Banking Exam Digital Banking and Fintech 5 — Questions and Answers
Question 1: What is 'robo-advisory' and which type of financial institution most commonly offers it?
- Automated ATM maintenance service offered by banks
- Algorithm-driven investment management service requiring minimal human advisor involvement, offered by fintechs and broker-dealers (Correct answer)
- A robotic process automation tool for loan underwriting at community banks
- An AI-powered chatbot for answering customer service inquiries at credit unions
Correct answer: Algorithm-driven investment management service requiring minimal human advisor involvement, offered by fintechs and broker-dealers
Robo-advisors use algorithms to create and manage investment portfolios based on client risk tolerance and goals, typically at lower cost than human financial advisors.
Question 2: What is 'embedded finance' and give an example of it in practice?
- Financial services hidden from consumers within opaque fee structures
- Integration of financial services (payments, lending, insurance) directly into non-financial platforms — e.g., a ride-share app offering drivers a bank account (Correct answer)
- Embedding cryptocurrency wallets into physical hardware devices
- Regulatory requirements embedded into banking software code
Correct answer: Integration of financial services (payments, lending, insurance) directly into non-financial platforms — e.g., a ride-share app offering drivers a bank account
Embedded finance places financial products within non-financial customer experiences, such as Shopify offering merchant banking or Uber providing driver financial services.
Question 3: Under PCI DSS, what is a 'cardholder data environment' (CDE)?
- The physical vault where card printing machines are stored
- The system components, people, and processes that store, process, or transmit cardholder data or sensitive authentication data (Correct answer)
- The regulatory body that enforces card data security standards
- A cloud environment exclusively for issuing virtual credit cards
Correct answer: The system components, people, and processes that store, process, or transmit cardholder data or sensitive authentication data
The CDE is the network segment and all connected systems that touch cardholder or sensitive authentication data, and it defines the scope of PCI DSS compliance requirements.
Question 4: What is 'instant payment' (real-time payment) and which US network launched in 2023 to provide this capability?
- Next-day ACH payments; launched by the Federal Reserve as FedACH 2.0
- Payments settled in seconds around the clock; the Federal Reserve launched FedNow in 2023 (Correct answer)
- Same-day wire transfers; launched by SWIFT as GPI Instant
- Overnight batch settlements; launched by EPN as RTP
Correct answer: Payments settled in seconds around the clock; the Federal Reserve launched FedNow in 2023
FedNow, launched by the Federal Reserve in July 2023, enables banks to offer 24/7/365 instant payment settlement within seconds.
Question 5: What is 'conversational banking' and which technology enables it?
- In-branch financial counseling sessions; enabled by trained human advisors
- Customer interactions with banking services through natural language via chatbots or voice assistants; enabled by natural language processing (NLP) (Correct answer)
- Peer-to-peer lending networks; enabled by social media platforms
- Conference call-based loan origination; enabled by VoIP technology
Correct answer: Customer interactions with banking services through natural language via chatbots or voice assistants; enabled by natural language processing (NLP)
Conversational banking uses NLP-powered chatbots and voice assistants to let customers perform banking tasks and get support through natural language dialogue.
Question 6: What is 'synthetic identity fraud' and why is it particularly challenging for banks to detect?
- Fraud where criminals impersonate bank employees to steal credentials; hard to detect because employees trust colleagues
- Fraud where criminals combine real and fabricated information to create a new fictitious identity; hard to detect because no real victim exists to report it (Correct answer)
- Fraud involving deepfake videos used to bypass biometric KYC; hard to detect because AI-generated faces look real
- Fraud where stolen physical IDs are used to open accounts; hard to detect because documents appear genuine
Correct answer: Fraud where criminals combine real and fabricated information to create a new fictitious identity; hard to detect because no real victim exists to report it
Synthetic identities blend real SSNs (often from children or deceased individuals) with fabricated personal details, making them appear legitimate in credit bureau files with no true victim reporting fraud.
Question 7: What is a 'Banking-as-a-Service' (BaaS) model and who typically uses it?
- A consulting service where big banks advise startups on regulatory compliance
- A model where licensed banks provide their regulated infrastructure via APIs to fintechs and non-banks that build financial products on top (Correct answer)
- A cloud hosting service specifically designed for core banking system migrations
- A government service providing banking access to unbanked populations
Correct answer: A model where licensed banks provide their regulated infrastructure via APIs to fintechs and non-banks that build financial products on top
BaaS allows fintechs and brands to embed regulated banking capabilities (accounts, cards, loans) without obtaining their own bank charter, by partnering with an FDIC-insured bank's API infrastructure.
Banking Exam Digital Banking and Fintech 5
What is 'robo-advisory' and which type of financial institution most commonly offers it?