correct answer: Indicators that a transaction or customer may be connected to money laundering or terrorism financing
Red flags are warning indicators — such as unusual transaction patterns, inconsistent customer information, or unexplained wealth — that should trigger further investigation and potentially an STR.
Question 70: What is the Designated Non-Financial Businesses and Professions (DNFBPs) obligation under UAE AML law?
- Real estate agents, dealers in precious metals, lawyers, and auditors must also comply with AML/CFT requirements (Correct answer)
- Only insurance companies have reporting obligations
- AML only applies to foreign companies
- Only banks have AML obligations
Correct answer: Real estate agents, dealers in precious metals, lawyers, and auditors must also comply with AML/CFT requirements
UAE AML law extends AML/CFT obligations beyond financial institutions to DNFBPs including real estate agents, dealers in precious metals and stones, lawyers, notaries, and auditors.
Question 71: The UAE's regulatory framework for payment service providers is governed by:
- Ministry of Finance Payment Circular
- CBUAE Retail Payment Services and Card Schemes Regulation (Correct answer)
- SCA Payment Regulation
- DIFC Payment Services Law
Correct answer: CBUAE Retail Payment Services and Card Schemes Regulation
The CBUAE's Retail Payment Services and Card Schemes Regulation (2021) governs payment service providers, electronic money institutions, and card schemes operating in the UAE.
Question 72: Under UAE regulations, a 'collective investment scheme' (CIS) must be:
- Managed exclusively by UAE national fund managers
- Offered only to qualified institutional investors without regulatory approval
- Registered or recognised by the SCA before being offered to UAE investors (Correct answer)
- Invested only in UAE-listed securities
Correct answer: Registered or recognised by the SCA before being offered to UAE investors
CIS (including mutual funds, ETFs, and unit trusts) must be registered with or recognised by the SCA before being marketed or sold to UAE investors, ensuring appropriate disclosure and investor protection.
Question 73: What right does a UAE consumer have if dissatisfied with a bank's final complaint response?
- Pursue only through civil courts
- Accept the bank's decision as final
- Complain to the Financial Action Task Force
- Escalate to the CBUAE Consumer Protection Department (Correct answer)
Correct answer: Escalate to the CBUAE Consumer Protection Department
If unsatisfied with a bank's final response, UAE customers can escalate their complaint to the CBUAE's Consumer Protection Department, which can intervene and require the bank to remedy the situation.
Question 74: What is 'structuring' in the context of UAE AML regulations?
- Designing investment portfolios
- Structuring loan repayment schedules
- Breaking up large cash transactions to avoid reporting thresholds (Correct answer)
- Organising a bank's compliance department
Correct answer: Breaking up large cash transactions to avoid reporting thresholds
Structuring (also called smurfing) involves deliberately splitting large transactions into smaller amounts to avoid currency transaction reporting thresholds, and is itself an AML offence in the UAE.
Question 75: What is the role of the UAE's National Anti-Money Laundering Committee (NAMLC)?
- To regulate cryptocurrency
- To coordinate national AML/CFT policies, conduct national risk assessments, and oversee implementation of AML strategy (Correct answer)
- To process individual SAR reports
- To prosecute money laundering cases
Correct answer: To coordinate national AML/CFT policies, conduct national risk assessments, and oversee implementation of AML strategy
NAMLC coordinates the UAE's national AML/CFT policy framework, conducts national risk assessments, and oversees the implementation of the national strategy to combat money laundering and terrorism financing.
Question 76: What is the purpose of the UAE's Financial Consumer Protection Department within the CBUAE?
- To operate a government-run bank for consumers
- To licence new consumer finance companies
- To oversee consumer protection regulation, handle escalated complaints, and conduct market surveillance (Correct answer)
- To issue credit cards on behalf of unlicensed lenders
Correct answer: To oversee consumer protection regulation, handle escalated complaints, and conduct market surveillance
The Consumer Protection Department supervises financial institutions' compliance with consumer protection rules, handles complaints escalated from firms, and conducts thematic market reviews to identify and address consumer harm.
Question 77: Under UAE insurance regulations, what is the maximum period for settling a motor insurance third-party liability claim?
