Finastra Assessment Open Finance and APIs Questions and Answers

Question 1

A third-party provider (TPP) is developing a personal finance management application that requires read-only access to a user's bank account transactions.
To do this securely under Open Banking standards, which combination of technology and protocol is essential?

Accepted Answer

A RESTful API for data retrieval and OAuth 2.0 for delegated authorization.

Answer

Direct database connection using a VPN for maximum data access.

Answer

A SOAP API for complex queries and basic authentication for speed.

Answer

Screen scraping user credentials and storing them in an encrypted vault.

Question 2

In an Open Finance ecosystem, what is the primary function of an API Gateway?

Accepted Answer

To act as a single, secure entry point for all API calls, handling tasks like authentication, rate limiting, and routing.

Answer

To directly host the core banking database and execute business logic.

Answer

To store and manage the consent given by end-users for data sharing.

Answer

To create and design the user interface for third-party applications.

Question 3

Which of the following scenarios best illustrates a use case for Open Finance that goes beyond the typical scope of Open Banking?

Accepted Answer

A platform aggregating a client's data from their bank accounts, investment portfolios, and pension funds to provide holistic advice.

Answer

A user initiating a payment from their checking account to a friend using a third-party app.

Answer

A small business application that checks the balance of a company's business bank account.

Answer

A user viewing the transaction history of their primary current account on a budgeting app.

Question 4

A developer is integrating with a bank's API and consistently receives an HTTP `401 Unauthorized` error response. Which of the following is the MOST likely cause?

Accepted Answer

The API call is being made without a valid access token or with an expired/revoked token.

Answer

The bank's backend server is down or temporarily unavailable.

Answer

The requested data resource, such as a specific account, does not exist.

Answer

The API request was malformed, containing a syntax error in the JSON payload.

Question 5

When building APIs for Open Finance, the industry has largely standardized on a specific architectural style that is stateless, scalable, and uses standard HTTP methods (GET, POST, PUT, DELETE). What is this architectural style called?

Accepted Answer

Representational State Transfer (REST)

Answer

Simple Object Access Protocol (SOAP)

Answer

GraphQL

Answer

File Transfer Protocol (FTP)

Question 6

Which of the following regulations was the primary legislative driver for mandating that banks in the European Union create secure APIs for Account Information Service Providers (AISPs) and Payment Initiation Service Providers (PISPs)?

Accepted Answer

The revised Payment Services Directive (PSD2)

Answer

General Data Protection Regulation (GDPR)

Answer

Markets in Financial Instruments Directive II (MiFID II)

Answer

Basel III

A third-party provider (TPP) is developing a personal finance management application that requires read-only access to a user's bank account transactions.To do this securely under Open Banking standards, which combination of technology and protocol is essential?

A third-party provider (TPP) is developing a personal finance management application that requires read-only access to a user's bank account transactions.
To do this securely under Open Banking standards, which combination of technology and protocol is essential?