Valid CSP-Assessor Exam Dumps Ensure you a HIGH SCORE (2025)
Pass CSP-Assessor Exam with Latest Questions
Swift CSP-Assessor Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 12
From the outsourcing agent diagram, which components in the diagram are in scope and applicable for the Swift user.
- A. Components C, D and E
- B. None of the above
- C. Components A, B, C, D and E
- D. Components A and B
Answer: C
NEW QUESTION # 13
A Swift user has moved from one Service Bureau to another What are the obligations of the Swift user in the CSP context?
- A. To submit an updated attestation reflecting this change within 3 months
- B. To inform the SB certification office at Swift WW
- C. None if there is no impact in the architecture tope
- D. To reflect that in the next attestation cycle
Answer: A
NEW QUESTION # 14
Must Swift users submit a copy of their final assessment report to Swift?
- A. Yes, all documents produced from the assessment must be provided proactively to Swift
- B. No, it is not required to provide Swift with any documents by default. However, Swift can request a copy of the Assessment completion letter
- C. Yes, a copy of (only) the assessment report must be provided to Swift, no other documents
- D. Yes, in cases where a customer performs an Independent assessment rather than an audit then a copy of the assessment report must be provided. However, it is not required for the Swift user to provide any forms when an Internal/External Audit is performed
Answer: B
NEW QUESTION # 15
Select the correct statement(s).
- A. To verify the signature the SwiftNetLink uses the signing private key of the receiver
- B. The certificate stored on the Swift Hardware Security Module is used during the decryption operation of a message
- C. The decryption operation uses the encryption private key of the receiver
- D. The public and private keys of a Swift certificate are stored on the Hardware Security Module
Answer: C,D
NEW QUESTION # 16
A detailed CSP assessment report has been provided to the Swift user following the assessment. Is a completion letter also mandated to be supplied?
- A. Yes
- B. No
Answer: A
NEW QUESTION # 17
As a Swift CSP Certified Assessor, I left the listed provider and started to work independently. Can I continue to perform CSP assessments?
- A. Yes. during the certification validity period
- B. [No, except if Swift formally provides you permission
- C. No, this is not allowed
- D. Yes. but not as a Swift CSP Certified assessor
Answer: D
NEW QUESTION # 18
Is the restriction of Internet access only relevant when having Swift-related components in a secure zone?
- A. No, because there can be in-scope general operator PCs used to access a Swift-related application hosted at a service provider
- B. Yes, because if there is no secure zone then the internet connectivity does not need to be restricted
Answer: A
NEW QUESTION # 19
Which of the following statements best describe valid implementations when implementing control 2.9 Transaction Business Controls? (Choose all that apply.)
- A. Any solutions is acceptable so long as the CISO approves the implementation
- B. A customer designed implementation or a combination of different measures are deemed valid if they sufficiently mitigate the control risks
- C. Reliance on a recent business assessment or regulator response confirming the effectiveness of the control (as an example CPMI's_ requirement) is especially poignant to this control
- D. Multiple measures must be implemented by the Swift user to validate the flows of transactions are in the bounds of the normal expected business
Answer: B,C,D
NEW QUESTION # 20
What type of control effectiveness needs to be validated for an independent assessment?
- A. Effectiveness is never validated only the control design
- B. An independent assessment is a point in time review with possible reviews of older evidence as appropriate
- C. None of the above
- D. Operational effectiveness needs to be validated
Answer: D
NEW QUESTION # 21
In the illustration, identify which components are in scope of the CSCF? (Choose all that apply.)
- A. Components A, B, K
- B. Components C, E, M
- C. Components J, K, I
- D. Components F, G, H
Answer: B
NEW QUESTION # 22
What is expected regarding Token Management when (physical or software-based) tokens are used? (Choose all that apply.)
- A. All tokens must be stored in a safe when not used
- B. Individuals must not share their tokens. Tokens must remain under the control and supervision of its owner
- C. Have in place a strict token assignment process. This avoids the need to perform g a regular review of assigned tokens
- D. Similar to user accounts, individual assignment and ownership for accurate traceability and revocation in case of potential tampering, loss or in case of user role change
Answer: B,D
NEW QUESTION # 23
In an entity having a small infrastructure and only 2 operators, the HR manager explains in a short interview how the security training is implemented providing one example. Would it be acceptable?
- A. No. more evidence are required
- B. Yes. it's a risk based testing approach this can be enough in this case
Answer: B
NEW QUESTION # 24
The internet connectivity restriction control prevents having internet access on any CSCE m-scope components.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 25
A Swift user has remediated an exception reported by the assessor. What are their obligations before updating and submitting an attestation reflecting the new compliance level?
- A. The first line of defense can confirm their level of compliance using a self-assessment approach
- B. None, if the remediation has been completed, a new attestation can be submitted reflecting the compliance of the control
- C. The exception must be re-assessed by the same independent assessor that raised the exception
- D. The exception must be re-assessed by an independent assessor. The assessor can be different to the one who initially raised the exception
Answer: D
NEW QUESTION # 26
Which user roles are available in Alliance Cloud by default. (Choose all that apply.)
- A. Message Security Administrator
- B. Administrator
- C. Message Management
- D. Role and Operator management
Answer: B
NEW QUESTION # 27
The Swift user would like to perform their CSP assessment in May for the CSCF version that will only be active as from July the same year. Is it allowed?
- A. No, an assessment can only be done on the active version of the CSCF
- B. Yes, the assessment on a particular version can start before the actual activation date
Answer: A
NEW QUESTION # 28
The Swift user has an sFTP server to push files to an outsourcing agent hosting the Swift users own Communication interface. What is their architecture type?
- A. A4
- B. A3
- C. B
- D. A1
Answer: C
NEW QUESTION # 29
Application Hardening basically applies the following principles. (Choose all that apply.)
- A. Least Privileges
- B. Enhanced Straight Through Processing
- C. Access on a need to have
- D. Reduced footprint for less potential vulnerabilities
Answer: A,C,D
NEW QUESTION # 30
What are the conditions required to permit reliance on the compliance conclusion of a control assessed in the previous year? (Choose all that apply.)
- A. The control compliance conclusion must have already been relied on the past two years
- B. The control-design and implementation are the same
- C. The control definition has not changed
- D. The previous assessment was performed on the (correct) CSCF version of the previous year
Answer: B,C,D
NEW QUESTION # 31
Which ones are Alliance Lite2 key components? (Choose all that apply.)
- A. A web interface
- B. A HSM box
- C. A WebSphere MQ Server
- D. An AutoClient
Answer: A,B,D
NEW QUESTION # 32
The Alliance Web Platform Administrator uses both the GUI and command line to perform configuration and monitoring tasks on AWP SE.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION # 33
Penetration testing must be performed at application level against the Swift-related components, such as the interfaces, Swift and customer connectors?
- A. False, only the components as defined in Swift Testing Policy
- B. True, those are key components
Answer: B
NEW QUESTION # 34
Which authentication methods are possible on the Alliance Interfaces? (Choose all that apply.)
- A. Radius One-time password
- B. Password
- C. LDAP Authentication
- D. Password and TOTP
Answer: A,B,C,D
NEW QUESTION # 35
......
CSP-Assessor Exam Practice Questions prepared by Swift Professionals: https://www.examcollectionpass.com/Swift/CSP-Assessor-practice-exam-dumps.html
Use Valid New CSP-Assessor Questions - Top choice Help You Gain Success: https://drive.google.com/open?id=1MOP7jEIVM3Macyuxbu-KXStEKR0rPpY7