A European bank processes personal data of EU citizens. Under the General Data Protection Regulation (GDPR), which of the following is a specific requirement for handling financial data?

Data subjects must be informed about the processing in a concise and transparent manner

All processing must be based on explicit consent

Data must be stored only within the European Union

A Data Protection Officer must be appointed for any organization processing financial data

A financial services company is testing a new mobile banking app. The test team wants to use real customer data to ensure the app works correctly. The company's ethics committee has raised concerns about consent and transparency. Which approach best addresses the ethical concerns?

Use a small sample of real data and ensure it is deleted after testing.

Proceed with real data since it is for testing and not for production use.

Obtain explicit consent from all customers whose data will be used.

Use anonymized data that cannot be traced back to any individual.

A research team at a financial institution wants to use customer transaction data to develop a new fraud detection model. The data includes transaction amounts, merchant categories, and customer zip codes. The team plans to publish the model in a research paper. What is the most ethical approach to using this data?

Use the data as-is since it is for research purposes.

Anonymize the data so that individuals cannot be re-identified before using it for research.

Obtain consent from all customers before using their data.

Use only a small sample of data to minimize the impact.

A bank's test environment is hosted on a cloud platform. The test data includes customer names, account numbers, and transaction history. The bank's security policy requires that test data be encrypted at rest and in transit, and that access be restricted to authorized testers. The cloud provider offers encryption at rest by default, but the bank wants to ensure that the data is also protected during transmission. What should the test team do?

Use TLS for all connections to the test environment and ensure that the cloud storage is encrypted at rest.

Use a VPN to connect to the test environment and assume that all data is protected.

Rely on the cloud provider's default encryption for both at rest and in transit.

Anonymize the data before storing it in the test environment.

Certified Tester Finance Testing

Domain 4Objective 3

Data Privacy and Data Protection in Finance Testing CT-FT Practice Questions (Page 4)

Part of the Data Testing and Data Management domain, which makes up ~14% of our current practice bank. ISTQB does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

Questions 16–20

16foundation · easy
A tester is using real customer data for testing without informing the customers. Which ethical principle is being violated?
Select an answer first
17foundation · easy
A European bank processes personal data of EU citizens. Under the General Data Protection Regulation (GDPR), which of the following is a specific requirement for handling financial data?
Select an answer first
18application · medium
A financial services company is testing a new mobile banking app. The test team wants to use real customer data to ensure the app works correctly. The company's ethics committee has raised concerns about consent and transparency. Which approach best addresses the ethical concerns?
Select an answer first
19application · medium
A research team at a financial institution wants to use customer transaction data to develop a new fraud detection model. The data includes transaction amounts, merchant categories, and customer zip codes. The team plans to publish the model in a research paper. What is the most ethical approach to using this data?
Select an answer first
20expert · hard
A bank's test environment is hosted on a cloud platform. The test data includes customer names, account numbers, and transaction history. The bank's security policy requires that test data be encrypted at rest and in transit, and that access be restricted to authorized testers. The cloud provider offers encryption at rest by default, but the bank wants to ensure that the data is also protected during transmission. What should the test team do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-FT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-FT” is a trademark of its owner, used for identification only.

Data Privacy and Data Protection in Finance Testing CT-FT Practice Questions (Page 4)

Questions 16–20

A tester is using real customer data for testing without informing the customers. Which ethical principle is being violated?

A European bank processes personal data of EU citizens. Under the General Data Protection Regulation (GDPR), which of the following is a specific requirement for handling financial data?

A financial services company is testing a new mobile banking app. The test team wants to use real customer data to ensure the app works correctly. The company's ethics committee has raised concerns about consent and transparency. Which approach best addresses the ethical concerns?

Keep studying — Data Testing and Data Management