CBP Digital Banking and Technology 3 — Questions and Answers
Question 1: What is the primary purpose of a 'digital sandbox' environment in banking?
- To store encrypted customer data
- To test new fintech applications and APIs in a controlled environment without affecting production systems (Correct answer)
- To isolate malware detected on banking networks
- To run batch processing jobs overnight
Correct answer: To test new fintech applications and APIs in a controlled environment without affecting production systems
A digital sandbox allows banks and fintechs to test new products, APIs, and integrations safely without exposing real customer data or disrupting live systems.
Question 2: Which of the following best describes 'neobanks' in the US financial ecosystem?
- Traditional banks that have added mobile apps
- Fully digital financial institutions that operate without physical branches (Correct answer)
- Credit unions that offer online services
- Banks that specialize in cryptocurrency
Correct answer: Fully digital financial institutions that operate without physical branches
Neobanks are fully digital financial institutions with no physical branches, offering banking services exclusively through mobile apps and web platforms.
Question 3: In digital lending, what is 'alternative data' used for?
- Backing up traditional credit bureau data
- Assessing creditworthiness using non-traditional sources like utility payments, rental history, and social media (Correct answer)
- Encrypting loan application data
- Identifying fraudulent loan applications
Correct answer: Assessing creditworthiness using non-traditional sources like utility payments, rental history, and social media
Alternative data expands credit assessment beyond FICO scores by incorporating non-traditional data sources, helping lenders evaluate thin-file or unbanked applicants.
Question 4: What does 'tokenization' accomplish in digital payment security?
- Converts transaction data into cryptocurrency tokens
- Replaces sensitive card data with a non-sensitive surrogate value (token) for processing (Correct answer)
- Encrypts data using blockchain technology
- Creates digital receipts for each transaction
Correct answer: Replaces sensitive card data with a non-sensitive surrogate value (token) for processing
Tokenization replaces sensitive payment card data with a unique token, so even if the token is intercepted, it cannot be used to retrieve the original card information.
Question 5: Which cloud deployment model do most large US banks prefer for core banking workloads due to regulatory and control requirements?
- Public cloud only
- Hybrid cloud
- Community cloud
- Private cloud or hybrid cloud (Correct answer)
Correct answer: Private cloud or hybrid cloud
Large banks prefer private or hybrid cloud models for core banking workloads to maintain control over sensitive data while leveraging cloud flexibility for non-core functions.
Question 6: What is 'digital identity verification' (eKYC) in banking?
- A process for verifying digital certificates
- Electronic Know Your Customer processes that verify customer identity remotely using digital documents and biometrics (Correct answer)
- A cybersecurity protocol for network access
- A method for tracking customer transactions digitally
Correct answer: Electronic Know Your Customer processes that verify customer identity remotely using digital documents and biometrics
eKYC uses digital channels, document scanning, facial recognition, and data verification to onboard and verify customers remotely without requiring in-person visits.
Question 7: Which emerging technology allows multiple banks to share a distributed ledger for interbank settlements without a central clearing authority?
- Centralized payment hub
- Distributed ledger technology (DLT) (Correct answer)
- SWIFT messaging network
- ACH batch processing
Correct answer: Distributed ledger technology (DLT)
Distributed ledger technology (DLT), including blockchain, enables banks to share a synchronized, immutable record of transactions without requiring a central intermediary.
What is the primary purpose of a 'digital sandbox' environment in banking?