Swift CSP-ASSESSOR Online Practice Questions and Exam Preparation

Swift CSP-ASSESSOR Online Questions & Answers

• Question 11:

  Which statements are correct about the Alliance Access LSO and RSO? (Select the two correct answers that apply) Connectivity Generic Products Cloud Products OnPrem Security

  A. They are Alliance Security Officers
  B. Their PKI certificates are stored either on an HSM Token or on an HSM-box
  C. They are the business profiles that can sign the SWIFT financial transactions
  D. They are responsible for the configuration and management of the security functions in the messaging interface
  A. They are Alliance Security Officers
  D. They are responsible for the configuration and management of the security functions in the messaging interface

• Question 12:

  What are the conditions required to allow reliance on the compliance conclusion of a control assessed in the previous year? (Select all answers that apply) Swift Customer Security Controls Policy Swift Customer Security Controls Framework v2025 Independent Assessment Framework Independent Assessment Process for Assessors Guidelines Independent Assessment Framework -High-Level Test Plan Guidelines Outsourcing Agents - Security Requirements Baseline v2025 CSP Architecture Type - Decision tree CSP_controls_matrix_and_high_test_plan_2025 Assessment template for Mandatory controls Assessment template for Advisory controls CSCF Assessment Completion Letter Swift_CSP_Assessment_Report_Template

  A. The control compliance conclusion must have already been relied on the past two years
  B. The previous assessment was performed on the CSCF version of the previous year (at least)
  C. The control definition has not changed
  D. The control design and implementation are the same
  C. The control definition has not changed
  D. The control design and implementation are the same

• Question 13:

  Which of the following infrastructures has the smallest SWIFT footprint? (Select the correct answer) Connectivity Generic Products Cloud Products OnPrem Security

  A. Full stack of products up to the Messaging Interface
  B. Alliance Remote Gateway
  C. Lite 2 or Alliance Cloud
  D. A user with a Messaging Interface behind a Service Bureau
  C. Lite 2 or Alliance Cloud

• Question 14:

  The SWIFT VPN boxes are located between the Messaging and Communication interface. Connectivity Generic Products Cloud Products OnPrem Security

  A. TRUE
  B. FALSE
  B. FALSE

• Question 15:

  A Swift user has remediated an exception reported by the assessor. What are their obligations before updating and submitting an attestation reflecting the new compliance level?

  

  A. The exception must be re-assessed by an independent assessor. The assessor can be different to the one who initially raised the exception
  B. The exception must be re-assessed by the same independent assessor that raised the exception
  C. The first line of defense can confirm their level of compliance using a self-assessment approach
  D. None, if the remediation has been completed, a new attestation can be submitted reflecting the compliance of the control
  A. The exception must be re-assessed by an independent assessor. The assessor can be different to the one who initially raised the exception

• Question 16:

  Can a Swift user choose to implement the security controls (example: logging and monitoring) in systems which are not directly in scope of the CSCE?

  

  A. Yes
  B. No
  A. Yes

• Question 17:

  Which operator session flows are expected to be protected in terms of confidentiality and integrity? (Choose all that apply.)

  

  A. System administrator sessions towards a host running a Swift related component
  B. All sessions to and from a jump server used to access a component in a secure zone
  C. All sessions towards a secure zone (on-premises or hosted by a third-party or a Cloud Provider)
  D. All sessions towards a Swift related application run by an Outsourcing Agent, a Service Bureau or an L2BA Provider
  A. System administrator sessions towards a host running a Swift related component
  B. All sessions to and from a jump server used to access a component in a secure zone
  C. All sessions towards a secure zone (on-premises or hosted by a third-party or a Cloud Provider)
  D. All sessions towards a Swift related application run by an Outsourcing Agent, a Service Bureau or an L2BA Provider

• Question 18:

  What is expected regarding Token Management when (physical or software-based) tokens are used? (Choose all that apply.)

  

  A. Similar to user accounts, individual assignment and ownership for accurate traceability and revocation in case of potential tampering, loss or in case of user role change
  B. Have in place a strict token assignment process. This avoids the need to perform g a regular review of assigned tokens
  C. Individuals must not share their tokens. Tokens must remain under the control and supervision of its owner
  D. All tokens must be stored in a safe when not used
  A. Similar to user accounts, individual assignment and ownership for accurate traceability and revocation in case of potential tampering, loss or in case of user role change
  C. Individuals must not share their tokens. Tokens must remain under the control and supervision of its owner

• Question 19:

  A detailed CSP assessment report has been provided to the Swift user following the assessment. Is a completion letter also mandated to be supplied?

  

  A. Yes
  B. No
  A. Yes

• Question 20:

  A SWIFT user has had part of controls assessed by their internal audit department, and the other remaining controls using an external assessor company. Is this acceptable? (Select the correct answer) Swift Customer Security Controls Policy Swift Customer Security Controls Framework v2025 Independent Assessment Framework Independent Assessment Process for Assessors Guidelines Independent Assessment Framework - High-Level Test Plan Guidelines Outsourcing Agents - Security Requirements Baseline v2025 CSP Architecture Type - Decision tree CSP_controls_matrix_and_high_test_plan_2025 Assessment template for Mandatory controls Assessment template for Advisory controls CSCF Assessment Completion Letter Swift_CSP_Assessment_Report_Template

  A. Yes, a SWIFT user can combine multiple assessment types (internal and external assessment) as long as all controls are covered
  B. No, because the SWIFT user cannot be sure the same approach and quality will be delivered
  C. Yes, but only if there is a signed agreement between all involved assessors
  D. No, SWIFT can reject the attestation in such situations
  D. No, SWIFT can reject the attestation in such situations