Question 1

Which of the following is not considered NPPI?

Accepted Answer

A)  Social Security number 
B)  Customer account number 
C)  Credit card account number 
D)  Credit history 
A)  Social Security number 
B)  Customer account number 
C)  Credit card account number 
D)  Credit history B

Question 2

Which of the following is an evidence-based examination that compares current practices against internal or external criteria?

Accepted Answer

A)  Appraisal 
B)  Audit 
C)  Assurance 
D)  Assessment 
A)  Appraisal 
B)  Audit 
C)  Assurance 
D)  Assessment B

Question 3

Which of the following statements best describes reputational risk?

Accepted Answer

A)  The risk arising from adverse business decisions 
B)  The risk arising from negative public opinion 
C)  The risk arising from problems with service or product delivery 
D)  The risk of loss resulting from inadequate or failed internal processes, people, or systems 
A)  The risk arising from adverse business decisions 
B)  The risk arising from negative public opinion 
C)  The risk arising from problems with service or product delivery 
D)  The risk of loss resulting from inadequate or failed internal processes, people, or systems B

Question 4

Which of the following refers to the risk arising from problems with service or product delivery?

Accepted Answer

A)  Operational risk 
B)  Transactional risk 
C)  Strategic risk 
D)  Compliance risk 
A)  Operational risk 
B)  Transactional risk 
C)  Strategic risk 
D)  Compliance risk

Question 5

Which key part of the NY DFS Cybersecurity Regulation covers training and monitoring?

Accepted Answer

A)  Section 500.06 
B)  Section 500.12 
C)  Section 500.14 
D)  Section 500.17 
A)  Section 500.06 
B)  Section 500.12 
C)  Section 500.14 
D)  Section 500.17

Question 6

Which of the following is used by regulatory agencies to uniformly assess financial institutions based on a rating scale of 1 to 5, with 1 representing the best rating and least degree of concern, and 5 representing the worst rating and highest degree of concern?

Accepted Answer

A)  NY DFS 
B)  URSIT 
C)  BSCA 
D)  GLBA 
A)  NY DFS 
B)  URSIT 
C)  BSCA 
D)  GLBA

Question 7

What is the FTC implementation of the GBLA?

Accepted Answer

A)  Interagency guidelines 
B)  Guidelines for Safeguarding Member Information 
C)  Safeguards Act 
D)  Banks Holding Company Act 
A)  Interagency guidelines 
B)  Guidelines for Safeguarding Member Information 
C)  Safeguards Act 
D)  Banks Holding Company Act

Question 8

According to the Interagency Guidelines, who must approve the bank's written information security program?

Accepted Answer

A)  Chief Executive Officer 
B)  Chief Security Officer 
C)  Board of Directors 
D)  Information owner 
A)  Chief Executive Officer 
B)  Chief Security Officer 
C)  Board of Directors 
D)  Information owner

Question 9

What is the term used to describe names, addresses, and phone numbers when linked to bank and credit card account information?

Accepted Answer

A)  Private information 
B)  Nonpublic personal information 
C)  Nonpublic private information 
D)  Personal information 
A)  Private information 
B)  Nonpublic personal information 
C)  Nonpublic private information 
D)  Personal information

Question 10

Which of the following, also known as social engineering, is a methodology by which an individual impersonates someone else to extract sensitive information from them?

Accepted Answer

A)  Pretexting 
B)  System infiltration 
C)  Corporate identity theft 
D)  Denial of service 
A)  Pretexting 
B)  System infiltration 
C)  Corporate identity theft 
D)  Denial of service

Question 11

Which of the following best describes an assessment?

Accepted Answer

A)  Evidenced-based examination that compares current practices against a specific internal or external criteria 
B)  A focused privileged inspection to determine condition, locate weakness or vulnerabilities, and identity corrective actions 
C)  Testing controls by performing vulnerability assessment tests that simulate real attacks 
D)  Configuring the System and Security logs on each system to record and audit activities 
A)  Evidenced-based examination that compares current practices against a specific internal or external criteria 
B)  A focused privileged inspection to determine condition, locate weakness or vulnerabilities, and identity corrective actions 
C)  Testing controls by performing vulnerability assessment tests that simulate real attacks 
D)  Configuring the System and Security logs on each system to record and audit activities

Question 12

Which of the following is an interagency body empowered to prescribe uniform principles, standards, and report forms for the federal examination of financial institutions?

Accepted Answer

A)  NCUA 
B)  FRB 
C)  FDIC 
D)  FFIEC 
A)  NCUA 
B)  FRB 
C)  FDIC 
D)  FFIEC

Question 13

The Federal Reserve Board is responsible for regulating which of the following?

Accepted Answer

A)  Bank holding companies and member banks of the Federal Reserve System 
B)  National banks, federal saving associations, and federal branches of foreign banks 
C)  Federally charted credit unions 
D)  State-chartered banks 
A)  Bank holding companies and member banks of the Federal Reserve System 
B)  National banks, federal saving associations, and federal branches of foreign banks 
C)  Federally charted credit unions 
D)  State-chartered banks

Question 14

Which of the following gives federal financial regulators statutory authority to regulate and examine the services a technology service provider (TSP) performs for FDIC-insured financial institutions?

Accepted Answer

A)  FDIC 
B)  FFIEC 
C)  NIST 
D)  BSCA 
A)  FDIC 
B)  FFIEC 
C)  NIST 
D)  BSCA

Question 15

Which of the following agencies regulates state-chartered banks?

