Cert Master

KT-FIN Invoice and payment manipulation

Attacker inserts a fake line item via compromised AP mailbox rules. Detection?

Multiple choice — select one answer

Answer choices

  1. a. Hunt for hidden forwarding rules and compare invoice hashes to PO
  2. b. Ignore mailbox rules, without security or identity team coordination per policy.
  3. c. Disable SPF, using shared credentials instead of individual accountability.
  4. d. Pay faster, using shared credentials instead of individual accountability.

Architectural breakdown & explanation

Mailbox rules are common in invoice fraud; PO matching catches changes.

Correct answer(s): a. Hunt for hidden forwarding rules and compare invoice hashes to PO

Exam domain: Invoice and payment manipulation (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Financial Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications