UAE-Financial-Rules-and-Regulations Sample Questions Answers

The Authority possesses extensive inspection and supervisory powers in relation to persons involved in regulated crypto-asset offerings and related licensed activities. Under the relevant SCA regulation, the Authority may conduct periodic or unannounced supervision, control and inspection to determine whether offering persons, responsible parties and licensed persons comply with the applicable regulatory framework. These powers expressly extend to inspecting or accessing computer systems, computer data, computer data traffic and equipment where relevant information is stored. The provision enables the Authority to investigate suspected violations using the complete technological environment in which regulated crypto-asset activities are conducted. Limiting inspection to only systems and equipment, equipment and traffic, or systems and traffic would exclude categories specifically included within the Authority's regulatory powers. The breadth of the provision is especially important for crypto-asset activities because transactions, records, communications and operational controls may exist primarily in electronic form. Consequently, all three items identified in the question—systems, equipment and data traffic—fall within the Authority's inspection powers. Therefore, option D is correct.

================

The CISI UAE Financial Rules and Regulations empower the Authority to impose financial fines of not less than AED 100,000 on licensed entities or persons found in violation of regulatory provisions. This minimum fine serves as a deterrent and underscores the regulator’s authority to enforce compliance. While suspension of licensed bodies or activities can be imposed in some cases, the standard and frequently applied sanction is the financial penalty starting from AED 100,000. The Authority’s sanctions framework ensures robust regulatory oversight and promotes adherence to UAE financial laws.

DFM brokerage firms are required to ensure that their employees have appropriate professional experience if they are employed to deal with clients or on their behalf. This is because employees interacting directly with clients must possess the necessary skills, knowledge, and experience to provide accurate information, manage client portfolios, and handle client transactions in compliance with regulatory standards. This ensures that clients are protected from potential mismanagement or malpractice and that the brokerage firm maintains a high standard of service.

The UAE regulatory framework establishes specific advisers and service providers that a Special Purpose Acquisition Company must appoint when conducting a public offering. According to the CISI UAE Financial Rules and Regulations, the SPAC must appoint a listing consultant and a financial consultant , together with one or more entities responsible for receiving public subscriptions. The listing consultant and other parties to the subscription process are also subject to due-diligence responsibilities. A risk consultant is not identified as one of the mandatory appointments for making the SPAC's shares available through the prescribed public offering process. This distinction is important because a SPAC is a specialised acquisition vehicle formed to raise capital and subsequently acquire or merge with a target entity; the listing and financial consultants support compliance with offering, listing, valuation and transaction requirements associated with that process. Although risk-management considerations remain relevant throughout the SPAC lifecycle, they do not create a requirement to appoint a separate risk consultant under the provision tested by this question. Accordingly, option B is correct.

================

The CISI UAE Financial Rules and Regulations imposes restrictions on transfers of title to units in private investment funds. Such units may be transferred to existing unit holders, to specified family members in the case of a family fund, or to a professional investor or counterparty subject to an important minimum-value condition. Where the transferee is a professional investor or counterparty, the nominal value of the transferred units must be at least AED 180,000, or the equivalent amount in another currency. This restriction reflects the private nature of the fund and ensures that transfers to new professional participants continue to satisfy the regulatory parameters applicable to private-fund investment. It also differentiates private funds from publicly promoted investment products, which are subject to different offering and distribution requirements. AED 120,000, AED 220,000 and AED 280,000 are not the thresholds specified by the CISI syllabus. Therefore, where ownership is transferred to a professional investor under the relevant private-fund rules, AED 180,000 is the minimum nominal value and option B is correct.

================

Under Federal Law No. 20 of 2018 and CISI UAE Financial Rules and Regulations, financial institutions that violate anti-money laundering (AML) and counter-terrorism financing (CTF) laws may be subjected to administrative penalties ranging from no less than AED 50,000 and no more than AED 5,000,000 for each violation. These substantial fines underscore the UAE’s commitment to stringent AML/CTF enforcement and deterrence. Administrative penalties are imposed alongside other measures such as corrective actions and possible criminal sanctions, ensuring comprehensive regulatory oversight.

Dealing in Securities is the first of the five financial-activity licence categories established under the SCA framework covered by the CISI UAE Financial Rules and Regulations. A firm applying for this category must generally be a legal person incorporated within the UAE or a branch of a foreign company and must maintain paid-up capital of not less than AED 30 million . The principal functions expected in a Category 1 firm include the Category Manager or Official, Compliance Officer and Risk Management Officer. Financial activities falling within the category include trading and clearing brokerage, trading brokerage in global markets, brokerage of specified non-exchange-traded derivative contracts and spot currencies, trading brokerage and securities dealing. The AED 50 million figure relates to higher capital requirements associated with other categories, including Dealing in Investment and Keeping, Clearing and Registration. AED 10 million and AED 20 million do not represent the prescribed Category 1 minimum. Therefore, for a firm licensed to deal in securities, the minimum paid-up capital required by the CISI material is AED 30 million and option C is correct.

================

Per CISI UAE Financial Rules and Regulations, the compliance regulation guide submitted by licensing applicants must include procedures and mechanisms that ensure the compliance officer has access to sufficient resources. Adequate resources are critical for the compliance officer to effectively oversee adherence to regulatory requirements, manage risks, and implement compliance programs. This includes staffing, technology, training, and authority necessary to fulfill the role’s responsibilities. While emergency powers or deputizing may be operationally important, the regulations emphasize resource adequacy as a fundamental compliance enabler.

Under the UAE’s Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT) framework, firms, including those involved in crypto assets, are required to align their compliance practices with international standards. The Financial Action Task Force (FATF) provides the global framework and recommendations to combat money laundering and terrorism financing. Firms must adhere to these recommendations to update and maintain their AML compliance programs effectively, ensuring that they remain in line with the best global practices and avoid involvement in illicit activities. The FATF’s guidelines specifically address the risks posed by crypto assets and set standards for monitoring, reporting, and controlling potential misuse of such assets for money laundering purposes.

The Clearing, Settlement and Depository Department (CSD Department) at the Abu Dhabi Securities Exchange maintains electronic records relating to ownership and transfer of listed securities. An issuer wishing to list its securities must provide the ADX with its shareholders' register, including shareholder details, balances and relevant ownership restrictions. The issuer remains responsible for ensuring that the information supplied is complete, valid and accurate. After the shareholders' register has been uploaded onto the ADX's electronic systems, the CISI UAE Financial Rules and Regulations specifically states that the CSD Department sends a copy of the electronic register to the issuer for reconciliation purposes . Reconciliation enables the issuer to compare the electronic CSD record with its own information and identify inconsistencies before they affect ownership records or corporate actions. The procedure does not require issuing registration slips to every shareholder, notifying the Authority simply that uploading has occurred, or immediately storing an off-site disaster-recovery copy as the next prescribed step. Therefore, option C is correct.

================

According to CISI UAE Financial Rules and Regulations, a licensed person dealing with security tokens must conduct a suitability check when the client is not a qualified investor. This requirement protects less sophisticated investors by ensuring that the financial products offered match their investment knowledge, risk tolerance, and financial circumstances. Qualified investors are presumed to have sufficient expertise and resources, thus not mandating suitability checks. The nature of the token or amount invested is not the primary trigger; rather, client qualification status governs the obligation to perform suitability assessments. This aligns with investor protection principles embedded in UAE financial regulations.

Licensed bodies are subject to continuing obligations regarding information and documentation supplied to the Securities and Commodities Authority and other capital-market institutions. The CISI material requires a licensed body to notify the relevant entity immediately after discovering that information or documents previously submitted are incorrect, misleading, incomplete, inaccurate, outdated or have subsequently changed. The licensed body should identify the affected information or documents and explain the reason for the deficiency or change. This requirement protects the integrity of regulatory supervision because the Authority makes licensing, compliance and enforcement decisions using information submitted by regulated entities. Allowing inaccurate or incomplete material to remain uncorrected could undermine that supervisory process. The obligation is deliberately framed as an immediate notification requirement rather than allowing a fixed 48-hour, 72-hour or end-of-week correction period. The licensed body must also retain sufficient evidence showing that requested information and documents were properly delivered or submitted. Consequently, once the firm discovers that the requested document was incomplete, it must notify the Authority immediately. Therefore, option A is correct.