Accepted Answer

A)  Federal Trade Commission (FT
C)  
B)  Commodity Futures Trading Commission (CFT
C)  
C)  National Credit Union Administration (NCU
A)  
D)  Federal Deposit Insurance Corporation (FDI
C)  
A)  Federal Trade Commission (FT
C)  
B)  Commodity Futures Trading Commission (CFT
C)  
C)  National Credit Union Administration (NCU
A)  
D)  Federal Deposit Insurance Corporation (FDI
C)

Question 16

Which of the following agencies regulates financial institutions not covered by other agencies?

Accepted Answer

A)  Federal Trade Commission (FT
C)  
B)  Commodity Futures Trading Commission (CFT
C)  
C)  National Credit Union Administration (NCU
A)  
D)  Federal Deposit Insurance Corporation (FDI
C)  
A)  Federal Trade Commission (FT
C)  
B)  Commodity Futures Trading Commission (CFT
C)  
C)  National Credit Union Administration (NCU
A)  
D)  Federal Deposit Insurance Corporation (FDI
C)

Question 17

Which of the following testing methodologies measures how well controls and safeguards work by subjecting the system to an attack?

Accepted Answer

A)  Assessment 
B)  Audit 
C)  Assurance 
D)  All of the above 
A)  Assessment 
B)  Audit 
C)  Assurance 
D)  All of the above

Question 18

Which of the following statements best describes operational risk?

Accepted Answer

A)  The risk arising from adverse business decisions 
B)  The risk arising from negative public opinion 
C)  The risk arising from problems with service or product delivery 
D)  The risk of loss resulting from inadequate or failed internal processes, people, or systems 
A)  The risk arising from adverse business decisions 
B)  The risk arising from negative public opinion 
C)  The risk arising from problems with service or product delivery 
D)  The risk of loss resulting from inadequate or failed internal processes, people, or systems

Question 19

Which of the following threats must financial institutions address?

Accepted Answer

A)  Denial of service 
B)  Unauthorized access 
C)  Malware 
D)  All of the above 
A)  Denial of service 
B)  Unauthorized access 
C)  Malware 
D)  All of the above

Question 20

Which of the following statements best describes strategic risk?

Accepted Answer

A)  The risk arising from adverse business decisions 
B)  The risk arising from negative public opinion 
C)  The risk arising from problems with service or product delivery 
D)  The risk of loss resulting from inadequate or failed internal processes, people, or systems 
A)  The risk arising from adverse business decisions 
B)  The risk arising from negative public opinion 
C)  The risk arising from problems with service or product delivery 
D)  The risk of loss resulting from inadequate or failed internal processes, people, or systems

Which of the following is not considered NPPI?

Which of the following is an evidence-based examination that compares current practices against internal or external criteria?

Which of the following statements best describes reputational risk?

Which of the following refers to the risk arising from problems with service or product delivery?

Which key part of the NY DFS Cybersecurity Regulation covers training and monitoring?

Which of the following is used by regulatory agencies to uniformly assess financial institutions based on a rating scale of 1 to 5, with 1 representing the best rating and least degree of concern, and 5 representing the worst rating and highest degree of concern?

What is the FTC implementation of the GBLA?

According to the Interagency Guidelines, who must approve the bank's written information security program?

What is the term used to describe names, addresses, and phone numbers when linked to bank and credit card account information?

Which of the following, also known as social engineering, is a methodology by which an individual impersonates someone else to extract sensitive information from them?

Which of the following best describes an assessment?

Which of the following is an interagency body empowered to prescribe uniform principles, standards, and report forms for the federal examination of financial institutions?

The Federal Reserve Board is responsible for regulating which of the following?

Which of the following gives federal financial regulators statutory authority to regulate and examine the services a technology service provider (TSP) performs for FDIC-insured financial institutions?

Which of the following agencies regulates state-chartered banks?

Which of the following agencies regulates financial institutions not covered by other agencies?

Which of the following testing methodologies measures how well controls and safeguards work by subjecting the system to an attack?

Which of the following statements best describes operational risk?

Which of the following threats must financial institutions address?

Which of the following statements best describes strategic risk?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters

Exam 13: Regulatory Compliance for Financial Institutions

Which of the following is not considered NPPI?

Which of the following is an evidence-based examination that compares current practices against internal or external criteria?

Which of the following statements best describes reputational risk?

Which of the following refers to the risk arising from problems with service or product delivery?

Which key part of the NY DFS Cybersecurity Regulation covers training and monitoring?

Which of the following is used by regulatory agencies to uniformly assess financial institutions based on a rating scale of 1 to 5, with 1 representing the best rating and least degree of concern, and 5 representing the worst rating and highest degree of concern?

What is the FTC implementation of the GBLA?

According to the Interagency Guidelines, who must approve the bank's written information security program?

What is the term used to describe names, addresses, and phone numbers when linked to bank and credit card account information?

Which of the following, also known as social engineering, is a methodology by which an individual impersonates someone else to extract sensitive information from them?

Which of the following best describes an assessment?

Which of the following is an interagency body empowered to prescribe uniform principles, standards, and report forms for the federal examination of financial institutions?

The Federal Reserve Board is responsible for regulating which of the following?

Which of the following gives federal financial regulators statutory authority to regulate and examine the services a technology service provider (TSP) performs for FDIC-insured financial institutions?

Which of the following agencies regulates state-chartered banks?

Which of the following agencies regulates financial institutions not covered by other agencies?

Which of the following testing methodologies measures how well controls and safeguards work by subjecting the system to an attack?

Which of the following statements best describes operational risk?

Which of the following threats must financial institutions address?

Which of the following statements best describes strategic risk?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters