CFP Open Banking & API Integration 3

Question 1

What is the key distinction between 'open banking' and 'open finance'?

Accepted Answer

Open banking focuses on bank account and payment data while open finance extends to all financial products including insurance, investments, and pensions

Answer

Open banking covers all financial products while open finance is limited to payment accounts only

Answer

Open banking is a US regulatory initiative while open finance is a European Union concept

Answer

Open banking requires government mandates while open finance operates on a voluntary industry basis

Question 2

Which security specification is used for Financial-grade API (FAPI) profiles in open banking implementations?

Accepted Answer

OpenID Connect combined with FAPI security profiles

Answer

SAML 2.0 federation for enterprise identity management

Answer

Kerberos network authentication protocol

Answer

LDAP directory service authentication

Question 3

What is the function of an 'API gateway' in an open banking infrastructure?

Accepted Answer

A management layer that handles API traffic routing, security enforcement, rate limiting, and analytics between banks and third parties

Answer

A physical server room where bank-owned APIs are hosted and maintained

Answer

A regulatory submission portal for filing API compliance and audit reports

Answer

A customer-facing portal for managing third-party consent and API access permissions

Question 4

What is the primary challenge preventing seamless interoperability in global open banking systems?

Accepted Answer

Regulatory and standards fragmentation, with different API specifications and compliance requirements across jurisdictions

Answer

The prohibitively high infrastructure cost of building direct API connections between banks

Answer

Lack of consumer awareness and demand for cross-border financial data sharing

Answer

Technical incompatibility of legacy core banking systems with modern API architectures

Question 5

What is 'Dynamic Client Registration' (DCR) in an open banking authorization context?

Accepted Answer

A mechanism allowing third-party providers to programmatically register as authorized API clients with an authorization server without manual provisioning

Answer

A process by which customers dynamically update their banking preferences and linked accounts

Answer

A method for banks to automatically enroll new API product consumers from an approved marketplace

Answer

A regulatory licensing process for fintech companies seeking open banking certification

Question 6

Which of the following best defines 'embedded finance' as enabled by open banking APIs?

Accepted Answer

The integration of financial services such as payments, lending, and insurance directly into non-financial products and platforms

Answer

Financial services offered exclusively through dedicated mobile banking applications

Answer

AI-powered financial advice embedded within robo-advisor investment platforms

Answer

Hidden fee structures and charges embedded within financial product agreements

Question 7

What does 'API monetization' mean for banks participating in the open banking ecosystem?

Accepted Answer

Generating revenue by offering premium API products, data services, and infrastructure access to fintech companies and developers

Answer

Converting proprietary API data into tokenized assets on a blockchain network

Answer

Charging end customers a fee each time they authorize a third party to access their financial data

Answer

Selling anonymized and aggregated customer transaction data to market research firms