Finastra Assessment Test Finastra Assessment Open Finance and APIs 3 — Questions and Answers
Question 1: What is 'consent management' in Open Finance API architectures?
- A system for managing developer API keys
- The process of obtaining, recording, and revoking customer permission for third parties to access their financial data (Correct answer)
- A load balancing technique for high-traffic APIs
- A method of encrypting API payloads
Correct answer: The process of obtaining, recording, and revoking customer permission for third parties to access their financial data
Consent management governs how customers grant, track, and withdraw permission for specific third-party applications to access their financial account data.
Question 2: In Finastra's Open Finance ecosystem, what is 'FusionCredit'?
- A peer-to-peer lending marketplace
- A cloud-native commercial lending solution with open API capabilities (Correct answer)
- A consumer credit score API
- A blockchain-based credit token system
Correct answer: A cloud-native commercial lending solution with open API capabilities
FusionCredit is Finastra's cloud-native commercial lending platform that exposes open APIs enabling integration with third-party fintech applications.
Question 3: What does 'token introspection' allow in OAuth 2.0 financial API security?
- It encrypts access tokens at rest
- It allows a resource server to query the authorization server to validate and retrieve metadata about an active token (Correct answer)
- It converts refresh tokens into JWT format
- It logs all API calls for audit purposes
Correct answer: It allows a resource server to query the authorization server to validate and retrieve metadata about an active token
Token introspection (RFC 7662) enables a resource server to check whether an OAuth 2.0 token is still valid and retrieve its associated claims from the authorization server.
Question 4: What is 'event-driven architecture' and why is it valuable in Open Finance?
- An architecture where APIs are triggered only by scheduled batch jobs
- A design where systems publish and consume events asynchronously, enabling real-time financial notifications (Correct answer)
- A framework that requires synchronous REST calls between all services
- A pattern for organizing database schema migrations
Correct answer: A design where systems publish and consume events asynchronously, enabling real-time financial notifications
Event-driven architecture decouples producers and consumers, allowing financial platforms to react to events (e.g., payment received) in real time via streams like Kafka.
Question 5: Which Finastra product provides treasury and capital markets functionality with open API access?
- Fusion Phoenix
- Fusion Mortgagebot
- Fusion Capital (Correct answer)
- Fusion Trade Innovation
Correct answer: Fusion Capital
Fusion Capital is Finastra's treasury and capital markets platform that supports open API integration for front-office, middle-office, and back-office workflows.
Question 6: What is 'API monetization' in the context of financial institutions?
- Charging developers a fee per API call or via subscription to generate revenue from API products (Correct answer)
- Encrypting APIs to prevent unauthorized access
- Using APIs to automate ATM cash replenishment
- A regulatory requirement under PSD2
Correct answer: Charging developers a fee per API call or via subscription to generate revenue from API products
API monetization allows banks to generate revenue by offering premium API products to fintechs, corporates, and developers on a pay-per-use or subscription basis.
Question 7: In Open Finance, what is the purpose of a 'sandbox environment'?
- To store sensitive production financial data for testing
- To provide developers a safe, simulated environment to test API integrations without using real data (Correct answer)
- To isolate fraud transactions from legitimate ones
- To run regulatory stress tests on bank capital
Correct answer: To provide developers a safe, simulated environment to test API integrations without using real data
A sandbox gives third-party developers a risk-free environment with synthetic data to build, test, and validate API integrations before going live.
Finastra Assessment Test Finastra Assessment Open Finance and APIs 3
What is 'consent management' in Open Finance API architectures?