Question 1

Where is the implementation of multi-factor authentication deemed sufficient to support control 4.2 compliance? (Choose all that apply.)

Options :

A : When accessing an outsourcing agent or an L2BA Swift-related application

B : When logging-in on an interface, a connector, or the system running such component

C : When login on the jump server filtering access to local Swift secure zone

D : On the General Operator PC used to access a Swift-related component

Answer: A,B,C,D

Question 2

When hesitant on the applicability of a CSCF control to a particular component? What steps should you take? (Choose all that apply.)

Options :

A : Call your Swift contact

B : Check appendix F of the CSCF

C : Check carefully the Introduction section of the CSCF

D : Open a case with Swift support via the case manager on swift com if further information or solution cannot be found in the documentation

Answer: B,C,D

Question 3

The only type of HSM devices offered by Swift are HSM tokens and HSM boxes.

Options :

A : TRUE

B : FALSE

Answer: A

Question 4

Can an assessor re-use an ISAE 3000 report dating back 2 years to support an independent assessment?

Options :

A : No, that is too old, the maximum is 18 months

B : Yes, there is no time limit for an iSAE 3000 report

C : No, the SAE 3000 report is no validsurrogateas a rule

D : Yes, provided there is no change to the Swift user-s infrastructure

Answer: C

Question 5

For which reasons (as per the "CSP Independent Assessment Process for Assessors Guidelines") is it required to keep minutes of all key meetings related to a CSP assessment process (examples: kick-off, scope definition, exit meeting)? (Select all answers that apply)•Swift Customer Security Controls Policy•Swift Customer Security Controls Framework v2025•Independent Assessment Framework•Independent Assessment Process for Assessors Guidelines•Independent Assessment Framework - High-Level Test Plan Guidelines•Outsourcing Agents - Security Requirements Baseline v2025•CSP Architecture Type - Decision tree•CSP_controls_matrix_and_high_test_plan_2025•Assessment template for Mandatory controls•Assessment template for Advisory controls•CSCF Assessment Completion Letter•Swift_CSP_Assessment_Report_Template

Options :

A : To support quality review (audit) processes

B : For documentation purpose

C : To keep key information that can be used as input for the next step in the assessment process

D : To be uploaded in KYC-SA at the end of the assessment (mandated by SWIFT)

Answer: A,B,C

Confidently Practice Online with Free CSP-Assessor Exam Cram

Buying Options: