CSP-Assessor Exam Dumps Pass with Updated Feb-2025 Tests Dumps
CSP-Assessor exam questions for practice in 2025 Updated 58 Questions
Swift CSP-Assessor Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 34
Is the restriction of Internet access only relevant when having Swift-related components in a secure zone?
- A. Yes, because if there is no secure zone then the internet connectivity does not need to be restricted
- B. No, because there can be in-scope general operator PCs used to access a Swift-related application hosted at a service provider
Answer: B
NEW QUESTION # 35
The Swift HSM boxes:
- A. Are located at the Swift user premises and managed by the Swift user
- B. Are located at the network partner premises and managed by Swift the network partner
- C. Are located at the network partner premises and managed by Swift
- D. Are located at the Swift user premises and managed by Swift
Answer: A
NEW QUESTION # 36
The Swift user would like to perform their CSP assessment in May for the CSCF version that will only be active as from July the same year. Is it allowed?
- A. No, an assessment can only be done on the active version of the CSCF
- B. Yes, the assessment on a particular version can start before the actual activation date
Answer: A
NEW QUESTION # 37
The Swift user has an sFTP server to push files to an outsourcing agent hosting the Swift users own Communication interface. What is their architecture type?
- A. A4
- B. A1
- C. B
- D. A3
Answer: C
NEW QUESTION # 38
Is it necessary to formally explain to the Swift user the testing methodology that will be used for the CSP assessment during the kick-off?
- A. No
- B. Yes
Answer: B
NEW QUESTION # 39
What type of control effectiveness needs to be validated for an independent assessment?
- A. An independent assessment is a point in time review with possible reviews of older evidence as appropriate
- B. Operational effectiveness needs to be validated
- C. None of the above
- D. Effectiveness is never validated only the control design
Answer: B
NEW QUESTION # 40
As a Swift CSP Certified Assessor. Swift contacted me to provide evidence on an assessment I have performed. This is required to support their quality assurance validation process. Is it allowed?
- A. No, it's confidential
- B. Yes, one of the obligations of the certification programme is that quality assessment can be performed by Swift
Answer: B
NEW QUESTION # 41
Which statement(s) is/are correct about the LSO/RSO accounts on a Swift Alliance Access? (Choose all that apply.)
- A. They are responsible for the configuration and management of the security functions of the server
- B. Their PKI certificates are stored either on a HSM Token or on a HSM-box
- C. They are the business profiles that can sign the Swift financial transactions
- D. They are local Security Officers
Answer: A,B,D
NEW QUESTION # 42
The Alliance Web Platform Administrator uses both the GUI and command line to perform configuration and monitoring tasks on AWP SE.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 43
What is expected regarding Token Management when (physical or software-based) tokens are used? (Choose all that apply.)
- A. Have in place a strict token assignment process. This avoids the need to perform g a regular review of assigned tokens
- B. All tokens must be stored in a safe when not used
- C. Individuals must not share their tokens. Tokens must remain under the control and supervision of its owner
- D. Similar to user accounts, individual assignment and ownership for accurate traceability and revocation in case of potential tampering, loss or in case of user role change
Answer: C,D
NEW QUESTION # 44
Which user roles are available in Alliance Cloud by default. (Choose all that apply.)
- A. Message Management
- B. Administrator
- C. Message Security Administrator
- D. Role and Operator management
Answer: B
NEW QUESTION # 45
Must all CSCF controls be subject to an assessment?
- A. No, only the mandatory controls
- B. No, only the attested controls (with as a minimum the mandatory ones]
- C. Yes
- D. No, the control selection is defined between the Swift User and their assessor
Answer: A
NEW QUESTION # 46
From the outsourcing agent diagram, which components in the diagram are in scope and applicable for the Swift user.
- A. Components C, D and E
- B. Components A, B, C, D and E
- C. None of the above
- D. Components A and B
Answer: B
NEW QUESTION # 47
A Swift user has moved from one Service Bureau to another What are the obligations of the Swift user in the CSP context?
- A. None if there is no impact in the architecture tope
- B. To inform the SB certification office at Swift WW
- C. To reflect that in the next attestation cycle
- D. To submit an updated attestation reflecting this change within 3 months
Answer: D
NEW QUESTION # 48
Select the supporting documents to conduct a CSP assessment. (Choose all that apply.)
- A. The CSP User Handbook
- B. The mapping to industry standards article
- C. The Customer Security Controls Framework
- D. The Controls Matrix and High Level Test P an
Answer: C
NEW QUESTION # 49
Is the control 2. 11 "RMA Business Controls" only about the process of validating the defined counterparty relationships?
- A. Yes
- B. No
Answer: B
NEW QUESTION # 50
Where is the implementation of multi-factor authentication deemed sufficient to support control 4.2 compliance? (Choose all that apply.)
- A. When login on the jump server filtering access to local Swift secure zone
- B. On the General Operator PC used to access a Swift-related component
- C. When accessing an outsourcing agent or an L2BA Swift-related application
- D. When logging-in on an interface, a connector, or the system running such component
Answer: A,B,C,D
NEW QUESTION # 51
When hesitant on the applicability of a CSCF control to a particular component? What steps should you take? (Choose all that apply.)
- A. Check carefully the Introduction section of the CSCF
- B. Call your Swift contact
- C. Check appendix F of the CSCF
- D. Open a case with Swift support via the case manager on swift com if further information or solution cannot be found in the documentation
Answer: A,B,C,D
NEW QUESTION # 52
Select the correct statement about Alliance Gateway.
- A. It is used to create messages to send over the Swift network
- B. It is used to exchange messages over the Swift network
Answer: B
NEW QUESTION # 53
What are the conditions required to permit reliance on the compliance conclusion of a control assessed in the previous year? (Choose all that apply.)
- A. The control-design and implementation are the same
- B. The previous assessment was performed on the (correct) CSCF version of the previous year
- C. The control compliance conclusion must have already been relied on the past two years
- D. The control definition has not changed
Answer: A,B,D
NEW QUESTION # 54
Can an assessor re-use an ISAE 3000 report dating back 2 years to support an independent assessment?
- A. No, that is too old, the maximum is 18 months
- B. Yes, provided there is no change to the Swift user's infrastructure
- C. No, the SAE 3000 report is no valid surrogate as a rule
- D. Yes, there is no time limit for an iSAE 3000 report
Answer: A
NEW QUESTION # 55
......
Authentic CSP-Assessor Dumps With 100% Passing Rate Practice Tests Dumps: https://www.prep4sureguide.com/CSP-Assessor-prep4sure-exam-guide.html
Updated Premium CSP-Assessor Exam Engine pdf: https://drive.google.com/open?id=1LqL6Xui6x_5IZNMxXbEDAfZwyuoPG9wM