- As specified in the policy and regulatory guidelines, typically within defined working days (Correct answer)
- At the insurer's sole discretion with no time limit
- 5 years after the accident
- Only after a court judgment
Correct answer: As specified in the policy and regulatory guidelines, typically within defined working days
Insurance regulations specify maximum settlement periods for different claim types, with motor third-party claims subject to defined timelines to ensure prompt compensation for injured parties.
Question 78: Which of the following is a feature of the UAE's Delivery Versus Payment (DVP) settlement system?
- Payment is made 30 days after delivery
- Settlement occurs only in US dollars
- Only applicable to government bonds
- Securities and payment are exchanged simultaneously to reduce settlement risk (Correct answer)
Correct answer: Securities and payment are exchanged simultaneously to reduce settlement risk
DVP ensures that the transfer of securities occurs only when payment is made simultaneously, minimizing counterparty risk in securities transactions on UAE exchanges.
Question 79: Under UAE law, what is the maximum penalty a bank can charge for a bounced cheque presented by a customer?
- As set by CBUAE regulations, with caps on penalty fees (Correct answer)
- No penalty is permitted
- AED 50,000 regardless of cheque value
- An unlimited penalty at the bank's discretion
Correct answer: As set by CBUAE regulations, with caps on penalty fees
CBUAE regulations cap the fees banks can charge for returned/bounced cheques, preventing disproportionate penalties that could financially devastate customers for administrative failures.
Question 80: The UAE's conduct rules require financial promotions to be approved by:
- The recipient's regulator in their home country
- The SCA for each individual promotion
- An external legal firm
- A senior, competent person within the firm before distribution (Correct answer)
Correct answer: A senior, competent person within the firm before distribution
Financial promotions must be approved by a sufficiently senior and competent person within the firm who can attest that the promotion complies with regulatory requirements before it is communicated to clients or the public.
Question 81: Which authority serves as the central bank and primary financial regulator in the UAE?
- Financial Services Regulatory Authority (FSRA)
- Dubai Financial Services Authority (DFSA)
- Securities and Commodities Authority (SCA)
- Central Bank of the UAE (CBUAE) (Correct answer)
Correct answer: Central Bank of the UAE (CBUAE)
The Central Bank of the UAE (CBUAE) is the primary monetary and financial regulatory authority for onshore UAE, overseeing banks, payment systems, and monetary policy.
Question 82: Which body serves as the supreme Sharia authority for Islamic financial institutions operating in the UAE's onshore market?
- Islamic Financial Services Board (IFSB)
- Accounting and Auditing Organisation for Islamic Financial Institutions (AAOIFI)
- Higher Sharia Authority (HSA) at the CBUAE (Correct answer)
- Dubai Islamic Economy Development Centre
Correct answer: Higher Sharia Authority (HSA) at the CBUAE
The Higher Sharia Authority (HSA), established under the CBUAE, is the supreme Sharia authority whose fatawa are binding on all Islamic financial institutions in the UAE's onshore market.
Question 83: What is 'correspondent banking due diligence' under UAE AML regulations?
- Reviewing the credit quality of correspondent loans
- Checking correspondent banks' capital ratios
- Monitoring daily settlement flows with correspondent banks
- Assessing the AML/CFT controls and reputation of foreign respondent banks (Correct answer)
Correct answer: Assessing the AML/CFT controls and reputation of foreign respondent banks
Before establishing correspondent relationships, UAE banks must assess the AML/CFT framework, regulatory environment, and controls of foreign respondent banks to ensure they don't facilitate money laundering.
Question 84: What is the purpose of the UAE's 'Virtual Assets Regulatory Authority' (VARA)?
- To manage the UAE Central Bank's digital currency
- To oversee all UAE fintech companies
- To regulate virtual asset service providers and crypto exchanges in Dubai (Correct answer)
- To license blockchain developers only
Correct answer: To regulate virtual asset service providers and crypto exchanges in Dubai
VARA, established in Dubai, regulates virtual asset service providers (VASPs) including crypto exchanges, custody services, and NFT marketplaces, applying AML/CFT and consumer protection requirements.
Question 85: What is 'concentration risk' in the context of UAE bank credit risk management?
