Question 1

What is the purpose of the High-Level Test Plan (HLTP) provided by SWIFT? (Select the correct answer)•Swift Customer Security Controls Policy•Swift Customer Security Controls Framework v2025•Independent Assessment Framework•Independent Assessment Process for Assessors Guidelines•Independent Assessment Framework - High-Level Test Plan Guidelines•Outsourcing Agents - Security Requirements Baseline v2025•CSP Architecture Type - Decision tree•CSP_controls_matrix_and_high_test_plan_2025•Assessment template for Mandatory controls•Assessment template for Advisory controls•CSCF Assessment Completion Letter•Swift_CSP_Assessment_Report_Template

Options :

A : The HLTP provides a way of testing and the typical evidence for each control (based on implementation guidelines) and must be strictly followed

B : The HLTP provides a way of testing and the typical evidence for each control (based on implementation guidelines), testing should be ideally based on it

C : The HLTP provides the rules to define the sample for testing

D : The HLTP provides a detailed way of control testing

Answer: B

Question 2

A Swift user has moved from one Service Bureau to another What are the obligations of the Swift user in the CSP context?

Options :

A : To inform the SB certification office at Swift WW

B : To reflect that in the next attestation cycle

C : None if there is no impact in the architecture tope

D : To submit an updated attestation reflecting this change within 3 months

Answer: D

Question 3

When hesitant on the applicability of a CSCF control to a particular component? What steps should you take? (Choose all that apply.)

Options :

A : Call your Swift contact

B : Check appendix F of the CSCF

C : Check carefully the Introduction section of the CSCF

D : Open a case with Swift support via the case manager on swift com if further information or solution cannot be found in the documentation

Answer: B,C,D

Question 4

What does the CSCF expect in terms of Database Integrity? (Choose all that apply.)

Options :

A : Nothing is needed when the messaging or connector integrates/embeds an integrity check functionality at each Swift transaction record level.

B : When a database is used by a messaging interface or connector, the related hosted database and its supporting system must be protected as a Swift-related component and exceptions alerted

C : Alerts generated from performed integrity checks are captured and analysed for appropriate treatment

Answer: B,C

Question 5

Where is the implementation of multi-factor authentication deemed sufficient to support control 4.2 compliance? (Choose all that apply.)

Options :

A : When accessing an outsourcing agent or an L2BA Swift-related application

B : When logging-in on an interface, a connector, or the system running such component

C : When login on the jump server filtering access to local Swift secure zone

D : On the General Operator PC used to access a Swift-related component

Answer: A,B,C,D

Confidently Practice Online with Free CSP-Assessor Exam Cram

Buying Options: