Certified Fintech Practitioner (CFP) — Questions and Answers

Question 1: A regtech company performing transaction monitoring for AML purposes categorizes suspicious activity using which financial analysis tool?

Porter's Five Forces framework
Black-Scholes options pricing model
Discounted Cash Flow (DCF) modeling
Threshold-based rules combined with behavioral analytics (Correct answer)

Correct answer: Threshold-based rules combined with behavioral analytics

AML transaction monitoring uses rule-based thresholds alongside machine learning behavioral analytics to flag suspicious patterns.

Question 2: Which U.S. federal law prohibits discriminatory lending practices that disproportionately harm protected classes?

Truth in Lending Act (TILA)
Community Reinvestment Act (CRA)
Fair Debt Collection Practices Act (FDCPA)
Equal Credit Opportunity Act (ECOA) (Correct answer)

Correct answer: Equal Credit Opportunity Act (ECOA)

The Equal Credit Opportunity Act (ECOA) prohibits creditors from discriminating against applicants based on race, color, religion, national origin, sex, marital status, or age.

Question 3: What is cash flow management in CFP practice?

Only tracking income
Optimizing the timing of money coming in and going out (Correct answer)
Managing coins and currency
Investing everything in stocks

Correct answer: Optimizing the timing of money coming in and going out

Cash flow management tracks and optimizes the timing of inflows and outflows to ensure sufficient funds.

Question 4: Which security framework is most widely adopted by U.S. financial institutions to manage cybersecurity risk?

PCI DSS
ISO 27001
SOC 2 Type II
NIST Cybersecurity Framework (Correct answer)

Correct answer: NIST Cybersecurity Framework

The NIST Cybersecurity Framework (CSF) is the most widely adopted standard by U.S. financial institutions for identifying, protecting, detecting, responding to, and recovering from cyber threats.

Question 5: What risk does 'rug pull' describe in the DeFi ecosystem?

A regulatory shutdown pulling a platform's operating license
Developers abandoning a project and draining liquidity after investors buy in (Correct answer)
A 51% attack causing blockchain reorganization and fund losses
Smart contract execution failure due to insufficient gas fees

Correct answer: Developers abandoning a project and draining liquidity after investors buy in

A rug pull occurs when project developers suddenly withdraw all liquidity or funds and abandon the project, leaving investors with worthless tokens.

Question 6: A US fintech company has nexus in 5 states and must apportion income for state tax purposes. Most states use which primary factor under the Multistate Tax Compact's single-sales-factor formula?

Payroll factor weighted at 50% and sales factor weighted at 50%
Equally weighted property, payroll, and sales factors
Asset value as the sole apportionment factor
Sales (receipts) factor only, with no weight on property or payroll (Correct answer)

Correct answer: Sales (receipts) factor only, with no weight on property or payroll

The majority of states have moved to a single-sales-factor apportionment formula that uses only the sales (receipts) factor to determine state taxable income.

Question 7: What differentiates quantitative from qualitative data in CFP?

Qualitative is always more accurate
Quantitative cannot be used professionally
They are interchangeable
Quantitative is numerical; qualitative is descriptive and categorical (Correct answer)

Correct answer: Quantitative is numerical; qualitative is descriptive and categorical

Quantitative data is numerical and measurable; qualitative data provides descriptive context and depth.

Question 8: A fintech startup wants to offer FDIC-insured deposit accounts without becoming a bank. What arrangement enables this?

Registering as an investment advisor with the SEC
Money transmitter license in all 50 states
Obtaining a non-bank financial institution charter
Banking-as-a-Service (BaaS) partnership with an FDIC-insured sponsor bank (Correct answer)

Correct answer: Banking-as-a-Service (BaaS) partnership with an FDIC-insured sponsor bank

BaaS allows fintechs to offer FDIC-insured deposits by partnering with chartered banks that hold the deposits and regulatory charter.

Question 9: Which approach best describes 'privacy by design' in fintech product development?

Allowing users to opt out of data collection
Embedding data privacy controls into the system architecture from the start (Correct answer)
Adding privacy features after product launch
Anonymizing data before sending to third parties

Correct answer: Embedding data privacy controls into the system architecture from the start

Privacy by design means proactively integrating privacy and data protection into the design of fintech systems and processes rather than retrofitting them afterward.

Question 10: What is the importance of regular risk assessments in Fintech?

It reduces operational costs.
It boosts customer acquisition.
It helps identify and mitigate potential risks (Correct answer)
It improves team performance.

Correct answer: It helps identify and mitigate potential risks

Regular risk assessments are essential in Fintech to systematically identify, evaluate, and prioritize potential threats and vulnerabilities across all operations. By continuously assessing risks, companies can develop and implement effective mitigation strategies, adapt to new challenges, and ensure the resilience and security of their financial services.

Question 11: What is the purpose of multi-factor authentication (MFA) in fintech applications?

To verify user identity using two or more independent factors (Correct answer)
To monitor user behavior for fraud
To encrypt user passwords in the database
To speed up login processes

Correct answer: To verify user identity using two or more independent factors

MFA adds layers of security by requiring users to verify their identity through multiple independent factors such as a password plus a one-time code.

Question 12: Under GLBA's Safeguards Rule, what is required of non-bank financial institutions?

Purchasing cybersecurity insurance
Filing quarterly breach reports with the FTC
Developing a written information security program (Correct answer)
Annual third-party audits only

Correct answer: Developing a written information security program

The FTC's Safeguards Rule under GLBA requires non-bank financial institutions to develop, implement, and maintain a comprehensive written information security program.

Question 13: In auditing a cryptocurrency exchange, which procedure is most appropriate for verifying the existence of digital assets held in custody?

Independently verifying wallet addresses on the public blockchain and reconciling to the ledger (Correct answer)
Reviewing insurance certificates for the crypto holdings
Confirming balances directly with the exchange's banking partners
Inspecting the physical servers that store private keys

Correct answer: Independently verifying wallet addresses on the public blockchain and reconciling to the ledger

Public blockchain verification allows auditors to independently confirm that assets at specific wallet addresses exist without relying solely on management representations.

Question 14: Which regulatory body oversees the ACH network and establishes its operating rules in the United States?

Federal Reserve
CFPB
NACHA (Correct answer)
OCC

Correct answer: NACHA

NACHA (National Automated Clearing House Association) governs the ACH network by publishing and enforcing the NACHA Operating Rules.

Question 15: A client asks why their digital wealth management platform charges a 0.25% annual fee versus a traditional advisor's 1% fee. The PRIMARY cost driver for the lower fee in digital platforms is:

Lower regulatory compliance requirements
Automation and economies of scale in portfolio management (Correct answer)
Reduced personalization and no human oversight
Offshore operation to avoid US tax obligations

Correct answer: Automation and economies of scale in portfolio management

Digital platforms achieve lower fees primarily through automation and serving large client bases, reducing the cost per account.

Question 16: Which of the following represents a 'compensating control' in a fintech environment where full segregation of duties is not feasible?

Encrypting all data at rest
Purchasing cyber liability insurance
Enhanced supervisory review and detailed management monitoring reports (Correct answer)
Outsourcing the accounting function entirely

Correct answer: Enhanced supervisory review and detailed management monitoring reports

A compensating control substitutes for a missing primary control; enhanced supervisory review can mitigate the segregation-of-duties risk when staffing prevents full separation.

Question 17: What is blockchain technology?

A type of cryptocurrency.
A digital payment system.
A new financial regulation.
A decentralized ledger for tracking transactions (Correct answer)

Correct answer: A decentralized ledger for tracking transactions

Blockchain technology is fundamentally a decentralized, distributed ledger system. It records transactions across a network of computers, ensuring that data is transparent, immutable, and resistant to tampering without relying on a central authority. This makes it a secure and efficient way to track and verify information.

Question 18: A client is evaluating a tokenized real estate investment on a blockchain platform. The advisor should FIRST assess:

Whether the blockchain used is proof-of-work or proof-of-stake
The historical real estate values in the property's zip code over the past decade
Whether the token offering complies with SEC securities regulations and what liquidity mechanisms exist (Correct answer)
The graphic design quality of the platform's investor dashboard

Correct answer: Whether the token offering complies with SEC securities regulations and what liquidity mechanisms exist

Regulatory compliance status and liquidity terms are the foundational due diligence items for any tokenized securities offering.

Question 19: Which ISO standard defines the message format used in most card payment and ATM networks globally?

ISO 8583 (Correct answer)
ISO 20022
ISO 27001
ISO 31000

Correct answer: ISO 8583

ISO 8583 is the international standard for financial transaction card-originated interchange messaging used by Visa, Mastercard, and ATM networks.

Question 20: When explaining cryptocurrency as an asset class to a conservative client, a CFP practitioner should PRIMARILY emphasize:

Potential for outsized returns that outperform all traditional assets
Tax-free status of all cryptocurrency gains under current US law
The ease of use of crypto exchanges for everyday investors
High volatility, regulatory uncertainty, and the small allocation most risk models suggest (Correct answer)

Correct answer: High volatility, regulatory uncertainty, and the small allocation most risk models suggest

A conservative client must understand volatility and regulatory risk; most financial plans, if they include crypto at all, suggest minimal allocation.