- Currency risk from operating in a single currency
- Excessive exposure to a single borrower, sector, geography, or product (Correct answer)
- The risk of interest rate rises affecting all loans simultaneously
- The risk that a bank's operational systems fail at once
Correct answer: Excessive exposure to a single borrower, sector, geography, or product
Concentration risk arises when a portfolio is excessively exposed to a single counterparty, industry sector, geographic region, or product type, meaning a single adverse event can cause disproportionate losses.
Question 86: What is the purpose of the investor protection fund maintained by UAE exchanges?
- To compensate investors for losses caused by broker default or fraud (Correct answer)
- To fund government infrastructure projects
- To provide interest-free loans to traders
- To guarantee investment returns
Correct answer: To compensate investors for losses caused by broker default or fraud
The investor protection fund provides compensation to investors who suffer losses due to broker default, bankruptcy, or fraudulent activities, maintaining confidence in the market.
Question 87: What is a Politically Exposed Person (PEP) in the context of UAE financial compliance?
- A foreign national living in the UAE
- Any employee of a financial institution
- Any person with a net worth exceeding AED 5 million
- An individual who holds or has held a prominent public function (Correct answer)
Correct answer: An individual who holds or has held a prominent public function
A PEP is defined as an individual who holds or has held a prominent public function, such as a head of state, senior politician, or senior government official, requiring enhanced due diligence.
Question 88: The CBUAE requires financial institutions to appoint a dedicated:
- External ombudsman for all disputes
- Customer Complaints Officer or unit to handle retail customer complaints (Correct answer)
- Pricing committee to review all product rates
- Legal counsel for each branch
Correct answer: Customer Complaints Officer or unit to handle retail customer complaints
Financial institutions must have a dedicated complaints handling function with appropriate resources and authority to receive, investigate, and resolve customer complaints fairly and promptly.
Question 89: The UAE's 'Hawala' registration requirement means that:
- Informal value transfer operators must register with the CBUAE (Correct answer)
- Banks must maintain correspondent relationships only with FATF members
- Foreign currency exchange is banned without a licence
- All wire transfers must be reported to the UAEFIU
Correct answer: Informal value transfer operators must register with the CBUAE
The CBUAE requires Hawala operators and other informal value transfer service providers to register, enabling oversight and AML/CFT compliance monitoring of these channels.
Question 90: Under DFSA regulations, 'Market Makers' in DIFC are required to:
- Maintain continuous two-way price quotes within defined spreads during market hours (Correct answer)
- Register each securities position with the DFSA before quoting
- Provide guaranteed execution for retail clients at quoted prices
- Trade only on the DFSA's behalf as market operator
Correct answer: Maintain continuous two-way price quotes within defined spreads during market hours
Market Makers must provide continuous bid and ask quotes within defined spread limits during trading hours, providing liquidity to the market; in return they may receive certain exemptions from short selling restrictions.
Question 91: What is the minimum capital requirement concept for UAE brokerage firms?
- There is no minimum capital requirement
- Brokerage firms must maintain prescribed minimum capital to ensure financial stability and client protection (Correct answer)
- Only AED 1,000 is required
- Capital requirements only apply to foreign firms
Correct answer: Brokerage firms must maintain prescribed minimum capital to ensure financial stability and client protection
The SCA requires brokerage firms to maintain minimum capital levels to ensure they have sufficient financial resources to meet their obligations and protect client assets.
Question 92: The CBUAE requires banks to prepare 'Recovery Plans' and regulators prepare 'Resolution Plans' under which framework?
- Systemic Risk Buffer framework
- Basel III Pillar 2 ICAAP
- Recovery and Resolution Planning (RRP) framework (Correct answer)
- Liquidity Contingency Planning framework
Correct answer: Recovery and Resolution Planning (RRP) framework
Recovery Plans (by banks) and Resolution Plans (by regulators) are prepared under the RRP framework, ensuring that systemically important banks can either recover from distress or be resolved in an orderly manner without public funds.
Question 93: How does the UAE regulate cross-border financial advisory services?
- Cross-border advisory is completely banned
- Cross-border advisory is completely unrestricted
- Only UAE firms can provide advisory services
- Foreign advisory firms must be licensed or operate through UAE-licensed entities to provide services to UAE-based clients (Correct answer)
Correct answer: Foreign advisory firms must be licensed or operate through UAE-licensed entities to provide services to UAE-based clients
UAE regulations require foreign advisory firms to either obtain local licensing or operate through partnerships with UAE-licensed entities to provide financial advisory services to clients in the UAE.
