Chapter 21 Quiz

Algorithmic Trading Controls and Kill Switches

16 questions. Answers follow.


1. MiFID II Article 17 requires investment firms engaged in algorithmic trading to have in place:

A) A specific algorithm architecture approved by ESMA before deployment B) Effective systems and risk controls ensuring trading systems are resilient, have appropriate trading thresholds and limits, and prevent erroneous orders that may create a disorderly market C) Exchange co-location agreements to ensure sufficient speed for market-making obligations D) Dedicated compliance staff monitoring every algorithm in real time


2. The Knight Capital collapse of August 2012 is the canonical algorithmic trading control failure. The proximate cause was:

A) A deliberate market manipulation scheme by senior management B) A software deployment error that reactivated a legacy algorithm, executing $6.65 billion of unintended trades in 45 minutes C) A cyberattack that took control of Knight's trading systems D) A data feed error that caused Knight's algorithms to price all instruments incorrectly


3. A "kill switch" under RTS 6 must:

A) Be activated manually by a designated risk officer within 4 hours of any unusual algorithm behavior B) Block all new order submissions but allow existing orders to remain in the market until filled or expired C) Cancel all outstanding orders across all trading venues immediately and prevent submission of new orders D) Alert exchange operations teams who then suspend the firm's market access


4. Pre-trade price band checks are designed to:

A) Ensure algorithms do not trade during periods of high market volatility B) Reject orders where the submitted price deviates beyond a specified percentage from the current market reference price, catching data errors and misconfigured algorithms C) Prevent algorithms from trading in financial instruments outside their approved scope D) Limit the maximum profit an algorithm can make in a single trading session


5. Under RTS 6, a "fat-finger filter" addresses which type of control failure?

A) Algorithms that accidentally submit orders on behalf of the wrong client account B) Obviously erroneous order entries — for example, a price with too many zeros or a quantity 100× the normal size for that instrument C) Algorithms that respond too slowly to market price changes, creating latency D) Trading desk staff who approve algorithmic strategies without sufficient risk assessment


6. RTS 6 requires that algorithmic trading firms conduct an annual self-assessment. Which of the following is NOT a required element of this self-assessment?

A) A complete algorithm inventory covering all algorithms in production B) Documentation of kill switch testing results C) An ESMA-certified external audit of algorithmic trading systems D) An incident log covering system failures and unusual algorithm behavior during the year


7. Cornerstone Financial Group's algorithmic trading controls review found that three algorithms were deployed but not registered in the firm's algorithm inventory. This finding indicates:

A) A market abuse violation — unregistered algorithms are presumed to be engaged in manipulation B) An algorithm governance gap — all algorithms must be registered, tested, and approved before deployment; unregistered algorithms may have bypassed required testing and change management controls C) A cybersecurity incident — unauthorized parties may have installed the algorithms D) A capital inadequacy issue — unregistered trading activity may require additional capital charges


8. Under MiFID II Article 17(3), investment firms engaged in algorithmic trading as market makers must:

A) Provide continuous quotes in all instruments they trade at all times, with no exceptions permitted B) Enter into market-making agreements with trading venues and post binding quotes during at least 50% of the exchange's continuous trading hours, except in exceptional circumstances C) Guarantee execution of all client orders in the instruments for which they make a market D) Report all market-making activities to ESMA on a daily basis


9. An investment firm's algorithm-generated intraday loss reaches a predefined threshold. Under best practice (and implicit in RTS 6 requirements), what should happen automatically?

A) The algorithm should increase its position sizes to recover the loss B) A notification should be sent to the risk manager, who has 30 minutes to decide whether to intervene C) The kill switch should activate — halting the algorithm and canceling all outstanding orders — pending a manual investigation and restart authorization D) The algorithm should switch to a defensive mode, only canceling existing orders without submitting new ones


10. The 2010 Flash Crash (Dow Jones fell ~1,000 points in minutes) is partly attributed to which algorithmic trading phenomenon?

A) A single rogue algorithm deliberately manipulating index prices B) HFT market-making algorithms simultaneously withdrawing liquidity, combined with a large futures execution algorithm's market impact creating a feedback loop C) A regulatory system failure that allowed algorithms to bypass pre-trade controls for 20 minutes D) Quote stuffing by a single firm that overwhelmed exchange matching systems


11. A firm's VWAP execution algorithm for equities is updated with a new order-splitting logic. Under RTS 6 change management requirements, the firm must:

A) Notify the relevant trading venues of the change before deploying the updated algorithm B) Document the change, conduct testing in a non-production environment, obtain appropriate approval, and maintain a change log — before deploying to live trading C) Inform ESMA of the change within 10 business days of deployment D) Re-run the annual self-assessment immediately after any algorithm change


12. An investment firm's pre-trade risk controller rejects an order because the order quantity exceeds the maximum set for that instrument. This is an example of:

A) Kill switch activation B) Fat-finger filter C) Order size limit control D) Price band check


13. Which of the following best describes the "order-to-trade ratio" control in the context of algorithmic trading?

A) A minimum ratio of buy orders to sell orders that ensures market balance B) A maximum ratio of orders submitted to orders resulting in execution — monitoring for excessive order cancellation that may indicate manipulative behavior (e.g., quote stuffing) C) The ratio of client orders to own-account orders that a market maker must maintain D) A technical standard for the speed at which order confirmations must be returned from trading venues


14. Direct Electronic Access (DEA) providers — firms that give clients access to trading venues' systems — have specific obligations under MiFID II. These include:

A) Executing all client orders as principal, absorbing the market risk B) Implementing pre-trade controls for clients' DEA orders and maintaining the ability to halt clients' access immediately C) Conducting annual algorithmic trading self-assessments on behalf of each DEA client D) Providing DEA only to professional clients who have completed ESMA's algorithmic trading certification


15. A compliance officer reviewing Cornerstone's annual algorithmic trading self-assessment finds that the document lists 44 algorithms but the firm's operations team states 47 algorithms are running in production. The three unregistered algorithms include two execution algorithms used by the equity desk for "routine" client orders. What is the compliance significance of this gap?

A) The two execution algorithms are exempt from registration because they only execute client orders, not proprietary trading B) All algorithms, including execution algorithms used for client orders, must be in the inventory; the gap indicates inadequate algorithm governance and potentially inadequate testing of the unregistered algorithms C) The gap is reportable to ESMA immediately as a MiFID II Article 17 breach D) The gap only matters if the unregistered algorithms generated losses or caused a market disruption


16. RTS 6 requires algorithmic trading systems to be "tested in a non-production environment" before deployment. The primary purpose of this requirement is:

A) To allow regulators to review algorithm source code before it goes live B) To ensure that algorithm behavior is validated under simulated market conditions before the algorithm can cause real financial harm through errors or unexpected behavior C) To enable exchanges to blacklist algorithms that fail standardized performance benchmarks D) To verify that the algorithm's market impact is below a threshold set by the relevant national competent authority


Answer Key

Q A Explanation
1 B Article 17(1) core requirement: resilient systems, appropriate thresholds and limits, prevent erroneous orders. Not pre-approved by ESMA; not requiring co-location or dedicated monitoring staff specifically.
2 B Knight Capital: deployment error reactivated "Power Peg" legacy algo. It ran for 45 minutes buying and selling in losing patterns. $440M loss. The firm survived only via emergency capital injection.
3 C RTS 6 Article 14(2): kill switch must cancel all unexecuted orders AND prevent new orders. Manual-only activation or partial cancellation is not compliant.
4 B Price band check: if submitted price deviates > X% from market reference, order is rejected. Catches fat-finger prices and data errors before they reach the market.
5 B Fat-finger filter specifically targets obviously incorrect orders — a bond priced at 0.001 instead of 100.001, a quantity of 10,000,000 instead of 10,000. Names after "fat finger" keyboard errors.
6 C No ESMA-certified external audit is required by RTS 6. The self-assessment is internal, approved by senior management, and available to the national competent authority on request.
7 B Algorithm governance: all algorithms must be registered, tested, and approved. Unregistered algorithms may have bypassed testing. No evidence of malice implied — often the result of "temporary" tools never formally decommissioned or registered.
8 B Market-making obligation: written agreement with venue + continuous quotes for ≥50% of hours + exceptional circumstances exception. Not 100% of the time; not all instruments; not client order guarantee.
9 C Loss-triggered kill switch is the industry standard post-Knight Capital. Manual notification with 30 minutes to respond is inadequate — losses compound in seconds.
10 B Flash Crash: a large E-Mini S&P futures sell algorithm created market impact; HFT market makers withdrew; prices fell; automated sell programs triggered — feedback loop. CFTC/SEC joint report attributed the crash to these interacting dynamics.
11 B RTS 6 Article 10(4): changes to algorithmic trading systems must be documented, tested in a non-production environment, approved, and logged. No exchange notification required; ESMA notification not triggered by routine changes.
12 C Order size limit: the maximum permitted order quantity was exceeded. Fat-finger filter catches obviously wrong prices; kill switch halts all activity; price band checks prices.
13 B Order-to-trade ratio: if a firm submits 1,000 orders and only 10 result in trades, the 100:1 ratio may indicate quote stuffing or other manipulative practices. RTS 6 limits this ratio to control market abuse risk.
14 B DEA providers (Article 17(5) MiFID II): must have pre-trade controls for client orders and ability to halt client access. They remain responsible for controls even when the orders originate from their clients.
15 B All algorithms — including execution algorithms — must be in the inventory. The exemption from registration for "routine" execution tools is not recognized by regulators. Inadequate governance; potentially inadequate testing.
16 B Pre-deployment testing validates algorithm behavior. Without testing, errors only become apparent in live markets — potentially after causing market disruption or significant losses.