================

The DFM settlement rules impose a clear obligation on brokerage firms regarding proceeds generated from securities sold for clients. Once a broker has executed a sale, it may deduct the applicable commissions and fees, but it must then pay the remaining sale proceeds to the client before the end of two days or before the end of the settlement period prescribed by the DFM , as applicable. Payment can be made using recognised methods such as an appropriately issued cheque or transfer to the client's account. Where the client does not request immediate receipt of the proceeds, the broker must credit the amount to the client's balance before the end of the settlement period for the securities sold. This requirement protects clients by preventing brokers from retaining sale proceeds beyond the permitted settlement timetable. The one-, three- and four-day alternatives do not reproduce the rule stated in the CISI/DFM material. Consequently, the prescribed period presented in option B—two days or the DFM settlement period—is the correct answer.

Under the CISI provisions concerning evaluation of in-kind shares for investment funds, an evaluator has specific responsibilities relating to valuation quality, liquidity and risk. The evaluator must prepare the evaluation report in accordance with applicable international standards, use sufficient and complete information, properly assess the asset and clarify whether the in-kind shares provided to the investment fund are capable of being liquidated. This liquidity determination is important because an asset that cannot readily be disposed of may materially affect the fund's ability to implement its investment policy, meet liquidity requirements or realise value for investors. The evaluator must also analyse risks associated with the evaluated asset and reflect their potential effect on future expectations and assumptions used in the valuation. The CISI requirement does not specifically require the evaluator, for this purpose, to state whether the shares were acquired at a discount, classify them as short- or long-term assets, or identify them as capital-growth or income-oriented investments. Consequently, option B directly corresponds to the evaluator obligation specified in the CISI study material.

================

Promotional materials for private funds in the UAE must clearly clarify the fund’s specific nature and include the required disclaimer as prescribed by the Authority. This requirement ensures that potential investors receive accurate and compliant information about the private fund’s characteristics, risks, and restrictions. The disclaimer serves to limit investor expectations and legal liabilities. While certain media restrictions and content approvals may apply in some jurisdictions, the key regulatory focus is on transparency and proper disclosure within promotional materials to protect investor interests.

Final approval of a local investment fund depends upon completion of prescribed post-subscription procedures. According to the CISI UAE Financial Rules and Regulations, the fund manager—and, in the case of a self-managed fund, its founders—must submit specified documentation to the Authority within no more than 30 days from the date on which subscriptions close . One of the principal documents is a certificate from the local fund's auditor confirming that subscription to the fund's capital has been completed. For a family fund, additional evidence may also be required to establish that subscribers satisfy the relevant family and beneficial-ownership requirements. Failure to submit the required documents within the prescribed period can cause the establishment procedures to be treated as non-existent and require subscribed amounts to be returned. Once the required auditor's certificate and supporting documentation have been properly submitted, the Authority proceeds with the establishment and licensing process. The relevant deadline is therefore 30 days, not five, ten or fifteen days. Accordingly, option D is correct.

================

Under Federal Law No. 20 of 2018 and related CISI UAE Financial Rules and Regulations, issuers arranging crypto asset offerings must establish controls to prevent subscriptions being taken at excessive levels from non-qualified investors. This is a key investor protection and anti-money laundering measure designed to restrict high-risk investment exposure to those with adequate knowledge, resources, and risk appetite. By enforcing subscription limits for non-qualified investors, the regulations mitigate fraud, market manipulation, and financial losses while ensuring regulatory compliance. Controls over pricing discretion or fluctuations, while relevant, are not the central regulatory concern in this context.

According to CISI UAE Financial Rules and Regulations, applicants for a financial activities licence must ensure that their record-keeping systems allow for recovery of electronic records from archives within a maximum period of three business days. This requirement ensures timely access to data necessary for audits, investigations, and regulatory reviews. The three-business-day timeframe balances operational feasibility with regulatory needs for responsiveness and data integrity, supporting transparency and compliance in the UAE financial sector.

When establishing a local investment fund in the UAE, the founders are required to subscribe a minimum amount to demonstrate commitment and to comply with the legal and financial requirements set by the Securities and Commodities Authority (SCA). The minimum required subscription is at least 10 million dirhams. This ensures that the fund has a solid financial base, contributing to its credibility and ability to cover initial operational and management expenses. The founders' subscription also serves to align their interests with those of potential investors and provides an assurance of the fund's viability and long-term sustainability.