Question 21: Under IFRS 9, a fintech lender must move a loan from Stage 1 to Stage 2 when:

The loan becomes 90 days past due
The borrower's credit score drops below 600
There is a significant increase in credit risk since initial recognition (Correct answer)
The borrower misses three consecutive payments

Correct answer: There is a significant increase in credit risk since initial recognition

IFRS 9 Stage 2 classification is triggered by a significant increase in credit risk, not necessarily a missed payment.

Question 22: A wealthtech firm reports Assets Under Management (AUM) of $2B with average advisory fee of 0.45%. What is the projected annual fee revenue?

$900,000
$45 million
$90 million
$9 million (Correct answer)

Correct answer: $9 million

$2,000,000,000 × 0.0045 = $9,000,000 in annual advisory fee revenue.

Question 23: What is the primary purpose of an 'API economy' strategy for traditional banks?

Using AI to eliminate back-office operations entirely
Exposing core banking capabilities as APIs to enable third-party fintech developers to build on top of bank infrastructure (Correct answer)
Replacing all human bank tellers with automated machines
Forming exclusive partnerships that prevent fintech competition

Correct answer: Exposing core banking capabilities as APIs to enable third-party fintech developers to build on top of bank infrastructure

An API economy strategy lets banks monetize their infrastructure, data, and services by exposing them through APIs, enabling partnerships with fintechs and creating new revenue streams.

Question 24: Which of the following is a key indicator of a significant deficiency in internal controls under PCAOB standards?

A deficiency that is less severe than a material weakness but merits attention by those charged with governance (Correct answer)
A control that operates effectively but is not documented in writing
A whistleblower complaint filed with the audit committee
Any misstatement detected by the external auditor

Correct answer: A deficiency that is less severe than a material weakness but merits attention by those charged with governance

PCAOB AS 2201 defines a significant deficiency as an ICFR deficiency, or combination of deficiencies, that is less severe than a material weakness yet important enough to warrant governance attention.

Question 25: Which metric best captures the efficiency of a digital lender's loan origination operations?

Net Interest Margin (NIM)
Loan-to-Deposit Ratio (LDR)
Return on Risk-Weighted Assets (RORWA)
Cost per Originated Loan (CPOL) (Correct answer)

Correct answer: Cost per Originated Loan (CPOL)

Cost per Originated Loan (CPOL) directly measures the operational cost efficiency of the loan origination process.

Question 26: What is the main advantage of using ISO 20022 messaging over legacy formats like ISO 8583 for payment communications?

Faster settlement finality
Built-in end-to-end encryption
Richer, structured data enabling better compliance and straight-through processing (Correct answer)
Lower transaction fees

Correct answer: Richer, structured data enabling better compliance and straight-through processing

ISO 20022's XML/JSON structure carries far more granular data (remittance info, purpose codes), improving AML screening, reconciliation, and STP rates.

Question 27: Which payment innovation does the FedNow Service primarily represent for the US financial system?

A new international wire transfer network
A real-time interbank payment infrastructure available 24/7/365 (Correct answer)
A replacement for the ACH batch processing system
A central bank digital currency (CBDC)

Correct answer: A real-time interbank payment infrastructure available 24/7/365

FedNow is the Federal Reserve's real-time payment and settlement service, enabling instant fund transfers between banks at any hour, any day.

Question 28: A client using a robo-advisor is auto-rebalanced out of equities during a market downturn, realizing significant losses. The advisor reviewing the situation should determine whether:

The platform should be replaced with a more aggressive robo-advisor
The client's risk profile was accurately captured and the rebalancing thresholds were appropriate (Correct answer)
The algorithm performed correctly and no further review is needed
The client should switch entirely to cash holdings going forward

Correct answer: The client's risk profile was accurately captured and the rebalancing thresholds were appropriate

The root issue is whether the client's risk questionnaire accurately reflected their true tolerance and whether rebalancing rules were calibrated accordingly.

Question 29: A fintech advisor working with a newly immigrated client must pay special attention to which aspect of digital financial planning?

Prioritizing high-risk growth investments to accelerate wealth building in a new country
Recommending only US-domiciled mutual funds to simplify reporting
FATCA reporting obligations, foreign account disclosures, and cross-border tax implications that affect financial recommendations (Correct answer)
Avoiding all digital platforms since immigrants cannot legally use robo-advisors

Correct answer: FATCA reporting obligations, foreign account disclosures, and cross-border tax implications that affect financial recommendations

Immigrants often have foreign accounts and income subject to FATCA, FBAR, and treaty provisions that significantly affect financial planning strategies.

Certified Fintech Practitioner (CFP)

The Certified Fintech Practitioner (CFP) certification, offered by the London Institute of Banking & Finance (LIBF), validates expertise across financial technology domains including digital payments, investment strategies, financial analysis, cybersecurity, and regulatory compliance for mid-career finance professionals.

100

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds