Which regulatory framework is primarily concerned with the accuracy and reliability of financial reporting for publicly traded companies?

General Data Protection Regulation (GDPR)

Payment Card Industry Data Security Standard (PCI DSS)

Which of the following is an example of applying a risk-based testing approach in a finance system?

Testing all features equally to ensure complete coverage

Testing only new features and skipping regression testing

Deferring all testing until after release to save time

Focusing regression testing on modules that handle high-value transactions

What does compliance validation in finance testing ensure?

That the application has a modern user interface

That the application runs on the latest hardware

That the application is easy to use

That the application meets regulatory standards and reporting obligations

A bank is preparing a quarterly release that touches several areas: a new high-value wire transfer module, a minor cosmetic change to the customer portal, and a backend batch job that calculates daily interest for all accounts. The compliance team has limited testing time before the regulatory reporting deadline. Which testing approach best aligns with risk-based testing principles?

Prioritize the wire transfer module and the interest calculation batch, and perform only a smoke test on the portal change.

Test only the wire transfer module because it involves the largest transaction amounts.

Defer all testing until after the release and rely on production monitoring to catch issues.

Test all three areas equally to ensure balanced coverage across the release.

A multinational bank operates in the EU and the US. It is updating its customer onboarding system to comply with GDPR and SOX requirements. What should the test team verify to ensure compliance?

That all customer data is stored only in the EU to comply with GDPR.

That the system has a backup and recovery plan to comply with both regulations.

That customer data is processed and stored in a way that meets GDPR data protection principles and SOX financial reporting controls.

That the system is accessible only from the US to comply with SOX.

Certified Tester Finance Testing

Domain 2Objective 4

Distinctive Characteristics of Regulated Finance Testing CT-FT Practice Questions (Page 4)

Part of the Compliance Testing domain, which makes up ~23% of our current practice bank. ISTQB does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

Questions 16–20

16foundation · easy
Which regulatory framework is primarily concerned with the accuracy and reliability of financial reporting for publicly traded companies?
Select an answer first
17foundation · easy
Which of the following is an example of applying a risk-based testing approach in a finance system?
Select an answer first
18foundation · easy
What does compliance validation in finance testing ensure?
Select an answer first
19application · medium
A bank is preparing a quarterly release that touches several areas: a new high-value wire transfer module, a minor cosmetic change to the customer portal, and a backend batch job that calculates daily interest for all accounts. The compliance team has limited testing time before the regulatory reporting deadline. Which testing approach best aligns with risk-based testing principles?
Select an answer first
20application · medium
A multinational bank operates in the EU and the US. It is updating its customer onboarding system to comply with GDPR and SOX requirements. What should the test team verify to ensure compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-FT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-FT” is a trademark of its owner, used for identification only.