Remote access to the Abu Dhabi Securities Exchange is available only to foreign brokerage companies that meet the ADX's prescribed eligibility conditions. Among those conditions, the foreign brokerage firm must be properly licensed for financial brokerage in its home jurisdiction by a regulator comparable to the SCA, and that regulator must operate appropriate KYC, customer due diligence and AML/CFT standards. The rules also state expressly that the firm's licence must not previously have been refused by any regulatory authority similar to the Authority . A prior refusal therefore means that an essential eligibility condition for remote access is not satisfied. It is not a matter that can be cured merely by supplying additional collateral or accepting restricted trading privileges. The rule is framed as an entry condition, not simply a discretionary risk factor to be considered by the ADX board. Consequently, a foreign brokerage company with such a previous licensing refusal does not qualify for remote access approval under the stated conditions. Among the options supplied, this makes automatic rejection the correct outcome. Therefore, option D is correct.

================

Under the CISI UAE Financial Rules and Regulations, in the event of a tie vote by the board of the Authority, the chairman or their deputy is granted the casting vote to resolve the deadlock. This mechanism ensures decisions can be made efficiently without indefinite postponement. The casting vote provides a decisive voice to the chair in balancing the board’s decisions, reflecting common governance principles in corporate and regulatory bodies. Automatic carriage or rejection of resolutions without further input is not allowed, and postponement is typically avoided to maintain regulatory effectiveness.

The Securities and Commodities Authority's governance arrangements prescribe a defined term for membership of its Board of Directors. The Authority states that Board membership is for four years and is renewable for one further term only, with the specified exception relating to the Chief Executive. This creates a maximum of two terms for an ordinary board member. In the scenario, Omar has completed only one term, so his appointment may legally be renewed for a second term. Rashid, however, has already completed two terms and has therefore exhausted the permitted renewal limit. The distinction has nothing to do with the relative ages of the two members, whether they own securities, or whether either receives remuneration. Indeed, regulatory governance provisions are intended to ensure appropriate independence, experience and periodic renewal of the Authority's governing body rather than make continued service dependent upon securities ownership or compensation. Consequently, the decisive factor is the number of terms already served. Omar remains eligible for one renewal while Rashid does not. Therefore, option D is correct.

================

The CISI UAE Financial Rules and Regulations require that the whistleblowing policy submitted by licence applicants incorporates a clear mechanism for protecting the reporting employee. This protection includes confidentiality safeguards, protection against retaliation, and secure channels for raising concerns. Ensuring the safety and anonymity of whistleblowers is fundamental to encouraging the reporting of unethical or illegal conduct, thereby enhancing regulatory compliance and corporate governance. Other aspects such as escalation procedures and disciplinary measures are important but secondary; the central pillar of effective whistleblowing policy is the protection of the individual who reports wrongdoing.

UAE anti-money laundering regulations impose an explicit prohibition on financial institutions and designated non-financial businesses and professions (DNFBPs) dealing with shell banks. A shell bank is particularly problematic from an AML/CFT perspective because it typically lacks a meaningful physical presence and may not form part of an adequately regulated financial group. Such institutions can therefore be exploited to disguise beneficial ownership, obscure the movement of criminal proceeds or facilitate transactions outside effective regulatory supervision. The applicable UAE rules require relevant institutions to refrain from dealing with shell banks in any manner, including opening accounts for them or accepting funds or deposits from them. The prohibition does not apply merely because an organisation is structured as a mutual co-operative, benefit corporation or legitimate non-profit organisation; such entities may instead be subject to their own risk-based customer due diligence and monitoring requirements. The distinguishing regulatory prohibition in this question is therefore the dealing ban applicable to shell banks. Accordingly, option A is correct.

================

The fifth category licence under UAE financial regulations pertains specifically to credit rating agencies. These entities assess the creditworthiness of issuers of debt, including governments and corporations, and their ratings are critical for investors and markets. The fifth category licence provides the legal framework for credit rating agencies to operate within the UAE’s financial sector, ensuring they meet the regulatory standards and criteria set by the Securities and Commodities Authority (SCA). This helps ensure transparency, reliability, and trust in the credit ratings issued, which are vital for maintaining market stability and investor confidence.

Ranking and Advice constitutes the fifth category of financial-activity licensing under the CISI UAE Financial Rules and Regulations. Within this category, the principal functions expected at firm level include a Category Manager or Official, Compliance Officer and Risk Management Officer. The rules then separately identify each regulated financial activity and the approved professional job associated with that activity. For Financial Consulting , Financial Consultant (Issue Manager) and Listing Consultant , the approved job is Financial Analyst . Promotion, by contrast, is associated with a Promotion Manager. A Trading and Clearing Broker and Broker Representative belong to securities brokerage and dealing functions rather than the Ranking and Advice category. Although a Compliance Officer is a principal control function within a Category 5 firm, that officer does not perform the regulated Listing Consultant activity simply by virtue of holding the compliance role. The CISI table explicitly maps Listing Consultant to Financial Analyst. Consequently, option D is the only answer consistent with the approved-jobs framework.

================

According to CISI UAE Financial Rules and Regulations, brokerage companies must use 70% of the market value of securities they own to increase the value of their guarantee. This guarantee acts as a financial safeguard to ensure the firm’s stability and protect clients and counterparties against default risk. The 70% proportion strikes a balance between maximizing the leverage of owned securities and maintaining prudent risk management. It reflects the regulatory emphasis on requiring sufficient collateral and guarantees to support brokerage operations, maintaining market confidence and financial soundness within the UAE capital markets.

For India Gold Quanto Futures contracts, the last trading day is defined as two business days prior to the last business day of the delivery month. This rule ensures that there is adequate time for the settlement and adjustment of any open positions before the final day of trading. The two-day buffer also allows for the reconciliation of positions, making the futures market more efficient and reducing the likelihood of disputes regarding settlement. This is in line with global standards for futures contracts where the settlement and final trading days are clearly defined to protect market integrity and investor interests.

The contract size for the MSCI India Index Futures (INR) contract is defined as 50 index points x price. This means that each contract is linked to the movement of 50 index points, and the value of each index point is multiplied by the price of the index. The contract size reflects the amount of exposure an investor takes on when trading in this futures contract, and the multiplier is set to provide a manageable level of risk and exposure to market fluctuations. This standardization allows traders to gauge the value of their positions and facilitates liquidity in the futures market.

The CISI UAE Financial Rules and Regulations specify that public real estate investment funds are mandated to distribute a minimum of 80% of their achieved net profits annually to unit holders. This distribution requirement ensures that investors receive regular income from the fund’s operations, promoting investor confidence and fairness. It also aligns with the principle of pass-through taxation and transparency in fund performance. The regulation balances income distribution with fund sustainability, allowing the retention of a portion of profits for operational needs and growth.

When the Board of a securities market wishes to suspend a rule related to the market's operations, it must first obtain permission from the regulatory Authority. According to the CISI UAE Financial Rules and Regulations, if permission is not sought from the Authority before attempting to suspend the rule, the suspension request will not be valid. This requirement ensures that the Authority has oversight over the market's operational changes and can assess whether suspending the rule aligns with regulatory goals such as market stability, fairness, and transparency. This helps prevent arbitrary or inconsistent rule changes that might undermine investor confidence or disrupt the smooth functioning of the market.

Under the CISI UAE Financial Rules and Regulations governing Sukuk issuers with retail primary listings, obligors have continuing disclosure obligations designed to ensure transparency and maintain investor confidence. While immediate notification to the Authority is necessary, the obligor must also notify the market to keep all stakeholders informed promptly. Failure to inform the market simultaneously constitutes a breach, as investors rely on timely and complete information to make decisions. This dual-notification requirement is critical to ensure fairness and prevent information asymmetry. The nature of the new director’s passport or experience is not the determining factor; rather, it is the procedural omission of market notification that constitutes the breach.

The Depository Centre is required to periodically report to the Authority on shareholders who hold more than 5% of equity in the Centre’s capital. This threshold ensures that the Authority is informed about substantial holdings, which could influence corporate governance, voting rights, and overall control within the company. The report helps maintain transparency regarding ownership structures, which is critical for monitoring potential conflicts of interest, shareholder influence, and market stability. Regular updates on these holdings contribute to the regulatory oversight of significant shareholders.

The Dubai Financial Market (DFM) utilizes precise rules to calculate the theoretical auction price during pre-closing sessions to ensure market transparency and fairness. According to the CISI UAE Financial Rules and Regulations and DFM official trading manuals, when the mid-point price is used in price determination, it is rounded up to the nearest price tick. This rounding mechanism ensures consistency in pricing and avoids fractional pricing issues that could disrupt the matching of buy and sell orders. The concept of a price tick is a minimum price movement allowed in trading, defined by the market’s tick size schedule. By rounding up, the market supports price stability and protects sellers during the auction process. This is explicitly stated in DFM’s trading rules section regarding auction price calculation and tick size adjustments.

