Skip to content
Past paper

Combined Bank Assistant Programmer Exam 31 October 2026 — Question Solution | সমন্বিত ব্যাংক (ব্যাংকার্স সিলেকশন কমিটি) সহকারী প্রোগ্রামার নিয়োগ পরীক্ষা ২০২৬ — প্রশ্ন সমাধান

Page updated

About this exam paper · প্রশ্নপত্র পরিচিতি

The Combined Bank Assistant Programmer exam was held on 31 October 2026. The paper had 21 written questions. The subjects asked most were Cloud & Emerging Tech (4), Mathematics (4) and Database (2). This page lists every question, with 2 answered and explained; the rest of the answers open with a free ARBS Academy account, where the paper can also be practised as a timed test.

সমন্বিত ব্যাংক (ব্যাংকার্স সিলেকশন কমিটি) সহকারী প্রোগ্রামার নিয়োগ পরীক্ষার (২০২৬) এই প্রশ্নপত্রে ২১টি প্রশ্ন ছিল, বেশিরভাগ ক্লাউড ও উদীয়মান প্রযুক্তি ও গণিত থেকে। এখানে ২টি প্রশ্নের ব্যাখ্যাসহ উত্তর দেওয়া আছে; বাকিগুলো ফ্রি অ্যাকাউন্টে খোলে।

Organisation
Combined Bank
Post
Assistant Programmer
Exam date
31 October 2026
Questions
21 (0 MCQ, 21 written)
Exam guide
Bank IT jobs · ব্যাংকের আইটি চাকরি

Go to a question

answer shown · the others open with a free account

    Written question 1Locked: the answer opens with a free accountNetworking

    Explain the OSI reference model and the functions of its seven layers.

    Written question 2Locked: the answer opens with a free accountOperating Systems

    What is deadlock in an operating system? Explain its necessary conditions and methods of handling deadlocks.

    Sign up free to see the model answers to written questions 1–2 · উত্তর দেখতে বিনামূল্যে সাইন আপ করুন

    Written question 3Database

    Explain the ACID properties of database transactions.

    Model answer

    Transaction: a logical unit of work made of one or more database operations, e.g. a fund transfer = debit one account + credit another. ACID is the set of four properties that a DBMS guarantees for every transaction, so that data stay correct despite failures, crashes and many concurrent users.

    Property Meaning How the DBMS provides it
    Atomicity All operations of the transaction take effect, or none do ("all or nothing"). Undo (rollback) log: on an error or ROLLBACK every change is undone.
    Consistency A transaction takes the database from one valid state to another; no integrity rule (PK, FK, CHECK, business rule) is left broken. Constraints and triggers checked by the DBMS, plus correct transaction logic.
    Isolation Concurrent transactions do not see each other's unfinished work; the result is as if they ran one after another (fully so at SERIALIZABLE). Concurrency control: locking (two-phase locking) or multiversioning (MVCC).
    Durability Once COMMIT succeeds, the change survives a crash or power failure. Write-ahead (redo) log forced to disk at commit; recovery replays it.

    Worked example: transfer Tk 7,000 from SB-101 to SB-202

    CREATE TABLE account (
      acc_no   CHAR(6)       NOT NULL PRIMARY KEY,
      holder   VARCHAR(40)   NOT NULL,
      balance  DECIMAL(12,2) NOT NULL CHECK (balance >= 0)
    );
    INSERT INTO account VALUES ('SB-101', 'Nadia', 5000), ('SB-202', 'Tanvir', 2000);
    
    BEGIN TRANSACTION;
    UPDATE account SET balance = balance + 7000 WHERE acc_no = 'SB-202';  -- succeeds
    UPDATE account SET balance = balance - 7000 WHERE acc_no = 'SB-101';  -- fails: CHECK (balance >= 0)
    ROLLBACK;                                                            -- program reacts to the error
    
    Moment SB-101 SB-202 Total
    Before 5000 2000 7000
    Inside, after the credit 5000 9000 14000 (not visible to other sessions)
    After ROLLBACK 5000 2000 7000
    After a valid transfer of 1500 and COMMIT 3500 3500 7000

    Each property with its example

    1. Atomicity: the credit of 7000 to SB-202 succeeded but the debit failed, so the whole transaction is rolled back and the credit is undone; money is not created. Similarly, if the server crashes after an ATM debit but before the credit, the half-done transfer is undone on restart.
    2. Consistency: the rule "balance ≥ 0" (CHECK) blocks the overdraft, and the bank's invariant "total money = 7000" holds before and after every transaction.
    3. Isolation: while the transfer runs, another session (e.g. a balance enquiry) must not read the temporary 9000; reading uncommitted data is a dirty read. Likewise, two tellers withdrawing from the same account at once must not both read 5000 and overwrite each other's update (lost update).
    4. Durability: after the 1500 transfer is committed and the customer gets the SMS, the balances 3500/3500 remain even if the power fails a second later, because the commit record is already in the log on disk.

    Note: in SQLite, MySQL and SQL Server a failed statement undoes only itself, so the program must issue ROLLBACK to undo the earlier credit; PostgreSQL marks the whole transaction as failed, and it too is ended with ROLLBACK.

    Isolation levels (SQL standard)

    Level Dirty read Non-repeatable read Phantom
    READ UNCOMMITTED possible possible possible
    READ COMMITTED prevented possible possible
    REPEATABLE READ prevented prevented possible
    SERIALIZABLE prevented prevented prevented

    Transaction states

    stateDiagram-v2
        [*] --> Active
        Active --> PartiallyCommitted: last statement done
        PartiallyCommitted --> Committed: log written to disk
        Active --> Failed: error
        PartiallyCommitted --> Failed: write fails
        Failed --> Aborted: rollback
        Committed --> [*]
        Aborted --> [*]
    

    Exam tip: give each property with its mechanism (undo log, constraints, locking/MVCC, redo log) and a bank-transfer example; ACID "consistency" means integrity rules are kept, not the replica consistency of the CAP theorem.

    Written question 4Locked: the answer opens with a free accountCloud & Emerging Tech

    What is Natural Language Processing (NLP)? Discuss its major techniques and applications.

    Written question 5Locked: the answer opens with a free accountCloud & Emerging Tech

    What is Generative AI? Explain how Large Language Models (LLMs) work and discuss their applications and challenges.

    Written question 6Locked: the answer opens with a free accountGeneral ICT

    What are a compiler, an interpreter, and an assembler? Explain their functions and differences.

    Written question 7Locked: the answer opens with a free accountNetworking

    What is the difference between HTTP and HTTPS? Explain the HTTP request-response cycle and common HTTP methods.

    Written question 8Locked: the answer opens with a free accountCyber Security

    A login page constructs SQL queries by directly concatenating user-supplied usernames and passwords into SQL statements. Identify and explain the potential security vulnerability, demonstrate with an example how it can be exploited to bypass authentication, and recommend measures to prevent the vulnerability and store passwords securely.

    Written question 9Locked: the answer opens with a free accountSoftware Engineering

    A ride-sharing application supports cars, motorbikes, and CNG auto-rickshaws, each with a different fare calculation method. Design the system using appropriate object-oriented programming (OOP) principles and draw a UML class diagram illustrating your design.

    Written question 10Locked: the answer opens with a free accountCloud & Emerging Tech

    What is an agentic AI system, and how does it interact with external tools and data sources? Explain the roles of Model Context Protocol (MCP) and an agent harness in an agentic AI system. Identify two common risks associated with agentic AI systems and explain appropriate mitigation strategies for each.

    Sign up free to see the model answers to written questions 4–10 · উত্তর দেখতে বিনামূল্যে সাইন আপ করুন

    Written question 11Database

    Differentiate between full, incremental, and differential backups, and recommend a backup strategy for a bank that needs to minimize data loss and recovery time.

    Model answer

    A backup is a copy of data kept for restoring after deletion, corruption, hardware failure, ransomware or disaster. The three types differ in what they copy:

    • Full backup: copies all selected data every time. It is the baseline that the other two depend on.
    • Incremental backup: copies only the data changed since the last backup of any type (full or incremental).
    • Differential backup: copies all data changed since the last full backup, so each differential grows until the next full backup.
    graph LR
        F["Friday: FULL"] --> I1["Sun INC: Sun changes"]
        I1 --> I2["Mon INC: Mon changes"]
        I2 --> I3["Tue INC: Tue changes"]
        F --> D1["Sun DIFF: Sun changes"]
        F --> D2["Mon DIFF: Sun + Mon changes"]
        F --> D3["Tue DIFF: Sun + Mon + Tue changes"]
    

