ACAMS CGSS Exam (page: 1)
ACAMS Certified Global Sanctions Specialist
Updated on: 07-Feb-2026

Viewing Page 1 of 14

A sanctions analyst reviews payment requests from a sanctioned country. After investigation, it appears that the request represents a medicine export from a pharmaceutical company to a sanctioned country.
Which step should the analyst take next?

  1. Review the counterparty.
  2. Demand a specific license.
  3. Check for applicable general licenses or exemptions.
  4. Reject the payment.

Answer(s): C

Explanation:

In sanctions compliance frameworks applied globally by bodies such as OFAC, the EU, the UN, the UK, Canada, and Australia, transactions involving humanitarian goods, including medicine and medical supplies, are treated under specific regulatory categories. These frameworks include humanitarian exemptions, general licenses, and permitted transactions for medical or health-related items. The standard compliance expectation requires an analyst to determine whether the activity is already authorized before taking restrictive action.

The Sanctions and Compliance Domains specify that when a transaction involves potential humanitarian goods, the analyst must confirm whether a general license or exemption applies. General licenses commonly authorize exports of medicines, medical devices, and humanitarian materials to sanctioned jurisdictions. The rule requires verification of these authorizations prior to escalation, rejection, or requesting a specific license.

If a general license exists for the type of goods or activity, the transaction may proceed in accordance with regulatory conditions. Only when no exemption or general license applies should a specific license be sought. Therefore, the correct immediate step for the analyst is to check applicable general licenses or exemptions related to medical exports.

Reference from Sanctions and Compliance Domains:

Regulatory requirements relating to humanitarian exemptions under sanctions programs.

General license structures for medical and humanitarian goods in sanctions regimes.

Compliance procedures directing analysts to verify authorizations or exemptions before rejecting or escalating transactions.

Standard sequencing: determine applicability of general licenses or exemptions prior to requesting a specific license.



Which unit function has been identified as critical to managing sanctions risks?

  1. Third-party due diligence firms
  2. Credit risk management
  3. Audit and testing
  4. Human resources

Answer(s): C



Which unit function has been identified as critical to managing sanctions risks?

  1. Third-party due diligence firms
  2. Credit risk management
  3. Audit and testing
  4. Human resources

Answer(s): C

Explanation:

Within sanctions compliance programs, one of the core components identified as essential for effective management of sanctions risks is audit and testing. The Sanctions and Compliance Domains describe that sanctions programs require independent review, periodic testing, and validation to assess whether internal controls, screening systems, and escalation processes operate effectively. Audit and testing units provide the independent assurance needed to detect program weaknesses, evaluate the adequacy of controls, and confirm compliance with regulatory requirements.

Sanctions frameworks emphasize that the ability to identify deficiencies, monitor adherence to procedures, evaluate risk-control effectiveness, and ensure continuous improvement is fundamental to maintaining a sound sanctions compliance environment. Audit and testing functions are responsible for reviewing the design and effectiveness of sanctions policies, validating the performance of screening tools, and ensuring corrective action is taken where deficiencies are found. For this reason, the function is identified as critical for managing sanctions risks across financial institutions and regulated entities.

Reference from Sanctions and Compliance Domains:

Requirements for independent auditing and testing as a core component of an effective sanctions compliance program.

Expectations for regular review of sanctions controls, screening performance, and risk assessment processes.

Emphasis on independent validation to ensure ongoing compliance with regulatory obligations and to detect gaps in sanctions controls.



If a financial institution's filtering system generates an alert matching a client to an individual on the Specially Designated National List, which investigation process should the financial institution follow?

  1. If the customer is an individual whose last name matches the alert, but whose first name does not match, the investigation should continue by contacting the customer for more information.
  2. If the customer is an individual with a match on the first and last name, and the country of birth, but not on the country of residence, then there is no need to proceed further with the investigation.
  3. If the customer is an unrelated company with the same name, there is no need to proceed further with an investigation.
  4. If the customer is a vessel with the same name, the investigation should continue to establish who is the owner of the vessel.

Answer(s): D

Explanation:

Sanctions screening standards require that when a hit is produced by the filtering system, the institution must determine whether the alert is a true match or a false positive through a structured escalation and investigation process. The Sanctions and Compliance Domains emphasize that financial institutions must evaluate all relevant identifiers, including entity type, name, ownership, vessel IMO numbers, and additional attributes.

In the case of vessels, sanctions regulations often target vessels by name and ownership, meaning that a vessel with an identical name requires deeper investigation. Authorities such as OFAC, the EU, and the UK regularly designate vessels because of their involvement in sanctioned activities, and vessel names frequently overlap with commercial entities. Therefore, the correct investigative approach is to continue the investigation to determine the true ownership, IMO number, and whether the vessel is the sanctioned party.

Options A, B, and C describe scenarios typically associated with clear mismatches or cases where additional investigation is unnecessary because essential identifiers do not match. However, vessels require continued review due to the regulatory emphasis on vessel ownership, registration, and operational control as determining factors in sanctions risk.

Reference from Sanctions and Compliance Domains:

Requirements for detailed matching processes in sanctions screening.

Guidance on evaluating entity type, ownership, and identifiers when reviewing alerts.

Rules relating to vessel sanctions, ownership determination, and verification steps.

Procedures for identifying true matches versus false positives in sanctions screening.



The EU­Iran Instrument in Support of Trade Exchange (INSTEX), which allowed EU purchases of Iranian oil after 2018, is an example of:

  1. sanctions evasion.
  2. a special purpose vehicle.
  3. a general license.
  4. a blocking statute.

Answer(s): B

Explanation:

INSTEX was established by EU member states as an operational mechanism designed to facilitate limited and compliant trade with Iran after the re-imposition of U.S. secondary sanctions in 2018. According to the Sanctions and Compliance Domains, INSTEX is categorized as a special purpose vehicle, created specifically to permit trade transactions without reliance on traditional cross-border payment routes exposed to U.S. sanctions risk.

Special purpose vehicles are defined within sanctions frameworks as structured entities created to conduct or support specific categories of trade or payments where direct financial transfers are restricted or exposed to sanctions risk. INSTEX was designed to match European exporters and importers with Iranian counterparts through a barter-style internal clearing arrangement, avoiding external USD payment flows.

It is not a general license, nor is it a blocking statute. It also does not constitute sanctions evasion because it was formally established, publicly announced, and structured within EU legal parameters. Its purpose was to ensure compliance while maintaining limited humanitarian and permitted trade channels.

Reference from Sanctions and Compliance Domains:

Definitions and characteristics of special purpose vehicles in sanctions environments.

Description of EU mechanisms facilitating compliant trade with sanctioned jurisdictions.

Distinction between SPVs, blocking statutes, and licensing frameworks.

Regulatory context regarding INSTEX as an EU-created structured trade mechanism.



EU Restrictive Measures apply: (Select Two.)

  1. on a vessel under the jurisdiction of an EU Member State.
  2. to a company incorporated under the law of a non-EU country, that is 45% owned by a national of an EU Member State.
  3. within a non-EU country, which has a double taxation convention with all EU Member States.
  4. within a non-EU country which is part of the Customs Union agreement with the EU.
  5. to a company outside the territory of the EU, which is incorporated or constituted under the law of an EU Member State.

Answer(s): A,E

Explanation:

EU Restrictive Measures apply to all persons and entities within the territory of the EU, including airspace and territorial waters, and to any vessel or aircraft under the jurisdiction of an EU Member State. This establishes that sanctions obligations extend to vessels registered under EU jurisdictions regardless of location.

EU sanctions also apply to all legal persons, entities, and bodies incorporated or constituted under the law of an EU Member State, even when those entities operate entirely outside EU territory. Legal incorporation under EU law creates an ongoing obligation to comply with EU sanctions.

EU ownership by itself does not trigger sanctions applicability, so a non-EU company that is 45% owned by an EU national does not fall under EU Restrictive Measures. Additionally, arrangements such as double-taxation conventions or participation in customs union agreements do not extend the territorial or legal applicability of EU sanctions to non-EU jurisdictions.

Reference from Sanctions and Compliance Domains:

Territorial applicability of EU sanctions, including vessels and aircraft under Member State jurisdiction.

Applicability to companies incorporated under EU Member State law regardless of geographic operations.

Legal and territorial definitions outlining the scope of EU Restrictive Measures.



Based on the Wolfsberg Guidance on Sanctions Screening, what are the core principles for generating productive alerts? (Select Two.)

  1. Manual processes that ensure lists are screened only against specific jurisdictional data
  2. Including exclusions for parties that pose low risks to be omitted from screening
  3. Addressing the inclusion of a "good guy" list so that it does not suppress common false positives
  4. Reducing the threshold settings from the optimal level to create more productive alerts
  5. Reviewing and removing reference data from screening, on an ongoing basis, once the data is no longer risk relevant

Answer(s): C,E

Explanation:

The Wolfsberg Guidance identifies that effective sanctions screening depends on high-quality, risk- relevant reference data. Institutions must regularly review and remove outdated or irrelevant data to avoid generating unnecessary alerts and ensure screening outputs remain meaningful. Maintaining accurate and current data reduces noise and increases the productivity of alerts.

The Guidance also emphasizes that institutions may use "good guy lists" to reduce false positives, but these lists must be maintained in a controlled way to ensure they do not unintentionally suppress alerts that could indicate sanctions risk. Proper governance must accompany good-guy lists so that risk-relevant entities are not excluded from screening.

The Guidance does not support reducing thresholds to generate more alerts, nor does it promote removing low-risk parties without structured criteria. It also does not recommend manual jurisdiction-specific screening as a method of improving alert quality.

Reference from Sanctions and Compliance Domains:

Wolfsberg principles on management of reference data for sanctions screening.

Guidance on proper use and governance of "good guy lists."

Recommendations for ensuring alerts remain relevant, accurate, and risk-based.



Which action is an acceptable strategy for a financial institution's payment sanctions screening process?

  1. The institution excludes incoming SWIFT transfers from sanction screening, instead relying on the controls of the sending/correspondent bank.
  2. The institution uses software that does not account for alternative spellings of prohibited countries or parties.
  3. The institution incorporates updates to sanction listings into its automated screening tool on a monthly basis.
  4. The institution uses internally managed whitelists and calibrates the threshold to reduce false positives.

Answer(s): D

Explanation:

Sanctions and Compliance Domains outline that institutions must maintain effective and reliable sanctions screening systems. This includes screening all incoming and outgoing payment messages,

and institutions may not rely solely on correspondent banks for sanctions controls. Screening tools must also be capable of detecting alternative spellings, transliterations, and name variations of sanctioned parties.

Sanctions list updates must be incorporated immediately or as soon as practicable after publication.
Monthly updates would be considered insufficient.

The use of controlled internal whitelists, combined with proper governance, periodic review, and controlled threshold calibration, is an accepted method used to reduce false positives while maintaining compliance integrity. Threshold adjustments must always follow documented validation, testing, and oversight procedures.

Reference from Sanctions and Compliance Domains:

Requirements for screening all payment messages, including incoming SWIFT transfers.

System expectations for matching name variations and alternative spellings.

Regulatory expectations for timely list updates.

Recognition of whitelist use and threshold calibration as acceptable screening optimization methods.



Viewing Page 1 of 14



Share your comments for ACAMS CGSS exam with other users:

ally 8/19/2023 5:31:00 PM

plaese add questions
TURKEY


DIA 10/7/2023 5:59:00 AM

is dumps still valid ?
FRANCE


Annie 7/7/2023 8:33:00 AM

thanks for this
EUROPEAN UNION


arnie 9/17/2023 6:38:00 AM

please upload questions
Anonymous


Tanuj Rana 7/22/2023 2:33:00 AM

please upload the question dump for professional machinelearning
Anonymous


Future practitioner 8/10/2023 1:26:00 PM

question 4 answer is c. this site shows the correct answer as b. "adopt a consumption model" is clearly a cost optimization design principle. looks like im done using this site to study!!!
Anonymous


Ace 8/3/2023 10:37:00 AM

number 52 answer is d
UNITED STATES


Nathan 12/17/2023 12:04:00 PM

just started preparing for my exam , and this site is so much help
Anonymous


Corey 12/29/2023 5:06:00 PM

question 35 is incorrect, the correct answer is c, it even states so: explanation: when a vm is infected with ransomware, you should not restore the vm to the infected vm. this is because the ransomware will still be present on the vm, and it will encrypt the files again. you should also not restore the vm to any vm within the companys subscription. this is because the ransomware could spread to other vms in the subscription. the best way to restore a vm that is infected with ransomware is to restore it to a new azure vm. this will ensure that the ransomware is not present on the new vm.
Anonymous


Rajender 10/18/2023 3:54:00 AM

i would like to take psm1 exam.
Anonymous


Blessious Phiri 8/14/2023 9:53:00 AM

cbd and pdb are key to the database
SOUTH AFRICA


Alkaed 10/19/2022 10:41:00 AM

the purchase and download process is very much streamlined. the xengine application is very nice and user-friendly but there is always room for improvement.
NETHERLANDS


Dave Gregen 9/4/2023 3:17:00 PM

please upload p_sapea_2023
SWEDEN


Sarah 6/13/2023 1:42:00 PM

anyone use this? the question dont seem to follow other formats and terminology i have been studying im getting worried
CANADA


Shuv 10/3/2023 8:19:00 AM

good questions
UNITED STATES


Reb974 8/5/2023 1:44:00 AM

hello are these questions valid for ms-102
CANADA


Mchal 7/20/2023 3:38:00 AM

some questions are wrongly answered but its good nonetheless
POLAND


Sonbir 8/8/2023 1:04:00 PM

how to get system serial number using intune
Anonymous


Manju 10/19/2023 1:19:00 PM

is it really helpful to pass the exam
Anonymous


LeAnne Hair 8/24/2023 12:47:00 PM

#229 in incorrect - all the customers require an annual review
UNITED STATES


Abdul SK 9/28/2023 11:42:00 PM

kindy upload
Anonymous


Aderonke 10/23/2023 12:53:00 PM

fantastic assessment on psm 1
UNITED KINGDOM


SAJI 7/20/2023 2:51:00 AM

56 question correct answer a,b
Anonymous


Raj Kumar 10/23/2023 8:52:00 PM

thank you for providing the q bank
CANADA


piyush keshari 7/7/2023 9:46:00 PM

true quesstions
Anonymous


B.A.J 11/6/2023 7:01:00 AM

i can“t believe ms asks things like this, seems to be only marketing material.
Anonymous


Guss 5/23/2023 12:28:00 PM

hi, could you please add the last update of ns0-527
Anonymous


Rond65 8/22/2023 4:39:00 PM

question #3 refers to vnet4 and vnet5. however, there is no vnet5 listed in the case study (testlet 2).
UNITED STATES


Cheers 12/13/2023 9:55:00 AM

sometimes it may be good some times it may be
GERMANY


Sumita Bose 7/21/2023 1:01:00 AM

qs 4 answer seems wrong- please check
AUSTRALIA


Amit 9/7/2023 12:53:00 AM

very detailed explanation !
HONG KONG


FisherGirl 5/16/2022 10:36:00 PM

the interactive nature of the test engine application makes the preparation process less boring.
NETHERLANDS


Chiranthaka 9/20/2023 11:15:00 AM

very useful.
Anonymous


SK 7/15/2023 3:51:00 AM

complete question dump should be made available for practice.
Anonymous