Attempt CAIIB IT and Digital Banking PYP Quiz and Download PDF

1. What is the primary requirement for a merchant to accept payments via UPI?

2. A customer wants to pay at a retail shop using UPI. Which of the following scenarios correctly describes the transaction?

3. What is the full form of NCMC in the context of digital payments in India?

4. Which of the following SQL commands is used to retrieve data from a database table?

5. A bank’s IT team uses Oracle as the backend database. Which of the following is NOT a feature of Oracle RDBMS?

6. Which generation of programming languages uses machine language (binary 0s and 1s) directly understood by the computer hardware?

7. Assembly language, which uses mnemonics like ADD, MOV, and SUB, belongs to which generation of programming languages?

8. What is the bit size of an IPv4 address?

9. IPv6 was introduced to overcome the address exhaustion problem of IPv4. How many bits are used in an IPv6 address?

10. What is the header size of an IPv4 packet?

11. Which class of IP address is reserved for multicast groups?

12. A bank wants to assign IP addresses to a very large network with thousands of hosts. Which IP address class is most appropriate?

13. Which class of IP addresses is reserved for research and development (R&D) purposes and is not used on public networks?

14. Which of the following statements correctly differentiates IPv4 and IPv6?

15. First generation computers used which technology as their primary electronic component?

16. Quantum computing is associated with which generation of computers?

17. A bank maintains its customer data on a central server accessible by all branches. This is an example of which type of database?

18. Which of the following best describes the role of Metadata in a data warehouse?

19. A customer initiates an ATM withdrawal. The machine debits the account but fails to dispense cash due to a technical error. Which ACID property ensures this transaction is rolled back?

20. What does SCORM stand for in the context of e-learning standards?

21. A bank is deploying online training modules that employees can access at any time from any device. The content adheres to SCORM standards. What is the key advantage of SCORM compliance?

22. In IT Service Management, what does SLA stand for?

23. A bank’s disaster recovery site is fully operational with up-to-date data and can take over operations immediately in the event of a failure. This type of DR site is called:

24. A cold site in disaster recovery planning refers to:

25. Under the Information Technology Act, which of the following activities is considered a cybercrime?

26. What does CBS stand for in banking technology?

27. Two banks are planning to merge. Which of the following is the most critical IT challenge they will face?

28. In a bus topology network, all devices are connected to a single central cable called the backbone. What is a major disadvantage of this topology?

29. Which network topology provides the highest level of redundancy by connecting every device to every other device?

30. What is the correct sequence of phases in the Software Development Life Cycle (SDLC)?

31. A prepaid card differs from a debit card primarily because:

32. A smart card contains an embedded microprocessor chip. What is the primary advantage of this over a magnetic stripe card?

33. Electronic Clearing System (ECS) is primarily used for which type of transactions?

34. A bank’s IT security team configures a device to monitor and control incoming and outgoing network traffic based on predefined security rules. This device is called a:

35. A bank customer receives an email appearing to be from the bank, asking them to click a link and enter their account credentials on a fake website. This type of cyberattack is called:

36. In Public Key Infrastructure (PKI), what is the role of a Certifying Authority (CA)?

37. Which of the following correctly explains a digital signature?

38. Which of the following is NOT classified as a web server software?

39. A bank branch has all its computers, printers, and servers connected within the same building using Ethernet cables. This type of network is called:

40. A bank intends to procure a new Core Banking Solution. It invites vendors to submit detailed proposals including technical specifications, pricing, and implementation timelines. This process is called:

41. In an information systems audit, what is an ‘audit trail’?

42. A bank’s Information System auditor discovers that a teller has been modifying transaction records after posting. Which control would have been most effective in preventing this?

43. A bank’s Business Continuity Plan (BCP) is different from its Disaster Recovery Plan (DRP) because:

44. In a distributed banking database, ‘data synchronization’ refers to:

45. Electronic commerce (e-commerce) in banking involves:

46. Which of the following is an example of ‘unguided media’ used in network communication?

47. A bank’s ATM network processes thousands of individual withdrawal and deposit transactions throughout the day in real-time. This is an example of:

48. Case Study: A bank’s customer calls to report that after clicking on a link in an email claiming to be from the bank, their account was accessed by an unknown party. The email asked for login credentials and OTP. The security team identifies this as a social engineering attack. What type of attack occurred, and what preventive measure should be recommended?

49. Case Study: A major flood severely damages a bank’s primary data center. The bank activates its disaster recovery procedures. The recovery team confirms that a secondary site with pre-configured systems and data replicated up to 4 hours prior is available. Which type of DR site is this, and what is the approximate Recovery Time Objective (RTO)?

50. Case Study: A bank has entered into an agreement with a CBS vendor. The agreement specifies that the system must have 99.9% uptime, critical incidents must be resolved within 2 hours, and quarterly performance reports must be submitted. Three months into the contract, the system experiences downtime of 12 hours in a month, breaching the agreed terms. What document governs this situation, and what is the appropriate next step?