100+ Free BCB Analista Tecnologia da Informação Practice Questions

Prepare for the Banco Central do Brasil Analista — Tecnologia da Informação exam with instant access — no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

100+ Questions

100% Free

Loading practice questions...

Same family resources

Explore More Banco Central do Brasil Career Examinations

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

Banco Central do Brasil Analista — Economia e Finanças (Brazil)

Practice Questions100 questions

2026 Statistics

Key Facts: BCB Analista Tecnologia da Informação Exam

120 Items

Official objective test length (50 Basic + 70 Specific)

Cebraspe / Banco Central do Brasil

3h 30m

Official examination time duration

Cebraspe

R$ 150,00

Official application fee for Analista

Banco Central do Brasil Edital

R$ 20.924,80

Initial monthly starting salary for BCB Analista

Ministério da Gestão e da Inovação

Nível Superior

Required education qualification

Banco Central do Brasil

Banco Central Analista TI tests enterprise architecture, AI, big data, and financial cryptography in a 3.5-hour Cebraspe 120-item session. This page provides 100 free English-language practice MCQs adapted from the official syllabus.

Sample BCB Analista Tecnologia da Informação Practice Questions

Try these sample questions to test your BCB Analista Tecnologia da Informação exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1In Clean Architecture and Hexagonal Architecture (Ports and Adapters), what fundamental rule governs source code dependencies across architectural boundaries?

A.Source code dependencies must point strictly inward, toward higher-level policies and core business logic.

B.Outer layers containing UI and database drivers can be directly imported and referenced by core domain entities.

C.Business entities must directly instantiate database adapters to maintain transactional integrity.

D.Data transfer objects (DTOs) in the domain layer must depend on external web framework serialization annotations.

Explanation: The overarching rule in Clean Architecture is The Dependency Rule: source code dependencies must point only inward, toward higher-level policies. Inner layers (Entities, Use Cases) know nothing about outer layers (Presenters, Controllers, Gateways, Databases, Frameworks).

2Which Gang of Four (GoF) creational design pattern provides an interface for creating families of related or dependent objects without specifying their concrete classes?

A.Factory Method

B.Abstract Factory

C.Builder

D.Prototype

Explanation: Abstract Factory provides an interface for creating families of related or dependent objects without specifying their concrete classes. In contrast, Factory Method relies on inheritance to create a single product.

3Which SOLID design principle is violated when a subclass overrides a superclass method by throwing an UnsupportedOperationException or drastically strengthening pre-conditions?

A.Single Responsibility Principle (SRP)

B.Open/Closed Principle (OCP)

C.Liskov Substitution Principle (LSP)

D.Interface Segregation Principle (ISP)

Explanation: The Liskov Substitution Principle (LSP) asserts that subtypes must be substitutable for their base types without altering application correctness. Throwing UnsupportedOperationException or violating base class contracts violates LSP.

4In the official Scrum framework, who is solely accountable for maximizing the value of the product resulting from work of the Scrum Team and managing the Product Backlog?

A.Scrum Master

B.Lead Software Architect

C.Developers

D.Product Owner

Explanation: According to the Scrum Guide, the Product Owner is accountable for maximizing the value of the product resulting from the work of the Scrum Team and is solely accountable for effective Product Backlog management.

5In RESTful API design according to RFC 9110, which HTTP method is defined as neither safe nor idempotent?

A.POST

B.GET

C.PUT

D.DELETE

Explanation: POST is defined as neither safe (it modifies server state) nor idempotent (calling it multiple times produces multiple side effects, such as creating multiple resources). In contrast, GET is safe and idempotent; PUT and DELETE are idempotent but not safe.

6What is the primary role of the Backend-for-Frontend (BFF) architectural pattern in a modern microservices ecosystem?

A.To provide a single, universal monolithic database shared directly among all client applications.

B.To tailor specific API facades and data aggregation layers optimized for distinct client user interfaces (e.g., mobile app vs. desktop web).

C.To replace container orchestrators by managing hardware resources directly from browser clients.

D.To enforce synchronous two-phase commit protocols across all underlying microservices.

Explanation: The Backend-for-Frontend (BFF) pattern defines separate API gateway services tailored specifically to the requirements of different client user interfaces (e.g., iOS mobile app, Android app, desktop web portal), optimizing payload sizes and call orchestration.

7In Domain-Driven Design (DDD), what differentiates a Value Object from an Entity?

A.A Value Object is defined by its operating system process identifier, whereas an Entity is strictly transient in memory.

B.A Value Object has a continuous identity and lifecycle over time, whereas an Entity is immutable and lacks an ID.

C.A Value Object is immutable and defined entirely by the value of its attributes without conceptual identity, whereas an Entity has a distinct, continuous identity.