    Differences

    Basis Full Incremental Differential
    Copies Everything Changes since the last backup of any type Changes since the last full
    Size of each backup Largest Smallest, roughly constant Grows daily until the next full
    Backup time / bandwidth Longest Shortest Medium, rising through the week
    Total storage Highest Lowest Medium (changes are copied again and again)
    Sets needed to restore 1 Full + every incremental since it, in order Full + the latest differential (2)
    Restore time Fastest Slowest Fast
    Restore risk Lowest Highest: one missing or corrupt set breaks the chain Low

    Worked example

    A 100 GB core banking database; about 5 GB of it changes each working day (Sunday–Thursday); a full backup is taken on Friday night. The server fails on Wednesday at 14:00, after Tuesday night's backup.

    Night Full every night Incremental Differential
    Sun 100 GB 5 GB 5 GB
    Mon 100 GB 5 GB 10 GB
    Tue 100 GB 5 GB 15 GB
    Wed 100 GB 5 GB 20 GB
    Thu 100 GB 5 GB 25 GB
    Total 500 GB 25 GB 75 GB

    (Friday's 100 GB baseline full is common to all schemes and not counted.)

    Restore on Wednesday: full-only = Tuesday's full (1 set); incremental = Friday full + Sun + Mon + Tue (4 sets); differential = Friday full + Tuesday differential (2 sets). Yet any nightly scheme loses every transaction since Tuesday night (about 14 hours): the backup type mainly affects recovery time, so data loss must be cut by other layers.

    The two targets: RPO and RTO

    • RPO (Recovery Point Objective): the maximum data loss allowed, measured in time (how far back the restored data may be). Minimising data loss = a very small RPO.
    • RTO (Recovery Time Objective): the maximum downtime allowed before service is restored. Minimising recovery time = a small RTO.

    Illustrative bank targets: core banking, ATM, card and mobile banking RPO ≈ 0 and RTO in minutes; HR and reporting, hours.

    Recommended strategy for the bank

    No single backup type meets both targets, so the bank needs layers:

    Layer Frequency Minimises How
    1. Synchronous replication to a standby database in a nearby data centre Continuous Data loss (RPO ≈ 0) and time (RTO in minutes) A commit completes only when the standby has it; on failure the standby is promoted
    2. Asynchronous replication to a far-away DR site (another seismic zone/city) Continuous RPO of seconds; RTO under an hour Survives a regional disaster
    3. Transaction-log (journal) backups Every 5–15 minutes RPO of minutes for point-in-time recovery Point-in-time recovery
    4. Weekly full + nightly differential backups (after the end-of-day batch) Weekly / nightly RTO: a restore needs only 2 sets + logs Short, reliable restore chain
    5. Offline or immutable copy + storage snapshots Daily/weekly Recovery from ransomware or malicious deletion Attackers cannot encrypt or delete it

    Recovery path for each failure (how the targets are met):

    Failure Recovery Data lost (RPO) Downtime (RTO)
    Database server or storage fails Promote the synchronous standby None Minutes
    Whole primary data centre lost Fail over to the DR site Seconds (async lag) Under an hour
    Logical corruption, bad batch run, accidental DELETE (replicas copy it instantly) Restore weekly full + latest differential, then replay logs to just before the error Minutes A few hours
    Ransomware encrypts systems and online backups Restore from the immutable/offline copy, then logs Since the last clean copy/logs Hours

    Justification

    1. Minimum data loss: replication and frequent log backups capture every committed transaction; nightly backups alone would lose up to a day.
    2. Minimum recovery time: failover to a hot standby takes minutes; for restores, differential beats incremental because only two sets are read before logs are replayed, and a short chain has fewer points of failure. Differentials also need far less storage than nightly fulls.
    3. Replication is not a backup: it copies corruption, deletions and ransomware instantly, so point-in-time backups and an immutable copy are still essential.
    4. Protection: follow the 3-2-1-1-0 rule (3 copies, 2 media, 1 off-site, 1 offline/immutable, 0 restore errors); encrypt backups, restrict and log access, and test restores and DR drills regularly to prove the RPO and RTO are met, as Bangladesh Bank's ICT security requirements expect. Month-end and year-end fulls are kept for audit retention.

    Exam tip: incremental = since the last backup; differential = since the last full. Bank: replication + DR site + frequent log backups + weekly full/nightly differential + an immutable copy, tested regularly.

    Written question 12Locked: the answer opens with a free accountCloud & Emerging Tech

    What is Retrieval-Augmented Generation (RAG)? Briefly explain the main steps involved in designing a RAG pipeline. Explain the role of a vector database in RAG and how RAG improves the accuracy and relevance of LLM-generated responses.

    Written question 13Locked: the answer opens with a free accountSoftware Engineering

    A web application has 120,000 users, of whom 20% are active during peak hours. Each active user generates 5 requests per minute. Each application server handles 800 requests per second, and each request generates 2 database queries. Each database server can process 1,000 queries per second. Calculate the minimum number of application and database servers required.

    Written question 14Locked: the answer opens with a free accountData Structures

    Given the following sequence of integers, construct a Binary Search Tree (BST) by inserting the elements in the order given: 50, 30, 70, 20, 40, 60, 80, 35. Draw the resulting BST and determine its inorder, preorder, and postorder traversal sequences.

    Written question 15Locked: the answer opens with a free accountComputer Architecture

    A processor has a cache hit ratio of 90%, a cache access time of 5 ns, and a main-memory access time of 80 ns. Calculate the average memory access time, assuming a cache miss requires an additional main-memory access after the cache lookup.

    Written question 16Locked: the answer opens with a free accountMathematics

    Pipe A can fill a tank in 10 hours and pipe B in 15 hours. Pipe C can empty the full tank in 12 hours. If all three are opened together, how long will it take to fill the tank?

    Written question 17Locked: the answer opens with a free accountMathematics

    The product of two consecutive positive odd numbers is 143. Find the numbers.

    Written question 18Locked: the answer opens with a free accountMathematics

    In a class, if 4 students sit on each bench, then 3 benches remain empty. But if 3 students sit on each bench, then 6 students have to stand. What is the total number of students in the class?

    Written question 19Locked: the answer opens with a free accountMathematics

    The amount of money held by A, B, and C satisfy A:B=3:4 and B:C=5:6. If A gives Tk 5,000 to B, the ratio of their amount becomes 1:2. Find the total amount of money originally held by all three.

    Written question 20Locked: the answer opens with a free accountEnglish Grammar

    Write only the correct answers:

    a) Choose the correct option: By the time we arrived, the film ___. (started / had started / has started)
    b) Fill in the blank with the correct preposition: She is good ___ solving problems.
    c) Correct the error: Neither the teacher nor the students was present.
    d) Write the noun form of "decide."
    e) Choose the correct option: I wish I ___ taller. (am / were / will be)
    f) Choose the correct option: Hardly ___ the station when the train left. (I had reached / had I reached / I reached)
    g) Change to passive voice: Someone has stolen my bicycle.
    h) Change to indirect speech: She said to me, "Will you help me tomorrow?"
    i) Choose the word closest in meaning to "meticulous": (careless / extremely careful / quick / angry)
    j) Combine into one sentence using "despite": It was raining heavily. They continued the match.

    Written question 21Locked: the answer opens with a free accountEnglish Writing

    Write an essay on: Job prospects in the age of Artificial Intelligence

    Sign up free to see the model answers to written questions 12–21 · উত্তর দেখতে বিনামূল্যে সাইন আপ করুন

    Explanations © ARBS Academy

    Questions about this paper · সাধারণ প্রশ্ন

    How many questions were in the Combined Bank Assistant Programmer exam (2026)?
    21 written questions.
    Which subjects were asked most in the Combined Bank Assistant Programmer exam (2026)?
    Cloud & Emerging Tech (4), Mathematics (4) and Database (2), out of 21 questions.
    When was the Combined Bank Assistant Programmer exam held?
    On 31 October 2026.
    Where can I find the Combined Bank Assistant Programmer exam (2026) question solution?
    On this page: 2 of the 21 questions are shown with worked answers. The rest of the answers open with a free ARBS Academy account, where the paper can also be practised as a timed test.

    Question text is from the public recruitment exam; answers and explanations are written by ARBS Academy. All past papers