The RBI's enhanced cybersecurity framework for digital payments primarily applies to which of the following entities?
A Only individual users and small merchants using digital payment apps.
B Regulated entities (REs) such as banks, non-bank payment system operators, and other financial institutions.
C Foreign tourists using international payment gateways in India.
D Only government-owned digital payment platforms and services.
Answer: B
The RBI's cybersecurity guidelines are primarily directed at regulated entities (REs) under its purview, which include commercial banks, cooperative banks, NBFCs, payment system operators, and other financial institutions that are part of the digital payment ecosystem, to ensure their compliance with security standards.
152.
Which of the following is a key component emphasized by the RBI's cybersecurity framework for regulated entities involved in digital payments?
A Mandatory use of quantum computing for all transaction processing.
B Implementation of robust fraud detection and prevention mechanisms, along with strong authentication.
C Exclusive reliance on single-factor authentication for quick transactions.
D Centralization of all payment data on RBI-managed servers only.
Answer: B
The RBI's cybersecurity framework, such as the Master Direction on Digital Payment Security Controls, strongly emphasizes robust fraud detection and prevention mechanisms, multi-factor authentication, data encryption, and secure system development to protect digital payment transactions.
153.
What is the primary objective of the Reserve Bank of India's enhanced cybersecurity framework for digital payment systems?
A To promote cashless transactions across all sectors.
B To ensure the security, resilience, and robustness of digital payment infrastructure and transactions.
C To reduce transaction fees for users of digital payment services.
D To increase the number of digital payment service providers in the market.
Answer: B
The primary objective of RBI's enhanced cybersecurity framework is to safeguard the digital payment ecosystem by ensuring the security, resilience, and robustness of its infrastructure and transactions, thereby protecting consumers and maintaining public confidence.
154.
Which of the following mobile phone resources are digital lending apps *strictly prohibited* from accessing by RBI regulations, without any provision for specific need-based consent?
A Call logs and contacts.
B Camera and microphone.
C Location services.
D SMS messages.
Answer: A
RBI guidelines explicitly state that Digital Lending Apps (DLAs) shall not access mobile phone resources such as files and media, contact list, call logs, and telephony functions. Access to camera, microphone, location, or any other facility can be taken one-time with explicit consent for a specific use case, but call logs and contacts are strictly prohibited without such provision.
155.
Where are digital lenders mandated by the RBI to store all data collected from borrowers?
A Servers located within India.
B Servers in any country with robust data protection laws.
C Globally distributed cloud storage providers.
D Primarily on the borrower's personal device for enhanced security.
Answer: A
The RBI's digital lending guidelines mandate that all data collected by digital lending apps must be stored on servers located within India, ensuring data localization and compliance with domestic regulations.
156.
According to RBI's norms for digital lenders, what is a fundamental requirement for collecting a borrower's personal data?
A Explicit consent from the borrower for each specific data point.
B Implied consent based on the loan application submission.
C Automatic collection of all available data from the borrower's device.
D Third-party verification of data without direct borrower involvement.
Answer: A
The RBI mandates that digital lending apps must obtain explicit consent from borrowers for collecting any personal data, ensuring that data collection is need-based and transparent.
157.
What is the primary purpose of the 'cooling-off' or 'look-up' period mandated by the RBI for digital loans?
A To allow borrowers to exit the loan by repaying the principal without penalty within a specified period.
B To enable the lender to conduct a final verification of the borrower's credit score.
C To expedite the loan application processing time for urgent needs.
D To offer additional financial products or services to the borrower.
Answer: A
The 'cooling-off' or 'look-up' period allows borrowers to have a window (e.g., 1-3 days) to reconsider the loan and exit it by repaying the principal amount without any penalty, thereby protecting consumers from impulsive borrowing.
158.
As per RBI's enhanced digital lending norms, how should the loan disbursal and repayment ideally occur to ensure transparency and prevent unauthorized deductions?
A Directly between the Regulated Entity (RE) and the borrower's bank account, without any pass-through account.
B Via the Lending Service Provider's (LSP) bank account.
C Through a third-party payment gateway that may hold funds temporarily.
D Primarily through cash transactions for smaller loan amounts.
Answer: A
The RBI mandates that loan disbursals and repayments must be executed directly between the Regulated Entity (RE) and the borrower's bank account, without any involvement of a pass-through account of the Lending Service Provider (LSP) or any third party, to enhance transparency and accountability.
159.
Which mandatory document was introduced by the RBI for digital lenders to enhance transparency by providing a summary of loan terms and conditions to borrowers?
A Key Fact Statement (KFS)
B Know Your Customer (KYC) document
C Credit Information Report (CIR)
D Unified Payments Interface (UPI) mandate
Answer: A
The RBI mandated the introduction of a 'Key Fact Statement' (KFS) for all digital loans to ensure greater transparency for borrowers regarding the all-inclusive cost of the loan, tenure, and other terms.
160.
What is one of the primary long-term objectives of the RBI in introducing the Digital Rupee (CBDC)?
A To reduce the cost of currency management and enhance efficiency in the payment system.
B To replace all existing physical currency notes immediately.
C To facilitate anonymous cross-border transactions without regulatory oversight.
D To allow commercial banks to issue their own digital currencies.
Answer: A
One of the key objectives of introducing CBDC is to reduce the operational costs associated with managing physical currency, enhance the efficiency and security of the payment system, and provide an additional payment option. It is not intended to immediately replace all physical currency or facilitate unregulated transactions. Commercial banks will distribute CBDC, but not issue their own.