Question 94: The Consumer Protection Regulation prohibits financial institutions from:
- Using misleading advertising or making false statements about products (Correct answer)
- Offering discounts to preferred customers
- Refusing to open accounts for non-residents
- Charging fees for account maintenance
Correct answer: Using misleading advertising or making false statements about products
Financial institutions are prohibited from making misleading, deceptive, or false statements in advertising or communications, and from using high-pressure sales tactics that could harm consumers.
Question 95: The CBUAE's Guidance on Outsourcing requires banks to ensure that outsourced functions:
- Remain subject to the bank's oversight and regulatory access (Correct answer)
- Are fully transferred to the service provider's control
- Can be terminated without notice in any circumstance
- Are disclosed only in annual reports
Correct answer: Remain subject to the bank's oversight and regulatory access
Banks remain responsible for outsourced activities and must maintain oversight, ensure regulatory access to outsourced operations, and manage associated risks including operational, concentration, and data risks.
Question 96: The ADGM's Financial Services and Markets Regulations (FSMR) were modelled on:
- The EU MiFID II framework
- The US Dodd-Frank Act
- The UK Financial Services and Markets Act 2000 (FSMA) (Correct answer)
- The Australian Corporations Act
Correct answer: The UK Financial Services and Markets Act 2000 (FSMA)
ADGM's FSMR was modelled on the UK FSMA 2000, providing a comprehensive, familiar framework for regulated activities, authorisation, enforcement, and financial services oversight aligned with UK-based international standards.
Question 97: What is short selling and what is its regulatory status in the UAE?
- Selling securities not owned by the seller; regulated and permitted under specific SCA rules (Correct answer)
- Buying securities on margin; always permitted
- Selling securities at a discount; prohibited
- Buying securities in foreign currencies; unregulated
Correct answer: Selling securities not owned by the seller; regulated and permitted under specific SCA rules
Short selling involves selling securities the seller does not own, borrowing them to deliver. The SCA has established a regulatory framework permitting short selling under specific conditions including disclosure requirements.
Question 98: The UAE's 'Al Etihad Credit Bureau' (AECB) provides:
- An employer verification database
- A blacklist of AML-suspicious customers
- A complaints registry for banking consumers
- Credit reports and credit scores for individuals and businesses in the UAE (Correct answer)
Correct answer: Credit reports and credit scores for individuals and businesses in the UAE
AECB collects and analyses credit data from financial institutions to produce credit reports and scores, helping lenders make responsible lending decisions and giving consumers insight into their credit standing.
Question 99: The 'Travel Rule' under FATF Recommendation 16 requires:
- Funds to be held for 3 days before international transfer
- Financial institutions to track customer travel
- Originator and beneficiary information to accompany wire transfers (Correct answer)
- Mandatory approval for cross-border transfers above USD 10,000
Correct answer: Originator and beneficiary information to accompany wire transfers
The Travel Rule requires financial institutions to collect, retain, and transmit originator and beneficiary information with wire transfers, enabling law enforcement to trace the flow of funds.
Question 100: What are the two main stock exchanges operating in the UAE?
- NASDAQ Dubai and Bahrain Bourse
- Abu Dhabi Securities Exchange (ADX) and Dubai Financial Market (DFM) (Correct answer)
- Kuwait Stock Exchange and Muscat Securities Market
- DFM and London Stock Exchange
Correct answer: Abu Dhabi Securities Exchange (ADX) and Dubai Financial Market (DFM)
The Abu Dhabi Securities Exchange (ADX) and the Dubai Financial Market (DFM) are the two primary stock exchanges in the UAE, both regulated by the SCA.
CISI UAE Financial Rules and Regulations (FRR)
The CISI UAE Financial Rules and Regulations (FRR) certification tests knowledge of the UAE financial regulatory framework, AML/CFT obligations, consumer protection rules, and professional standards required for individuals working in UAE financial services.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds
These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- cisi.org — Test delivery, score release, retake policy, exam format, time limit, exam information · verified Oct 2026