CRCM Certified Regulatory Compliance Manager MCQ 5 — Questions and Answers
Question 1: Under the Children's Online Privacy Protection Act (COPPA), websites directed at children under what age must obtain verifiable parental consent before collecting personal information?
- 13 (Correct answer)
- 16
- 18
- 21
Correct answer: 13
COPPA requires operators of websites directed to children under 13 to obtain verifiable parental consent before collecting personal information from those children.
Question 2: When a consumer disputes the accuracy of information in their credit report under the Fair Credit Reporting Act (FCRA), the credit reporting agency (CRA) must complete its investigation within:
- 15 business days
- 30 days (with a possible 15-day extension) (Correct answer)
- 45 days
- 60 days
Correct answer: 30 days (with a possible 15-day extension)
The FCRA requires CRAs to investigate disputes within 30 days, extendable to 45 days if the consumer provides additional relevant information during the investigation.
Question 3: Which of the following actions would constitute a violation of the Unfair, Deceptive, or Abusive Acts or Practices (UDAAP) standard under Dodd-Frank?
- Charging a disclosed overdraft fee
- Misrepresenting the cost of add-on products to obtain consumer consent (Correct answer)
- Declining to approve a high-risk loan application
- Requiring documentation before extending credit
Correct answer: Misrepresenting the cost of add-on products to obtain consumer consent
Misrepresenting the cost or terms of add-on products to manipulate consumer decision-making is a deceptive act or practice prohibited by UDAAP.
Question 4: A customer opens a new account and provides identification. Under the Customer Identification Program (CIP) rules, the bank must verify the customer's identity:
- Within 30 days of account opening
- Before the account is opened
- Within a reasonable time before or after account opening (Correct answer)
- Only if the transaction exceeds $10,000
Correct answer: Within a reasonable time before or after account opening
CIP rules require identity verification within a reasonable time before or after account opening, allowing flexibility for low-risk situations while ensuring due diligence.
Question 5: The Dodd-Frank Wall Street Reform and Consumer Protection Act created the CFPB and granted it authority over:
- Only banks with assets over $10 billion
- All financial institutions regardless of size
- Nonbank financial companies offering consumer financial products or services, and large banks (Correct answer)
- Only federally chartered institutions
Correct answer: Nonbank financial companies offering consumer financial products or services, and large banks
The CFPB has supervisory authority over nonbank financial companies and depository institutions with over $10 billion in assets, while smaller banks are supervised by their prudential regulators.
Question 6: In a compliance risk assessment, 'inherent risk' is best defined as:
- The risk remaining after controls are applied
- The level of risk present before any mitigating controls are considered (Correct answer)
- Risk identified during a regulatory examination
- The risk associated with third-party vendors only
Correct answer: The level of risk present before any mitigating controls are considered
Inherent risk is the gross or raw level of risk that exists in a process or product before any controls, policies, or mitigating factors are taken into account.
Question 7: Under the Home Ownership and Equity Protection Act (HOEPA), a loan is classified as a 'high-cost mortgage' if it exceeds certain rate or fee thresholds. Which of the following is a consequence of HOEPA coverage?
- The loan becomes automatically void
- Additional disclosures and restrictions on loan terms are required (Correct answer)
- The borrower receives an automatic rate reduction
- The lender must file a special report with HUD
Correct answer: Additional disclosures and restrictions on loan terms are required
HOEPA-covered high-cost mortgages trigger mandatory additional disclosures, restrictions on certain loan terms (e.g., balloon payments, prepayment penalties), and enhanced borrower protections.
CRCM Certified Regulatory Compliance Manager MCQ 5
Under the Children's Online Privacy Protection Act (COPPA), websites directed at children under what age must obtain verifiable parental consent before collecting personal information?