CEP Exam ACTUAL EXAM TEST QUESTIONS
& ANSWERS (A+ GRADED 100% VERIFIED)
2025 LATEST!!
1. The primary role of a compliance officer is to:
A. Generate revenue for the company.
B. Act as an internal police force and punish employees.
C. Provide legal advice to the board.
D. Manage the company's public relations.
2. The "Three Lines of Defense" model places the compliance function primarily in which line?
A. First Line
B. Second Line
C. Third Line
D. Fourth Line
3. A key component of an effective compliance program, as defined by the USSG, is:
A. Delegating all authority to an external consultant.
B. Establishing a system for anonymous reporting.
C. Focusing exclusively on past violations.
D. Reporting directly to the CFO.
4. The "Tone at the Top" refers to:
A. The corporate jingle or slogan.
B. The ethical atmosphere created by the board and senior management.
C. The company's stock price performance.
D. The volume of the CEO's speeches.
5. A Code of Conduct should be:
A. A complex legal document only for lawyers.
B. Translated and accessible to all employees.
C. Kept confidential within the legal department.
D. Updated once every decade.
6. The Sarbanes-Oxley Act (SOX) primarily addresses:
A. Environmental protection standards.
B. Corporate governance and financial disclosures.
,C. International trade sanctions.
D. Workplace safety regulations.
7. Which body is ultimately responsible for a company's compliance program?
A. The Chief Compliance Officer (CCO)
B. The Board of Directors
C. The Human Resources Department
D. The Internal Audit Department
8. An effective compliance program must have:
A. Unlimited financial resources.
B. Adequate resources and authority for the compliance officer.
C. The power to override all business decisions.
D. A staff composed entirely of former regulators.
9. The Foreign Corrupt Practices Act (FCPA) prohibits:
A. All forms of aggressive marketing.
B. Bribing foreign officials to obtain or retain business.
C. Importing goods from certain countries.
D. Hiring foreign nationals.
10. A "speak-up" culture is one where:
A. Employees are encouraged to report concerns without fear of retaliation.
B. Managers give frequent speeches.
C. All meetings are conducted loudly.
D. External stakeholders dictate policy.
11. The UK Bribery Act is considered broader than the FCPA because it:
A. Only applies to British companies.
B. Prohibits facilitation payments and includes a corporate offense of failing to prevent bribery.
C. Has higher monetary penalties.
D. Does not cover private commercial bribery.
12. A risk assessment in compliance is used to:
A. Guarantee that no violations will occur.
B. Identify, analyze, and prioritize compliance risks.
C. Set employee performance quotas.
D. Determine executive bonus packages.
, 13. "Deferred Prosecution Agreements" (DPAs) are:
A. A type of employee benefit.
B. Out-of-court settlements where prosecution is deferred if the company meets certain
conditions.
C. Agreements to delay financial reporting.
D. Used only for minor regulatory infractions.
14. The "adequate procedures" defense under the UK Bribery Act refers to:
A. Having a good IT system.
B. The company having implemented procedures to prevent bribery.
C. Procedures for firing employees.
D. Adequate funding for political lobbying.
15. A core principle of data privacy under GDPR is:
A. Collecting as much data as possible.
B. Purpose limitation - data collected for specified, explicit purposes.
C. Storing data indefinitely.
D. Selling data to the highest bidder.
16. A conflict of interest arises when:
A. An employee works too many hours.
B. An employee's personal interests interfere with their professional duties.
C. Two employees disagree on a project.
D. A company has competing products.
17. The "right to be forgotten" is a key component of:
A. The FCPA
B. The Sarbanes-Oxley Act
C. The General Data Protection Regulation (GDPR)
D. The Sherman Antitrust Act
18. Third-party due diligence is critical because:
A. It eliminates all risks from vendors.
B. Companies can be held liable for the actions of their third-party partners.
C. It is a quick and inexpensive process.
D. It is only required for foreign agents.
19. Insider trading involves:
A. Trading stocks based on material, non-public information.
B. Selling company products to employees at a discount.
& ANSWERS (A+ GRADED 100% VERIFIED)
2025 LATEST!!
1. The primary role of a compliance officer is to:
A. Generate revenue for the company.
B. Act as an internal police force and punish employees.
C. Provide legal advice to the board.
D. Manage the company's public relations.
2. The "Three Lines of Defense" model places the compliance function primarily in which line?
A. First Line
B. Second Line
C. Third Line
D. Fourth Line
3. A key component of an effective compliance program, as defined by the USSG, is:
A. Delegating all authority to an external consultant.
B. Establishing a system for anonymous reporting.
C. Focusing exclusively on past violations.
D. Reporting directly to the CFO.
4. The "Tone at the Top" refers to:
A. The corporate jingle or slogan.
B. The ethical atmosphere created by the board and senior management.
C. The company's stock price performance.
D. The volume of the CEO's speeches.
5. A Code of Conduct should be:
A. A complex legal document only for lawyers.
B. Translated and accessible to all employees.
C. Kept confidential within the legal department.
D. Updated once every decade.
6. The Sarbanes-Oxley Act (SOX) primarily addresses:
A. Environmental protection standards.
B. Corporate governance and financial disclosures.
,C. International trade sanctions.
D. Workplace safety regulations.
7. Which body is ultimately responsible for a company's compliance program?
A. The Chief Compliance Officer (CCO)
B. The Board of Directors
C. The Human Resources Department
D. The Internal Audit Department
8. An effective compliance program must have:
A. Unlimited financial resources.
B. Adequate resources and authority for the compliance officer.
C. The power to override all business decisions.
D. A staff composed entirely of former regulators.
9. The Foreign Corrupt Practices Act (FCPA) prohibits:
A. All forms of aggressive marketing.
B. Bribing foreign officials to obtain or retain business.
C. Importing goods from certain countries.
D. Hiring foreign nationals.
10. A "speak-up" culture is one where:
A. Employees are encouraged to report concerns without fear of retaliation.
B. Managers give frequent speeches.
C. All meetings are conducted loudly.
D. External stakeholders dictate policy.
11. The UK Bribery Act is considered broader than the FCPA because it:
A. Only applies to British companies.
B. Prohibits facilitation payments and includes a corporate offense of failing to prevent bribery.
C. Has higher monetary penalties.
D. Does not cover private commercial bribery.
12. A risk assessment in compliance is used to:
A. Guarantee that no violations will occur.
B. Identify, analyze, and prioritize compliance risks.
C. Set employee performance quotas.
D. Determine executive bonus packages.
, 13. "Deferred Prosecution Agreements" (DPAs) are:
A. A type of employee benefit.
B. Out-of-court settlements where prosecution is deferred if the company meets certain
conditions.
C. Agreements to delay financial reporting.
D. Used only for minor regulatory infractions.
14. The "adequate procedures" defense under the UK Bribery Act refers to:
A. Having a good IT system.
B. The company having implemented procedures to prevent bribery.
C. Procedures for firing employees.
D. Adequate funding for political lobbying.
15. A core principle of data privacy under GDPR is:
A. Collecting as much data as possible.
B. Purpose limitation - data collected for specified, explicit purposes.
C. Storing data indefinitely.
D. Selling data to the highest bidder.
16. A conflict of interest arises when:
A. An employee works too many hours.
B. An employee's personal interests interfere with their professional duties.
C. Two employees disagree on a project.
D. A company has competing products.
17. The "right to be forgotten" is a key component of:
A. The FCPA
B. The Sarbanes-Oxley Act
C. The General Data Protection Regulation (GDPR)
D. The Sherman Antitrust Act
18. Third-party due diligence is critical because:
A. It eliminates all risks from vendors.
B. Companies can be held liable for the actions of their third-party partners.
C. It is a quick and inexpensive process.
D. It is only required for foreign agents.
19. Insider trading involves:
A. Trading stocks based on material, non-public information.
B. Selling company products to employees at a discount.
