Hash rate measures computational power in Proof-of-Work blockchains; higher hash rates mean more secure networks against 51% attacks.

Proof of Work (PoW) consensus achieves network consensus by requiring participants (miners) to solve complex cryptographic puzzles, which verifies transactions and secures the blockchain. This computational work makes it difficult and costly to alter the blockchain.
Dependency on electricity (A) is a criticism rather than an advantage. PoW promotes decentralization rather than centralization (B). It provides strong security for large networks rather than small ones (D).
This principle is fundamental in Bitcoin and many other cryptocurrencies and is frequently referenced in AML/CFT guidance to understand the transaction validation process and network security.

Indirect exposure refers to a situation where cryptoassets are not directly associated with illicit activity but have transactional links through other addresses that are associated with risky or illicit behavior. Blockchain analytics tools detect these indirect links to flagged addresses, allowing firms to assess risk based on network connections rather than direct ownership or activity.
The DFSA AML guidance and international FATF Virtual Assets guidance explain that indirect exposure is a critical concept for transaction monitoring as it broadens the detection scope beyond direct transactions, flagging assets that might be "tainted" through intermediary addresses.
Reference:
FATF Guidance on Virtual Assets and VASPs emphasizes monitoring both direct and indirect exposure of wallets to illicit activity.
DFSA AML Module Section 13 on Suspicious Activity Reports requires firms to incorporate indirect exposure assessments in their monitoring systems【AML/VER25/05-24: Sections 4.1, 6.3, 13.3; FATF VA Guidance 2021】.
Therefore, B is the correct definition.

In risk-based AML/CFT programs - including those applied to Virtual Asset Service Providers (VASPs) - risk assessment determines the remaining exposure after applying mitigating measures.
Inherent Risk: The natural level of risk before applying any controls, based on factors like customer profile, transaction patterns, and jurisdiction.
Control Effectiveness: The degree to which implemented controls (e.g., CDD, EDD, sanctions screening, blockchain analytics) reduce risk.
Residual Risk: The risk that remains after controls are applied and is the level an organization must either accept, reduce further, or avoid.
The standard formula is:
Inherent Risk - Control Effectiveness = Residual Risk
This equation is emphasized in FATF's risk-based approach guidance and reinforced in DIFC (DFSA) and ADGM (FSRA) AML rules to ensure ongoing monitoring and governance oversight of remaining risks.

FATF Recommendation 15 requires countries to regulate VASPs for AML/CFT purposes, applying the same preventive measures as financial institutions.