Customer due diligence (CDD) is one of the principal preventive controls within the UAE anti-money laundering and counter-terrorist financing framework. Its purpose is to prevent financial institutions and other regulated businesses from being used to disguise criminal proceeds or facilitate prohibited financing. CDD requires firms to identify customers, verify their identity from reliable and independent information, identify and verify beneficial owners where applicable, understand the purpose and intended nature of the business relationship and undertake continuing monitoring. These measures allow the institution to compare actual transactions against its knowledge of the customer and identify activity that may indicate money laundering or terrorist financing. Cybercrime, insider dealing and embezzlement are significant financial-crime risks, but they are not the primary regulatory risk addressed by the CDD provisions tested in this section of the CISI syllabus. The syllabus expressly places CDD within the element dealing with Anti-Money Laundering and Combating the Financing of Terrorism and Illegal Organisations. Therefore, among the options provided, money laundering is the correct answer.

================

The Corporate Governance provisions covered by the CISI UAE Financial Rules and Regulations require listed companies to establish controls over transactions undertaken by Board members, employees and other persons who may possess unpublished inside information. The company's Board must issue written rules governing transactions by these insiders in securities issued by the company itself, its parent company, subsidiaries and related companies . A special and comprehensive Insiders Register must then be maintained, including permanent and temporary insiders who have access to internal information before publication. The organisation responsible for the register must monitor insiders' transactions, maintain their disclosures, provide updated insider lists to the SCA and market, and submit the register to the Authority when requested. Limiting the regime to securities issued solely by the company would leave material connected-company dealings outside the monitoring framework. Similarly, options B and C improperly omit either subsidiaries or related companies. The CISI text expressly covers all four categories, making option D the complete and correct answer.

================

Licence applicants must maintain separate regulatory frameworks for risk management, compliance and internal audit, and this question distinguishes the requirements belonging specifically to internal audit. The internal audit guide must contain procedures allowing the internal auditor to act independently without interference or incompatible duties; procedures ensuring access to relevant records and information; arrangements for access to the board, senior officer or relevant board committee when necessary; and a mechanism for informing the financial auditor immediately about any matter that may affect the licensed body’s financial position. It must also document the structure, responsibilities and procedures of the internal audit function. Option A belongs to the risk-management framework rather than internal audit. Option B resembles the requirement for the compliance officer to have adequate resources. Option D is also incorrectly worded because the relevant regulatory roles require appropriate access rather than access subject to arbitrary limited restrictions. Option C reproduces a specific internal-audit requirement and is therefore the correct answer.

================

Before deciding to delist a company's shares, the regulatory authority typically follows a procedure designed to ensure that the company has an opportunity to rectify any issues. According to the CISI UAE Financial Rules and Regulations, the Authority usually issues an improvement notice of 30 days to the company. This notice outlines the deficiencies or non-compliance issues that the company needs to address in order to avoid delisting. The 30-day period allows the company time to correct the issues, such as failure to meet financial reporting requirements, governance standards, or other operational obligations. This approach ensures fairness and transparency before taking any drastic actions like delisting.

According to CISI UAE Financial Rules and Regulations, when the client is a legal person, customer due diligence (CDD) requires verification of identity for any natural person holding a minimum controlling ownership interest of 25%. This threshold identifies beneficial owners who have significant influence or control over the legal entity. Verifying these individuals is critical for AML/CTF compliance to prevent misuse of corporate vehicles for illicit purposes. The 25% figure aligns with international standards such as FATF recommendations and ensures that regulatory scrutiny extends beyond the legal entity to its key controllers.

The DFM rules impose strict restrictions on trading and clearing members concerning control over securities belonging to clients. A brokerage firm must not undertake an action that freezes a client's securities or otherwise prevents the client from using or disposing of those securities unless a recognised legal or regulatory basis exists. The CISI study material identifies three such bases: a court ruling, procedures applicable in the DFM, or resolutions issued by the Authority. Therefore, where the freezing action is taken in accordance with established market procedures, it is permissible under the regulatory framework. An inactive account, loss of UAE residence, or the brokerage firm's own suspicion concerning money laundering does not, by itself, grant the firm an unrestricted power to freeze securities under this particular DFM rule. Suspected money laundering is subject to separate AML reporting and control requirements. The question specifically tests the DFM restriction on brokerage firms interfering with client securities. Accordingly, option D is the correct regulatory condition.

================

CISI UAE Financial Rules and Regulations stipulate that for debt securities issued via public subscription, the offeror must announce any replacement of the trustee within a maximum of 72 hours. Prompt notification ensures transparency, allowing investors to be informed about key custodial and fiduciary changes that may affect the security’s management and enforcement of rights. Delays beyond this period could impact investor confidence and violate continuous disclosure requirements, thus the 72-hour timeframe strikes a balance between operational feasibility and timely communication.

The CISI UAE Financial Rules and Regulations specifies core controls that must be incorporated into a market's electronic trading system. One of the principal controls is the automatic stopping of purchase orders where those orders exceed the limits supported by a broker's bank guarantee or reach the threshold applicable to a special order. Automation is significant because the control must operate at system level and prevent a broker from accepting exposure beyond the financial security available to support its transactions. The CISI material defines a special order as an order approved in advance by the market for a securities transaction exceeding 80% of the amount of the broker's bank guarantee. The requirement is therefore not merely a facility enabling manual intervention, making option A incorrect. The electronic system must also enable listed entities and their registrars to view their own share registers; it is not designed simply to conceal that information. Multiple-investor trading-account provisions are governed separately. Consequently, option B directly reproduces the required electronic-trading safeguard and is the correct answer.

================

The UAE AML framework requires immediate escalation when a financial institution has suspicions or reasonable grounds to suspect that a transaction, attempted transaction or funds represent proceeds of crime, relate to criminal activity or are intended to be used in a crime. The report must be made directly to the UAE Financial Intelligence Unit (FIU), rather than to the Securities and Commodities Authority, and it must be submitted without delay. The reporting institution cannot postpone submission for one week or rely on banking, professional or contractual confidentiality to avoid its reporting obligation. The FIU receives and analyses suspicious transaction reports and may request additional information from the reporting institution. The rules also apply irrespective of the monetary value of the transaction; there is no minimum threshold before the reporting obligation arises. Current UAE implementing provisions continue to require immediate and direct reporting to the FIU through its approved electronic reporting system. Accordingly, option C correctly identifies both the competent recipient—the Financial Intelligence Unit—and the required timing—without delay.

================

When a financial analyst wishes to conduct a personal transaction that is related to ongoing investment research, the approval from the firm’s legal or compliance department is typically required. This additional requirement helps ensure that there is no conflict of interest and that the analyst's personal transactions do not interfere with their professional duties or the integrity of the research process. The compliance department will review the transaction to ensure it adheres to the firm's internal policies and regulatory requirements, thus safeguarding the analyst’s objectivity and maintaining the credibility of the investment research.

A crypto asset exchange seeking to list a crypto asset must provide the Authority with sufficient information to assess both the asset and the technology supporting it. Under the CISI UAE Financial Rules and Regulations, the listing application must include the initial and continuing criteria used to select the crypto asset for listing and trading, details of the relevant distributed ledger technology or protocol, fees or other compensation associated with the listing, and any hacking vulnerabilities affecting the technology underlying the crypto asset. The documentation must also address traceability of the crypto asset and the capability to apply controls designed to combat money laundering and terrorism financing. Disclosure of hacking vulnerabilities is particularly important because weaknesses in the underlying distributed-ledger technology can expose investors, custodians and markets to theft, unauthorised transfers and operational disruption. The specific listing requirements do not identify a software confidentiality agreement, historical losses of the applicant, or disaster-recovery methodology as the required item tested by this question. Therefore, option C directly reflects the CISI requirement.

================

Under CISI UAE Financial Rules and Regulations, firms offering ranking and advisory services in the financial sector must meet a minimum paid-up capital requirement of AED 5 million. This capital threshold ensures that such firms have sufficient financial resources to maintain operational stability, manage risks, and fulfill regulatory obligations. It also reflects the level of responsibility these firms carry in providing investment advice and rankings that impact market participants. Higher capital requirements apply to more systemically significant entities, but the AED 5 million benchmark balances accessibility and prudence for ranking and advice firms.

The CISI UAE Financial Rules and Regulations sets out specific operational responsibilities for the Depository Centre following approval of a security's listing. Within one week from approval of the listing, the Depository Centre must install a terminal device for the registrar of the listed entity. The terminal enables the registrar to access the register, make necessary inquiries and perform required updates. Related rules also require the issuer, within one week of listing approval, to provide the Depository Centre with an up-to-date copy of its shareholder register and subsequently update it whenever necessary. These arrangements ensure that ownership information maintained by the Depository Centre remains accurate and current. This is particularly important because Depository Centre records provide legal evidence of securities ownership and support rights such as voting, dividends and bonus-share entitlements. The prescribed period is therefore one week, not three days, 15 days or three weeks. Accordingly, the maximum period specified in the CISI material for installation of the terminal device is one week, making option B correct.

================

The Dubai Financial Market Professional Code of Conduct requires brokerage firms to take reasonable steps to establish the identity, contact information, financial circumstances and investment objectives of their clients. The information required varies according to the type of client. For a corporate person , the DFM rules require details including the company's or entity's name and nationality, its commercial register number and commercial licence , the place and date of issue of those documents, a copy of its memorandum of association, headquarters contact information and details of the individual authorised to manage the account. Option C therefore identifies information specifically required for corporate clients. Option B—profession, exact address, PO Box and telephone number—is associated with natural persons. Option A relates to securities portfolios managed by a licensed investment manager. Option D—nature of the entity, legal form, type and capital—is specifically identified for investment funds. The classifications are deliberately distinct so brokerage firms obtain appropriate identification evidence for each client structure. Accordingly, for a corporate person, the correct answer is option C.

================

Special pricing arrangements apply when securities of a foreign company are already traded on another financial market and subsequently become dual-listed on the Dubai Financial Market. According to the CISI UAE Financial Rules and Regulations, the opening price for the security on its first trading day on the DFM is based on its last closing price in the principal market . This gives the DFM a current and objectively observable reference price from the market in which the security has its principal listing and established trading history. The DFM's normal maximum and minimum daily price-margin limits can then be applied according to market procedures from the first trading day. The rules also permit market management to introduce different procedures for foreign shares where circumstances justify doing so. The relevant benchmark is not the last opening price, because that may no longer reflect the most recent trading information. Nor is a price from a secondary market used where the principal-market closing price is available. Therefore, option C is correct.

================

A Special Purpose Acquisition Company (SPAC) must complete a prescribed sequence of regulatory and market procedures when conducting its public offering. After the required subscription and registration procedures have been completed and the applicable registration fee has been paid, the Authority issues the SPAC's registration certificate. The CISI UAE Financial Rules and Regulations then imposes a short deadline for the next stage. Within three business days from the date of the registration certificate , the SPAC must submit its request to the relevant market to list the shares and warrants it has issued in accordance with the applicable listing requirements. After listing, the SPAC becomes subject immediately to the Authority's corporate governance requirements applicable to listed public joint-stock companies. This three-business-day requirement should not be confused with other SPAC deadlines, such as the period for depositing the prospectus before subscription, publication of the subscription invitation, or the permitted duration of the subscription period itself. Since the question specifically concerns the post-registration listing request, the correct answer is three business days, option C.

================

The UAE AML framework distinguishes between criminal penalties imposed on natural persons and financial liability imposed on legal persons. Under the CISI UAE Financial Rules and Regulations treatment of Federal Law No. 20 of 2018, where representatives, managers or agents of a legal person commit money laundering, financing of terrorism or financing of illegal organisations for the legal person's account or in its name, the legal person may be fined. The prescribed fine is not less than AED 500,000 and not more than AED 50 million . The question asks only for the minimum amount, which is therefore AED 500,000. The liability is expressed as a statutory monetary range, not as 1% or 2% of annual turnover. AED 250,000 is also below the minimum prescribed for the legal person in this circumstance. Separate penalties can apply directly to the natural person who actually committed the underlying offence, but that does not change the minimum fine applicable to the legal entity itself. Accordingly, option D is correct.

================

On the Dubai Financial Market (DFM), a good-till-cancelled (GTC) order remains active and available for execution until explicitly cancelled by the investor who placed it. This means the investor maintains control over the order’s lifespan, allowing it to persist through trading sessions unless they choose to withdraw it. Brokers or clearing members do not have authority to unilaterally cancel GTC orders, ensuring investor autonomy. The market committee also does not intervene in the cancellation of individual orders under normal circumstances. This design supports investor flexibility and orderly market functioning.