Finastra Assessment Test Finastra Assessment Open Finance and APIs 5 — Questions and Answers
Question 1: What is 'embedded finance' and how does it relate to Open Finance APIs?
- A type of in-branch financial kiosk system
- The integration of financial services (payments, lending, insurance) directly into non-financial platforms via APIs (Correct answer)
- A technique for embedding encryption keys in API headers
- A Finastra internal tool for embedding charts in dashboards
Correct answer: The integration of financial services (payments, lending, insurance) directly into non-financial platforms via APIs
Embedded finance uses Open APIs to allow non-financial companies (e.g., e-commerce platforms) to offer banking, payments, or lending services natively within their own products.
Question 2: What distinguishes a 'webhook' from a traditional REST API call in financial integrations?
- Webhooks use SOAP; REST APIs use JSON
- A webhook is server-initiated (push), sending data to a client URL when an event occurs, rather than the client polling for updates (Correct answer)
- Webhooks require OAuth 2.0; REST APIs use API keys only
- Webhooks only work with on-premises banking systems
Correct answer: A webhook is server-initiated (push), sending data to a client URL when an event occurs, rather than the client polling for updates
Webhooks flip the communication model — instead of a client repeatedly polling, the server pushes a notification to the client's endpoint when a specified event (e.g., payment settled) occurs.
Question 3: What is 'Know Your Customer (KYC)' as it relates to Open Finance API integrations?
- A marketing API for targeting financial product advertisements
- A regulatory identity verification process that fintechs must complete, often enabled via KYC APIs from identity providers (Correct answer)
- An API endpoint that returns customer credit scores
- A Finastra analytics tool for customer segmentation
Correct answer: A regulatory identity verification process that fintechs must complete, often enabled via KYC APIs from identity providers
KYC APIs allow fintechs and banks to programmatically verify customer identities using documents and biometrics, meeting AML/BSA regulatory requirements digitally.
Question 4: In FusionFabric.cloud, what is the 'App Store' component designed to do?
- Sell consumer banking apps for iOS and Android
- Enable financial institutions to discover, evaluate, and deploy third-party microapps built on Finastra's open APIs (Correct answer)
- Provide a marketplace for purchasing API credits
- Distribute Finastra software licenses to enterprise clients
Correct answer: Enable financial institutions to discover, evaluate, and deploy third-party microapps built on Finastra's open APIs
The FusionFabric.cloud App Store is a marketplace where banks can browse and deploy certified fintech microapps that integrate with their existing Finastra products via open APIs.
Question 5: What does 'PKCE' (Proof Key for Code Exchange) protect against in OAuth 2.0 flows?
- Man-in-the-middle attacks on encrypted TLS channels
- Authorization code interception attacks, especially in mobile and single-page applications (Correct answer)
- Brute-force attacks on API rate limits
- SQL injection in API query parameters
Correct answer: Authorization code interception attacks, especially in mobile and single-page applications
PKCE (RFC 7636) prevents authorization code interception by requiring the client to prove it initiated the flow, critical for public clients like mobile apps that cannot store a client secret.
Question 6: Which of the following best describes 'Open Finance' as an evolution beyond 'Open Banking'?
- Open Finance is limited to payment accounts at commercial banks only
- Open Finance extends data sharing beyond bank accounts to include investments, pensions, insurance, and mortgages (Correct answer)
- Open Finance eliminates the need for customer consent by using anonymized data
- Open Finance replaces Open Banking entirely and makes PSD2 obsolete
Correct answer: Open Finance extends data sharing beyond bank accounts to include investments, pensions, insurance, and mortgages
Open Finance broadens the scope of Open Banking by encompassing a wider range of financial products and providers, giving consumers a more complete view and control of all their financial data.
Question 7: What is 'API orchestration' in a complex financial services integration scenario?
- Manually coding each API integration point in a monolithic application
- Coordinating multiple API calls across different services in a defined sequence or workflow to complete a business process (Correct answer)
- A security protocol for signing API requests with private keys
- A technique for compressing API documentation into a single file
Correct answer: Coordinating multiple API calls across different services in a defined sequence or workflow to complete a business process
API orchestration manages the sequencing, error handling, and data transformation across multiple API calls — for example, checking credit, initiating a loan, and sending a confirmation in one business flow.
Finastra Assessment Test Finastra Assessment Open Finance and APIs 5
What is 'embedded finance' and how does it relate to Open Finance APIs?