Timedora
Free Practice Quiz Question List

3 Compliance and Ethical Practice Online Quiz Questions

Use this free practice quiz with 20 questions to review 3 Compliance and Ethical Practice, test your knowledge, and prepare for your next test or exam.

20 questions
01
Choose one
1 point

A company plans to begin operating in a new country. What should it do to address the possibility that its compliance obligations have changed?

  1. A

    Continue using the existing requirements list unless a regulator contacts the company.

  2. B

    Review which requirements apply because the organization’s location and activities have changed.

  3. C

    Wait until the first annual audit to determine whether new obligations exist.

  4. D

    Ask employees to decide individually which local rules are relevant.

02
True or false
1 point

A control is more likely to be effective when it is proportionate to the risk and built into ordinary work.

  1. A

    True

  2. B

    False

03
Written response
1 point

What is the term for a process or safeguard that helps prevent, detect, or correct a failure to meet an obligation?

04
Fill in the blank
1 point

When receiving a concern, an organization should provide safe reporting channels and prohibit .

05
Choose one
1 point

An employee is unsure whether a proposed action is honest and consistent with policy. After considering the relevant standards, the employee still has doubts. What is the most responsible next step?

  1. A

    Proceed if the action is common in the industry, even if it may mislead others.

  2. B

    Keep the decision private so that no one has to review it.

  3. C

    Pause and seek guidance if the decision remains unclear.

  4. D

    Ask a colleague to approve the action informally, then proceed without documenting it.

06
True or false
1 point

A high number of reports through an organization’s concern channel automatically proves that its compliance program is failing.

  1. A

    True

  2. B

    False

07
Written response
1 point

What response step involves assessing the urgency and potential harm of a possible breach and taking appropriate steps to stop ongoing conduct?

08
Fill in the blank
1 point

An organization should review its compliance program and when significant changes occur.

09
Choose all
1 point

Which of the following are examples of detective controls? Select all that apply.

  1. A

    Reconciliations

  2. B

    Role-based access training

  3. C

    Audits

  4. D

    Access logs

10
Choose one
1 point

A report suggests that a potentially harmful practice may still be occurring. Which immediate response best reflects appropriate triage and containment?

  1. A

    Wait for a routine audit before taking any steps.

  2. B

    Assess urgency and potential harm, take appropriate steps to stop ongoing conduct, and preserve relevant records.

  3. C

    Destroy records that may create confusion before starting a review.

  4. D

    Announce a conclusion before investigating the facts.

11
Choose all
1 point

Which practices support a practical system for managing compliance obligations? Select all that apply.

  1. A

    Identify requirements relevant to the organization’s operations and people acting on its behalf, including relevant contractors and suppliers.

  2. B

    Assume that only employees, not contractors or agents, can create compliance obligations.

  3. C

    Clarify who interprets each requirement and who is responsible for carrying it out.

  4. D

    Retain appropriate records of decisions, training, approvals, checks, and corrective action.

12
Choose one
1 point

An organization wants to strengthen its compliance program’s accountability. Which arrangement best supports that goal?

  1. A

    Leave compliance decisions entirely to individual employees without oversight.

  2. B

    Give compliance personnel responsibility but no access to relevant information.

  3. C

    Provide resources only after a serious breach has occurred.

  4. D

    Give compliance personnel suitable authority, access, and resources, with oversight from senior leaders and governing bodies.

13
Choose one
1 point

A monitoring review finds overdue training and repeated failures in one control. What is the best way to use these findings?

  1. A

    Treat every increase in reports as proof that the program should be discontinued.

  2. B

    Collect indicators but avoid acting on the findings to preserve consistency.

  3. C

    Review relevant indicators and patterns, address identified problems, and check whether corrective actions are completed.

  4. D

    Focus only on whether training was delivered, regardless of repeat control failures or unresolved concerns.

14
Open ended
1 point

A report alleges serious misconduct, but the facts are not yet established. Explain how the organization should respond from initial receipt of the report through investigation, any resulting action, and follow-up.

15
Choose one
1 point

An organization screens a supplier before onboarding to reduce the risk of future compliance failures. What type of control is this?

  1. A

    Preventive control

  2. B

    Detective control

  3. C

    Corrective control

16
Written response
1 point

A compliance team learns that its organization has changed its technology and supplier relationships. What should it do to its assessment of applicable requirements? Enter one verb.

17
True or false
1 point

A high number of employee reports automatically means an organization’s compliance program is failing.

  1. A

    True

  2. B

    False

18
Choose one
1 point

When determining which compliance requirements apply, whose activities should an organization consider in addition to its own operations?

  1. A

    Only the organization’s direct employees

  2. B

    The organization and relevant people acting on its behalf, including contractors, suppliers, and agents

  3. C

    Only senior leaders and governing bodies

  4. D

    Only suppliers with written contracts

19
Choose one
1 point

An organization is preparing to enter a new market. Which approach best addresses its compliance obligations before operations begin?

  1. A

    Begin operating under home-market rules, then review local requirements if a problem arises

  2. B

    Apply the same generic procedure everywhere without checking local requirements

  3. C

    Review applicable local licensing, employment, and data-handling requirements and assess risks involving local intermediaries before starting

  4. D

    Ask local intermediaries to decide which obligations the organization must follow

20
Written response
1 point

An employee still has doubts after considering whether an action is lawful, consistent with policy and values, and explainable to others. What two-word action should the employee take next?