Free CSP-ASSESSOR Exam Dumps PDF Preview

Question 1

Single choice

Intrusion Detection Control can be met through the following technology. (Select the correct answer)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

A
NIDS
B
HIDS
C
EDR and XDR
D
A combination of all of the above

Reveal answer details Close answer details

Correct answerD

Question 2

Multiple choice

Select the correct statement(s) about the Swift Alliance Gateway. (Choose all that apply.)

A
It acts as the single window to SwiftNet messaging services byconcentratingyour traffic flows
B
It allows sharing of PKI profiles between application or individuals, through the use of virtual profiles
C
It allows the creation and/or modification of some Swift messages (depending on the types &/or formats)
D
The Alliance Gateway can only be accessed by a SWIFTNet user

Reveal answer details Close answer details

Correct answersA, B

Question 3

Multiple choice

When hesitant on the applicability of a CSCF control to a particular component?
What steps should you take?
(Choose all that apply.)

A
Call your Swift contact
B
Check appendix F of the CSCF
C
Check carefully the Introduction section of the CSCF
D
Open a case with Swift support via the case manager on swift com if further information or solution cannot be found in the documentation

Reveal answer details Close answer details

Correct answersB, C, D

Question 4

Single choice

Which of the following statements best describes the difference between an audit and an assessment as per SWIFT CSP definitions? (Select the correct answer)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

A
An audit is a comprehensive review of a customer's controls to ensure they meet regulatory requirements, while an assessment is a very high-level review of controls to identify potential weaknesses
B
An audit looks at the defined controls design and implementation compliance and follows recognized international audit standards, whereas an assessment is less strict but aims the same common objectives
C
An audit is a one-time event, while an assessment is an ongoing process of monitoring and improving security controls
D
An audit and an assessment can be used interchangeably

Reveal answer details Close answer details

Correct answerB

Question 5

Single choice

Alliance Lite2 only supports the sending and receiving of FIN messages.

A
TRUE
B
FALSE

Reveal answer details Close answer details

Correct answerB

Question 6

Single choice

The objective of the Customer Environment Protection control is to separate the user's Swift infrastructure which restricts malicious access from the external world and from the General IT environment of the Swift user.

A
TRUE
B
FALSE

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

A SWIFT user is not based in the same country as the assessor. The assessor would like to perform the

assessment remotely. Is this permitted? (Select the correct answer)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

A
Remote assessments are not permitted under any circumstances
B
This is permitted provided the same level of comfort can be guaranteed
C
It is possible to perform an assessment remotely only with valid reasons. These reasons must be formally validated by SWIFT CSP office
D
It is not allowed to conduct an assessment remotely under any circumstances. However, force majeure circumstances like the global pandemic are an exception to this

Reveal answer details Close answer details

Correct answerC

Question 8

Single choice

As a SWIFT CSP Certified Assessor, my external cybersecurity certification (example: CISA) has expired. Am I still allowed to work as a certified assessor?

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

A
No, a valid external cybersecurity certification is mandatory to keep the CSP Certified Assessor certification
B
Yes, if the SWIFT CSP Assessor certification is still valid

Reveal answer details Close answer details

Correct answerA

Question 9

Multiple choice

Which authentication methods are possible on the Alliance Interfaces? (Choose all that apply.)

A
Password
B
LDAP Authentication
C
Radius One-time password
D
Password and TOTP

Reveal answer details Close answer details

Correct answersA, B, D

Question 10

Single choice

The SWIFT user has installed its own Communication Interface on a dedicated virtual machine offered by a public cloud provider. Under which provider category does the public cloud provider fit, and what is the CSP impact? (Select the correct answer)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

A
The public cloud provider is considered a L2BA provider, and therefore not in scope of the CSP
B
The public cloud provider is considered a SWIFT connectivity provider, and therefore not in scope of the CSP
C
The public cloud provider is considered an outsourcing agent, and therefore in scope of the CSP
D
This type of implementation is not allowed by the CSP

Reveal answer details Close answer details

Correct answerC

Question 11

Single choice

The SwiftNet Link (SNL) software is always required for the Swift Alliance Gateway to operate.

Connectivity

Generic

Products Cloud

Products OnPrem

Security

A
TRUE
B
FALSE

Reveal answer details Close answer details

Correct answerA

Question 12

Single choice

Is the restriction of Internet access only relevant when having Swift-related components in a secure zone?

A
Yes, because if there is no secure zone then the internet connectivity does not need to be restricted
B
No, because there can be in-scope general operator PCs used to access a Swift-related application hosted at a service provider

Reveal answer details Close answer details

Correct answerB

Question 13

Single choice

What is the purpose of the High-Level Test Plan (HLTP) provided by SWIFT? (Select the correct answer)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

A
The HLTP provides a way of testing and the typical evidence for each control (based on implementation guidelines) and must be strictly followed
B
The HLTP provides a way of testing and the typical evidence for each control (based on implementation guidelines), testing should be ideally based on it
C
The HLTP provides the rules to define the sample for testing
D
The HLTP provides a detailed way of control testing

Reveal answer details Close answer details

Correct answerB

Question 14

Single choice

To rely on a previous CSP assessment report conclusions, a limited testing approach was used. What is the expected sample size as per the High-Level Test Plan (HLTP) guidelines for each identified component? (Select the correct answer)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

A
There is no need for a sample for this limited testing
B
1
C
3
D
5

Reveal answer details Close answer details

Correct answerC

Question 15

Single choice

Can an internal audit department submit and approve their SWIFT user's attestation on the KYC-SA SWIFT portal? (Select the correct answer)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

A
Yes, providing this is agreed by the head of IT operations and the CISO
B
No, this is never an option
C
Yes, an internal auditor can submit the attestation for approval provided they have the appropriate credentials for swift.com. The CISO remains in charge of the approval of the attestation
D
Yes, with approval from the Chief Auditor

Reveal answer details Close answer details

Correct answerB

Question 16

Single choice

How are online SwiftNet Security Officers authenticated? (Select the correct answer)

Connectivity

Generic

Products Cloud

Products OnPrem

Security

A
Via their PKI certificate
B
Via their swift.com account and secure code card
C
Via their swift.com account

Reveal answer details Close answer details

Correct answerB

Question 17

Single choice

Select the correct statement about Alliance Gateway.

A
It is used to exchange messages over the Swift network
B
It is used to create messages to send over the Swift network

Reveal answer details Close answer details

Correct answerA

Question 18

Multiple choice

Select the components a SwiftNet Link (SNL) may communicate with. (Choose all that apply.)

A
The Graphical User Interface
B
The VPN boxes
C
The HSM device
D
The messaging interface (such as Alliance Access)

Reveal answer details Close answer details

Correct answersB, C, D

Free CSP-ASSESSOR Exam Dumps Preview

Customer Security Programme Assessor

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13

QUESTION 14

QUESTION 15

QUESTION 16

QUESTION 17

QUESTION 18

VOL	TYPE	QUESTIONS
1	Single choice	14
2	Multiple choice	4