D.A Value Object must be persisted in a NoSQL database, whereas an Entity must be stored in a relational SQL table.

Explanation: In DDD, Entities possess unique identities that persist through changes in their attributes over time. Value Objects are immutable, lack an independent identity, and are defined purely by the combination of their attribute values (e.g., Money: amount and currency).

8What is the primary goal of Mutation Testing in software quality assurance?

A.To measure how fast unit tests execute when running in parallel on multi-core processors.

B.To automatically generate end-user acceptance documentation directly from source code comments.

C.To automatically fix security vulnerabilities in third-party dependencies during the build step.

D.To evaluate the effectiveness and fault-detecting capability of a test suite by injecting deliberate defects (mutants) into the production code.

Explanation: Mutation testing introduces small syntactic changes (mutations) into the source code to verify if existing unit tests fail ('kill the mutant'). It assesses the quality and robustness of the test suite beyond simple line/branch code coverage.

9In Domain-Driven Design (DDD), what is the architectural responsibility of an Aggregate Root regarding transactional boundaries and business invariants?

A.It acts as the external gateway through which all access to internal aggregate entities must pass, ensuring all internal business invariants are strictly maintained.

B.It enables external clients to directly modify internal child entities using public getters and setters without passing through the root.

C.It serves as a database trigger generator that offloads business invariant validation directly to relational database constraints.

D.It replaces the application service layer by parsing raw HTTP requests and sending JSON responses directly to clients.

Explanation: An Aggregate is a cluster of associated domain objects treated as a unit for data changes. External objects can only hold references to the Aggregate Root. The root maintains and enforces all business invariants within its boundary across state transitions.

10When building an event-driven financial microservice, how does the Transactional Outbox pattern prevent message loss and dual-write inconsistencies between the local database and a message broker like Apache Kafka?

A.By utilizing HTTP 1.1 keep-alive connections to synchronously push messages to Kafka before committing the local database transaction.

B.By writing the domain entity state and an outbox message record within the same local ACID database transaction, followed by a separate asynchronous process publishing the outbox events to Kafka.

C.By disabling database transactions completely and writing exclusively to the Kafka message log as the sole source of truth.

D.By executing a two-phase commit (2PC) protocol directly between the web browser and the Kafka broker partitions.

Explanation: The Transactional Outbox pattern avoids distributed dual-write inconsistencies by persisting domain entity modifications and outbound event records together in the same local database transaction. An asynchronous worker or Change Data Capture (CDC) engine (like Debezium) then reliably tails the outbox table and publishes events to Kafka.

About the BCB Analista Tecnologia da Informação Exam

The Banco Central do Brasil Analista — Área: Tecnologia da Informação examination is the high-level competitive contest administered by Cebraspe to recruit elite technology architects and software engineers for Brazil's central bank. BCB IT Analysts design, build, and safeguard Brazil's critical financial market infrastructure (Sistema de Pagamentos Brasileiro - SPB), the PIX instant payment network, the Drex central bank digital currency (CBDC) platform, Open Finance interoperability APIs, financial surveillance data lakes, and supervisory machine learning pipelines. The official examination comprises 120 objective Certo/Errado items and two discursive questions. Tested domains include enterprise software architecture (microservices, event-driven architectures, DDD, clean architecture), DevOps and CI/CD, data science and artificial intelligence (machine learning algorithms, NLP, deep learning, MLOps), big data pipelines (Apache Kafka, Spark, data warehouses), relational and NoSQL databases, cryptography and financial cybersecurity (PKI, OAuth 2.0, TLS, zero trust), and Linux cloud infrastructure.

Assessment

3 hours 30 minutes: 50 Basic Knowledge items (Portuguese, Logic/Stats, Administrative Law, Micro/Macro fundamentals), 70 Specific Knowledge items (Software Engineering, Data Science & AI, Databases & Big Data, Information Security, Infrastructure), and 2 Discursive Questions

Time Limit

3 hours 30 minutes

Passing Score

Minimum 10.0 points in P1, 21.0 points in P2, and 36.0 points overall on net scoring

Exam Fee

R$ 150,00 (Banco Central do Brasil (Organized by Cebraspe))

BCB Analista Tecnologia da Informação Exam Content Outline

25%

Engenharia de Software e Arquitetura (Software Engineering)

Software architecture principles (microservices, event-driven architecture, CQRS, Event Sourcing, Domain-Driven Design - DDD), GoF and enterprise design patterns, clean code, RESTful API design, OpenAPI/Swagger, automated testing (unit, integration, contract testing), version control with Git, DevOps practices, CI/CD pipelines, container orchestration (Kubernetes, Docker), and agile methodologies.

25%

Ciência de Dados, Inteligência Artificial e Aprendizado de Máquina

Supervised learning (linear/logistic regression, decision trees, random forests, XGBoost, SVM), unsupervised learning (k-means, hierarchical clustering, PCA), deep learning architectures (CNNs, RNNs, Transformers, LLMs), Natural Language Processing (NLP), model evaluation metrics (accuracy, precision, recall, F1-score, ROC-AUC), Python data stack (NumPy, Pandas, Scikit-Learn, PyTorch), and MLOps lifecycle.

20%

Bancos de Dados, Big Data e Engenharia de Dados (Data Systems)

Relational databases (PostgreSQL, Oracle), advanced SQL querying and performance tuning, indexing mechanisms (B-tree, hash, GiST), database transactions, concurrency control, ACID properties, NoSQL systems (MongoDB, Cassandra, Redis, Neo4j), distributed data architectures, data lakes, data warehousing (star and snowflake schemas), and stream processing with Apache Kafka and Apache Spark.

15%

Segurança da Informação e Criptografia (Financial Cybersecurity)

Cryptographic algorithms (AES, RSA, ECC, SHA-256, SHA-3), public key infrastructure (PKI / ICP-Brasil), digital signatures, secure protocols (TLS 1.3, HTTPS, SSH, mTLS), identity and access management (OAuth 2.0, OpenID Connect, SAML, JWT), Zero Trust architecture, web security (OWASP Top 10), penetration testing concepts, and General Data Protection Law (LGPD) technical compliance.

15%

Infraestrutura, Redes, Sistemas Operacionais e Direito

Linux operating system administration (kernel, shell scripting, process management, memory management), computer networking (TCP/IP stack, routing protocols, DNS, load balancing, firewalls), cloud computing architectures (IaaS, PaaS, multi-cloud), Brazilian administrative law (Lei 8.112/1990, bidding law Lei 14.133/2021), and central bank institutional ethics.

How to Pass the BCB Analista Tecnologia da Informação Exam

What You Need to Know

Passing score: Minimum 10.0 points in P1, 21.0 points in P2, and 36.0 points overall on net scoring
Assessment: 3 hours 30 minutes: 50 Basic Knowledge items (Portuguese, Logic/Stats, Administrative Law, Micro/Macro fundamentals), 70 Specific Knowledge items (Software Engineering, Data Science & AI, Databases & Big Data, Information Security, Infrastructure), and 2 Discursive Questions
Time limit: 3 hours 30 minutes
Exam fee: R$ 150,00

Keys to Passing

Work through all 100 available questions
Review every answer and explanation
Track weak areas and revisit them
Use our AI tutor for tough concepts

BCB Analista Tecnologia da Informação Study Tips from Top Performers

1Master microservice patterns: API Gateways, Service Mesh, Circuit Breakers, Sagas for distributed transactions, and event-driven architecture using Kafka.

2Understand modern machine learning evaluation: distinguish precision vs recall tradeoffs in financial fraud detection, calculate F1-score, and interpret ROC-AUC curves.

3Practice advanced SQL and database internals: query optimization, B-Tree index structures, transaction isolation levels (Read Committed, Repeatable Read, Serializable), and MVCC concurrency.

4Study modern cryptographic protocols used in Brazilian fintech: mutual TLS (mTLS) for Open Finance APIs, digital signature verification in PIX messaging, and OAuth 2.0 Authorization Code grant with PKCE.

5Review Linux system administration concepts: process management, virtual memory, namespaces, cgroups, and network socket management.

Frequently Asked Questions

What kind of technological systems do IT Analysts develop at Banco Central do Brasil?

IT Analysts build and maintain the PIX instant payment system infrastructure, the Drex digital currency network, Open Finance interoperability protocols, the Brazilian Payment System (SPB), real-time financial market monitoring systems, and supervisory AI fraud detection models.

What is the format and scoring of the BCB Analista TI exam?

The official exam consists of 120 Certo/Errado items evaluated under Cebraspe net scoring (where incorrect answers subtract points), plus two discursive questions, administered over 3 hours and 30 minutes.

What education degree is required to apply for BCB Analista TI?

Candidates must hold a recognized university bachelor's degree (Nível Superior completo em qualquer área de formação), though the exam requires advanced computer science and software engineering knowledge.

What is the compensation for an Analista at Banco Central do Brasil?

The initial monthly base salary is R$ 20.924,80, with career advancement opportunities up to executive and director levels within the federal financial regulatory system.

How does the OpenExamPrep question bank prepare candidates for this exam?

The bank adapts the official Cebraspe technical blueprint into 100 comprehensive 4-option MCQs in English, covering software architecture, AI/machine learning, big data systems, financial cryptography, and infrastructure with in-depth technical explanations.