According to the ACAMS Study Guide for the CAMS Certification Exam (6th edition), page 215, one of the best practices for banks to prevent and detect mortgage fraud is to conduct internal investigations when there are red flags or suspicions of fraud involving bank employees. The investigation should include reviewing the employee's loan files, interviewing the employee and other relevant parties, verifying the information and documents provided by the employee, and documenting the findings and actions taken. Filing a suspicious activity report (SAR) may be appropriate after the investigation is completed and the bank has reasonable grounds to suspect fraud. Filing a police report or initiating civil litigation may also be options depending on the outcome of the investigation and the bank's policies, but they are not the first steps to take when the bank suspects an employee of mortgage fraud.
References:
ACAMS Study Guide for the CAMS Certification Exam (6th edition), page 2151 Mortgage Fraud: Understanding and Avoiding It2 Mortgage Fraud: What You Need To Know3

Broker-dealers cannot have correspondent accounts with a foreign bank that does not have a physical presence in any country. The USA PATRIOT Act has an extraterritorial effect in that it prohibits broker- dealers from having correspondent accounts with foreign banks that do not have a physical presence in any country. This rule is designed to help prevent money laundering and terrorist financing by making it more difficult for funds to be moved to or through jurisdictions with less stringent anti-money laundering laws.

a financial institution must perform a continuing review of the account for a period of 90 days. The continuing review must include an analysis of any transactions that occur in the account, as well as any changes in the customer's risk profile. The review should be updated as needed to ensure that the customer is not engaging in any suspicious activities.

A free-look provision is a period of time, typically 10 to 30 days, in which a new life insurance policy owner can terminate the policy and have their premium refunded1. This can help criminals to launder money by purchasing a policy with illicit funds and then cancelling it within the free-look period to receive a clean check from the insurance company2. This way, they can disguise the source and origin of their funds and avoid any penalties or charges that would otherwise apply to early termination of the policy.
1: Investopedia, What Is a Free Look Period and How Does It Work?
2: FinCEN, Anti-Money Laundering Program and Suspicious Activity Reporting Requirements for Insurance Companies

Q Law enforcement may be given access to a financial institution customer's financial records if they serve a legal summons or subpoena, or if they have circumstantial evidence to suspect money laundering. These are two of the exceptions to the general rule that financial institutions must protect the privacy of their customers' financial information under the Right to Financial Privacy Act (RFPA) of 19781. The RFPA alsoallows access to customer records in other situations, such as with the customer's consent, in response to judicial orders, or for certain intelligence or counterintelligence purposes1.
Option A is incorrect because a suspicious transaction report (STR) does not automatically grant law enforcement access to the customer's financial records. The STR is a confidential document that is filed by the financial institution to the Financial Intelligence Unit (FIU) of the country, and the FIU may decide to share the information with law enforcement if it deems appropriate2. However, law enforcement still needs to follow the RFPA procedures to obtain the customer's records from the financial institution.
Option C is incorrect because the investigation of a customer being made public in the media does not give law enforcement the right to access the customer's financial records. The media exposure may raise the public interest or the urgency of the investigation, but it does not override the RFPA requirements. Law enforcement still needs to obtain a legal summons, subpoena, or other valid authorization to access the customer's records from the financial institution.
References:
1: Right to Financial Privacy Act of 1978, 12 U.S.C. §§ 3401-3422 2: ACAMS Study Guide for the CAMS Certification Examination, 6th Edition, Chapter 2: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), p. 47