Question 1

A Swift user has moved from one Service Bureau to another What are the obligations of the Swift user in the CSP context?

Options :

A : To inform the SB certification office at Swift WW

B : To reflect that in the next attestation cycle

C : None if there is no impact in the architecture tope

D : To submit an updated attestation reflecting this change within 3 months

Answer: D

Question 2

A Swift user can only exchange FIN messages via the Swift network.

Options :

A : TRUE

B : FALSE

Answer: B

Question 3

How are online SwiftNet Security Officers authenticated? (Select the correct answer)•Connectivity•Generic•Products Cloud•Products OnPrem•Security

Options :

A : Via their PKI certificate

B : Via their swift.com account and secure code card

C : Via their swift.com account

Answer: B

Question 4

An application only uses (i) the SWIFT API for reporting and gpi basic tracker calls through (ii) a tailored account not allowing business transactions management. Is this application in scope of the CSCF? (Select the correct answer)•Swift Customer Security Controls Policy•Swift Customer Security Controls Framework v2025•Independent Assessment Framework•Independent Assessment Process for Assessors Guidelines•Independent Assessment Framework - High-Level Test Plan Guidelines•Outsourcing Agents - Security Requirements Baseline v2025•CSP Architecture Type - Decision tree•CSP_controls_matrix_and_high_test_plan_2025•Assessment template for Mandatory controls•Assessment template for Advisory controls•CSCF Assessment Completion Letter•Swift_CSP_Assessment_Report_Template

Options :

A : Yes, it is in scope and considered a customer connector because it reads business transaction data

B : No, it can be descoped because there is no business transaction management being performed

C : No, it is not in scope because the API connection method is not in scope of the CSP

D : Yes, it is in scope because the API connection method is less secure than SWIFT interfaces

Answer: B

Question 5

Where is the implementation of multi-factor authentication deemed sufficient to support control 4.2 compliance? (Choose all that apply.)

Options :

A : When accessing an outsourcing agent or an L2BA Swift-related application

B : When logging-in on an interface, a connector, or the system running such component

C : When login on the jump server filtering access to local Swift secure zone

D : On the General Operator PC used to access a Swift-related component

Answer: A,B,C,D

Confidently Practice Online with Free CSP-Assessor Exam Cram

Buying Options: