You’re on a roll
Create a free account to save your CTP progress, track your accuracy by topic, and pick up right where you left off.
Free Questions › CTP › Financial, Regulatory and Operational Risk
Free CTP Financial, Regulatory and Operational Risk Practice Questions & Answers
150 exam-style Financial, Regulatory and Operational Risk questions. Pick your answer, hit Check answer, and see the worked solution — free to start, no signup.
100% free · No login to startQuestion 61
During a market stress event, several of a firm's bank counterparties are downgraded from A to BBB. The investment policy requires a minimum of A- for deposits. What is the most appropriate immediate treasury response?
Select an option first.
Correct answer: A — Assess and reduce exposures to now-noncompliant counterparties in an orderly manner and document any temporary exceptions
Explanation: When counterparties fall below the policy minimum, treasury should evaluate the breach, reduce exposure in an orderly fashion to avoid fire-sale losses, and document any interim exceptions with proper approval. Concentrating in a downgraded bank or ignoring the change would increase, not manage, credit risk.
Question 62
Why might a treasurer supplement agency credit ratings with market-based indicators such as CDS spreads and equity prices when monitoring counterparties?
Select an option first.
Correct answer: B — Because market indicators can react faster than agency ratings, which may lag deteriorating conditions
Explanation: Agency ratings tend to change slowly and can lag rapidly deteriorating conditions, whereas CDS spreads and equity prices move continuously and can provide earlier warning. Combining both gives a more timely and complete picture, though no indicator eliminates risk.
Question 63
Wrong-way risk in counterparty credit exposure refers to the situation where:
Select an option first.
Correct answer: A — Exposure to a counterparty increases at the same time the counterparty's credit quality deteriorates
Explanation: Wrong-way risk arises when the size of the exposure and the counterparty's likelihood of default are positively correlated, so exposure grows precisely as the counterparty becomes more likely to fail. This adverse correlation makes losses worse than independence assumptions would suggest.
Question 64
A firm concentrates 45% of its receivables in one large customer. Which statement best captures the treasury risk implication?
Select an option first.
Correct answer: B — Default or delayed payment by that customer could materially impair liquidity, warranting monitoring, limits, or credit insurance
Explanation: Heavy receivables concentration means a single customer's default or slow payment can significantly disrupt the firm's cash flow and liquidity. Treasury may mitigate this through closer credit monitoring, exposure limits, factoring, or trade credit insurance.
Question 65
A treasury team maintains a single banking relationship and one authorized signer who works from one office. From a continuity perspective, the biggest weakness is:
Select an option first.
Correct answer: B — Multiple single points of failure in banking, authorization, and location
Explanation: Relying on one bank, one signer, and one location creates several single points of failure: any one being unavailable could halt payments and cash access. Resilient treasury design uses backup banks, multiple cross-trained authorized signers, and geographically dispersed access.
Get the full CTP question bank — free
Drop your email and we'll send you fresh CTP practice questions, fully worked solutions and exam-deadline reminders. No spam — unsubscribe in one click.
Want to save your score and take a full mock exam? Create a free account →
Question 66
Why is periodic testing (for example, tabletop exercises and failover tests) an essential part of a treasury business continuity plan?
Select an option first.
Correct answer: D — Because an untested plan may contain gaps, outdated contacts, or unworkable steps that only surface under simulated stress
Explanation: Plans degrade as personnel, systems, and vendors change, so untested plans often fail when actually needed. Regular exercises reveal outdated contact lists, broken dependencies, and unrealistic recovery steps, allowing correction before a real event.
Question 67
During a ransomware attack that locks the treasury workstation and treasury management system, which pre-established capability is most critical to continue making time-sensitive payments?
Select an option first.
Correct answer: D — Documented offline/backup access procedures and alternate payment channels at backup banks
Explanation: When primary systems are compromised, the ability to authorize and execute payments through documented alternate channels and backup banking relationships keeps critical obligations current. Credit limits, hedges, and dividends do not restore payment capability during a systems outage.
Question 68
A firm stores its only backup of payment records in the same data center as the production system. What operational risk principle does this violate?
Select an option first.
Correct answer: C — Geographic diversification / off-site redundancy of backups
Explanation: Co-locating the only backup with production means a single localized event (fire, flood, power loss) can destroy both copies simultaneously. Sound continuity design requires off-site or geographically separated backups so one incident cannot eliminate all recovery options.
Question 69
After a data breach, an organization that stored full card magnetic-stripe data after authorization is most exposed to penalties because:
Select an option first.
Correct answer: D — Storing prohibited sensitive authentication data after authorization breaches PCI DSS requirements
Explanation: PCI DSS explicitly prohibits storing sensitive authentication data, such as full magnetic-stripe contents, after a transaction is authorized. Retaining it dramatically increases breach severity and exposes the entity to fines, forensic costs, and card-brand assessments.
Question 70
The shift to EMV chip cards and the associated liability shift primarily affected fraud liability by:
Select an option first.
Correct answer: B — Shifting counterfeit-fraud liability to whichever party (merchant or issuer) is the least EMV-compliant in a card-present transaction
Explanation: Under the EMV liability shift, the party that has not enabled chip technology in a card-present counterfeit-fraud scenario generally bears the loss. This incentivized merchants to adopt chip terminals but did not eliminate fraud, shift liability to networks, or remove PCI obligations.
Question 71
Tokenization reduces a merchant's PCI DSS scope primarily because:
Select an option first.
Correct answer: A — Actual card numbers are replaced with non-sensitive tokens, so the merchant stores less cardholder data
Explanation: Tokenization substitutes a card's primary account number with a surrogate token that has no exploitable value if stolen, reducing the amount of sensitive data the merchant retains. Fewer systems touching real card data narrows PCI DSS scope and lowers breach risk.
Question 72
The Dodd-Frank Act affected corporate treasury derivatives use primarily by:
Select an option first.
Correct answer: C — Requiring central clearing and reporting for many standardized swaps, while providing an end-user exception for commercial hedgers
Explanation: Dodd-Frank mandated central clearing, exchange trading, and reporting for many standardized over-the-counter swaps to reduce systemic risk, but it included an end-user (commercial hedger) exception from mandatory clearing for firms using swaps to hedge commercial risk. It did not ban corporate derivatives or eliminate liquidity rules.
Question 73
Under UCC Articles 3 and 4, which of the following best describes a holder in due course?
Select an option first.
Correct answer: B — A party who takes a negotiable instrument for value, in good faith, and without notice of defects, and thus takes it free of many defenses
Explanation: UCC Articles 3 and 4 govern negotiable instruments; a holder in due course takes an instrument for value, in good faith, and without notice of defenses or claims, and consequently holds it free from most personal defenses. This concept is central to the negotiability and transferability of checks.
Question 74
UCC Article 4A governs which type of payment, and what is a key feature of its loss-allocation framework?
Select an option first.
Correct answer: A — Commercial wholesale wire (funds) transfers; loss allocation based on commercially reasonable security procedures
Explanation: UCC Article 4A governs wholesale/commercial funds transfers, principally wires, and allocates the risk of unauthorized orders based on whether a commercially reasonable security procedure was agreed and followed. Consumer electronic transfers instead fall under Regulation E, and checks fall under Articles 3 and 4.
Question 75
A treasury team notices multiple structured cash deposits of $9,500 designed to stay below the $10,000 currency transaction reporting threshold. Under AML rules, this pattern should be:
Select an option first.
Correct answer: D — Treated as potential structuring and reported via a suspicious activity report (SAR)
Explanation: Deliberately breaking transactions into amounts below the $10,000 reporting threshold is structuring, itself illegal, and is a red flag for money laundering. Institutions are expected to detect such patterns and file a suspicious activity report rather than treating each deposit as innocuous.
Question 76
A key limitation of standard (parametric) VaR that stress testing is designed to address is that VaR:
Select an option first.
Correct answer: B — Says little about the size of losses in the tail beyond the confidence level and can understate risk during extreme events
Explanation: VaR indicates a threshold loss at a confidence level but does not describe how large losses can be in the tail beyond it, and parametric VaR can understate risk when returns are fat-tailed or correlations break down in crises. Stress testing and expected shortfall (conditional VaR) are used to capture these tail scenarios.
Question 77
Expected shortfall (conditional VaR) improves on VaR primarily because it:
Select an option first.
Correct answer: A — Measures the average loss given that the loss exceeds the VaR threshold
Explanation: Expected shortfall averages the losses that occur beyond the VaR cutoff, thereby capturing the severity of tail events that VaR alone omits. This makes it more informative about extreme downside risk and, unlike VaR, it is a coherent risk measure that respects diversification.
Question 78
Under hedge accounting, if a hedge is deemed highly effective, the primary financial-statement benefit is that:
Select an option first.
Correct answer: C — Gains and losses on the hedging instrument can be matched with the hedged item, reducing earnings volatility
Explanation: Qualifying hedge accounting allows the timing of gains and losses on the hedging instrument to be aligned with the offsetting effect on the hedged item, smoothing reported earnings. Achieving this requires formal designation, documentation, and demonstrated effectiveness.
Question 79
A treasurer reports a 99% 1-day VaR of $500,000. Which interpretation is correct?
Select an option first.
Correct answer: A — On about 1 out of 100 trading days, losses are expected to exceed $500,000
Explanation: A 99% 1-day VaR of $500,000 means that on roughly 1% of days (about 1 in 100), the one-day loss is expected to exceed $500,000, with no statement about how much larger those losses could be. It is neither a guaranteed loss nor an absolute cap.
Question 80
Which type of risk is generally most appropriate to transfer to a commercial insurer rather than to self-insure?
Select an option first.
Correct answer: A — Low-frequency, high-severity, catastrophic losses that could threaten solvency
Explanation: Insurance is most valuable for rare but severe events whose cost could impair or bankrupt the firm, because transferring that tail risk protects solvency. Predictable, high-frequency, low-severity losses are often more economically retained (self-insured) since insuring them mostly buys back one's own expected costs plus insurer overhead.
Question 81
A firm is deciding whether to raise its self-insured retention. All else equal, increasing the retention will most likely:
Select an option first.
Correct answer: D — Reduce premiums but increase the firm's exposure to retained losses and cash-flow volatility
Explanation: A higher self-insured retention means the firm absorbs more loss before coverage responds, which lowers premiums but increases the volatility and potential size of losses it must fund itself. Treasury must ensure adequate liquidity and reserves to support the greater retained exposure.
Question 82
A fidelity bond (commercial crime insurance) primarily protects an organization against losses from:
Select an option first.
Correct answer: A — Dishonest or fraudulent acts by employees, such as embezzlement or theft
Explanation: A fidelity bond, part of commercial crime coverage, indemnifies the organization against losses caused by employee dishonesty, including embezzlement and theft. It complements internal controls like segregation of duties as a financial backstop against insider fraud.
Question 83
What is the primary purpose of a corporate investment policy statement?
Select an option first.
Correct answer: C — To define permissible instruments, credit-quality limits, and approval authorities for investing surplus cash
Explanation: An investment policy statement establishes the framework governing how surplus funds may be invested, including eligible instruments, maturity and concentration limits, minimum credit ratings, and who is authorized to act. It cannot guarantee returns because market conditions vary, and it does not set dividends or eliminate board governance.
Question 84
In a well-designed treasury policy, the three primary objectives for managing short-term investments are typically prioritized in which order?
Select an option first.
Correct answer: A — Safety, liquidity, then yield
Explanation: Standard treasury practice prioritizes preservation of principal (safety) first, then availability of funds when needed (liquidity), and only then maximization of return (yield). Pursuing yield ahead of safety exposes the firm to credit and market losses that undermine the core purpose of holding operating cash.
Question 85
Which document typically specifies the maximum dollar amount an individual treasury employee may approve for a wire transfer without a second approver?
Select an option first.
Correct answer: B — The approval authority matrix (delegation of authority)
Explanation: An approval authority matrix, or delegation of authority, defines dollar thresholds and the number of approvers required at each level. It is a core internal control that enforces segregation of duties and prevents any single person from moving large sums unilaterally.
Question 86
A risk management policy that permits derivatives only to reduce identified exposures, and prohibits their use to take speculative positions, is best described as authorizing derivatives for what purpose?
Select an option first.
Correct answer: B — Hedging
Explanation: Restricting derivatives to reducing identified exposures is the definition of a hedging mandate. Most corporate risk policies explicitly prohibit speculation, requiring that every derivative be linked to an underlying business exposure such as interest-rate, currency, or commodity price risk.
Question 87
Which of the following is typically an element of a treasury operational procedure rather than a high-level policy?
Select an option first.
Correct answer: B — The step-by-step instructions for confirming and releasing a wire in the banking portal
Explanation: Procedures are the detailed, task-level instructions that implement a policy, such as the specific steps to confirm and release a wire. Risk appetite, tenor limits, and delegation of authority are policy-level decisions set by governance bodies.
Question 88
An escalation procedure in a treasury policy primarily defines:
Select an option first.
Correct answer: A — When and to whom a limit breach or exception must be reported for resolution
Explanation: Escalation procedures specify the triggers, timing, and recipients for reporting limit breaches, exceptions, or unusual events so they are addressed by the appropriate level of authority. This ensures problems reach decision-makers quickly rather than being absorbed silently at the operating level.
Question 89
A counterparty credit limit is best described as:
Select an option first.
Correct answer: B — The maximum exposure a firm is willing to have to a single counterparty
Explanation: A counterparty credit limit caps the firm's total permitted exposure to one counterparty, controlling concentration and default risk. It reflects the firm's assessment of that counterparty's creditworthiness and its own risk appetite.
Question 90
In credit-rating terminology, which of the following is considered the lowest investment-grade rating?
Select an option first.
Correct answer: C — BBB- / Baa3
Explanation: BBB-/Baa3 is the lowest rung of investment grade; anything below it (BB+/Ba1 and lower) is speculative or non-investment grade. Many investment policies set BBB- or A- as the minimum acceptable rating for counterparties or instruments.
More free CTP topics
Ten questions in
- The ones you miss are saved as a drill you can repeat
- Your place is kept, on this device and any other
- A streak, if that is the thing that gets you back tomorrow
Every question on this page stays free and open either way.