A retail bank is implementing a new credit-risk scoring system. The compliance team must ensure the system aligns with Basel III requirements. Which testing activity is most directly relevant to this regulation?

Test that transaction data is encrypted during transmission.

Confirm that customer consent is obtained before processing personal data.

Verify that the system correctly calculates risk-weighted assets and capital adequacy ratios.

Validate that financial reports are signed by the CEO and CFO.

What is a key difference between the testing priorities of GDPR and PCI DSS?

GDPR prioritizes internal controls, while PCI DSS prioritizes consent management

GDPR prioritizes capital adequacy, while PCI DSS prioritizes data privacy

GDPR prioritizes data privacy and consent, while PCI DSS prioritizes the security of cardholder data

Both have the same testing priorities

A bank is implementing a new system for trade execution and reporting. The compliance team must design tests to satisfy MiFID II. Which testing focus is most directly required by MiFID II?

Test that orders are executed at the best available price and that transaction reports are accurate.

Test that customer consent is obtained before processing personal data.

Test that financial reports are signed by the CEO and CFO.

Test that the system calculates capital adequacy ratios.

A bank is testing a new system that handles both customer personal data and transaction data. The compliance team must design tests to satisfy both GDPR and PCI DSS. Which testing approach best balances the requirements of both regulations?

Focus only on testing encryption for cardholder data, as PCI DSS is more stringent.

Test data encryption for both personal data and cardholder data, and test data subject access rights for personal data.

Test only data subject access rights, as GDPR is more recent.

Test that the system separates personal data and cardholder data into different databases.

Certified Tester Finance Testing

Domain 2Objective 2

Key Financial Regulations and Their Testing Relevance CT-FT Practice Questions (Page 4)

Part of the Compliance Testing domain, which makes up ~23% of our current practice bank. ISTQB does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

Questions 16–20

16application · medium
A retail bank is implementing a new credit-risk scoring system. The compliance team must ensure the system aligns with Basel III requirements. Which testing activity is most directly relevant to this regulation?
Select an answer first
17foundation · easy
What is a key difference between the testing priorities of GDPR and PCI DSS?
Select an answer first
18foundation · easy
Which regulation has a direct impact on the testing of internal controls over financial reporting (ICFR)?
Select an answer first
19expert · hard
A bank is implementing a new system for trade execution and reporting. The compliance team must design tests to satisfy MiFID II. Which testing focus is most directly required by MiFID II?
Select an answer first
20expert · hard
A bank is testing a new system that handles both customer personal data and transaction data. The compliance team must design tests to satisfy both GDPR and PCI DSS. Which testing approach best balances the requirements of both regulations?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-FT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-FT” is a trademark of its owner, used for identification only.