9. Which of the following is NOT one of the three lines of defense? Compliance and internal controls Line of business/Front line staff Internal audit Regulators 10. Which of the following is a main task carried out by an audit department? Collect customers' information whenever necessary Evaluate the cost-effectiveness of the AML/CFT compliance program Determine the adequacy of the AML/CFT risk assessment Verify customers' identity 11. Which of the following best describes the type of risk an organization is willing to accept when it does business? Name screening Customer due diligence De-risking Risk appetite 12. Which item describes how the UN enacts a sanctions resolution? a. It must be approved by at least nine members of the Security Council, including all permanent members b. It must be approved by a majority vote of the general assembly, including all five permanent Security Council members C . It must gamer the support of all members of the Security Council d. It must be approved by a two thirds vote of the general assembly