Question 1
In the illustration, identify which components are in scope of the CSCF? (Choose all that apply.)
Correct Answer:
D. Components C, E, M
Free Swift Customer Security Programme Assessor Certification CSP-Assessor Exam Questions
Question 2
Is the restriction of Internet access only relevant when having Swift-related components in a secure zone?
Correct Answer:
B. No, because there can be in-scope general operator PCs used to access a Swift-related application hosted at a service provider
Question 3
As a Swift CSP Certified Assessor. Swift contacted me to provide evidence on an assessment I have performed. This is required to support their quality assurance validation process. Is it allowed?
Correct Answer:
A. Yes, one of the obligations of the certification programme is that quality assessment can be performed by Swift
Question 4
The Swift user has an sFTP server to push files to an outsourcing agent hosting the Swift users own Communication interface. What is their architecture type?
Correct Answer:
B. B
Question 5
How are online SwiftNet Security Officers authenticated?
Correct Answer:
A. Via their PKI certificate
Question 6
The cluster of VPN boxes is also called managed-customer premises equipment (M-CPE).
Correct Answer:
A. TRUE
Question 7
Must Swift users submit a copy of their final assessment report to Swift?
Correct Answer:
B. No, it is not required to provide Swift with any documents by default. However, Swift can request a copy of the Assessment completion letter
Question 8
What does the CSCF expect in terms of Database Integrity? (Choose all that apply.)
Correct Answer:
B. When a database is used by a messaging interface or connector, the related hosted database and its supporting system must be protected as a Swift-related component and exceptions alerted; C. Alerts generated from performed integrity checks are captured and analysed for appropriate treatment
Question 9
The Swift secure zone is composed of a Swift connector, a middleware server and a back office system Is the selection of only one of the above components a representative sample based on the High-Level Test Plan (HLTP) guidelines?
Correct Answer:
B. No
Question 10
The objective of the Customer Environment Protection control is to separate the user's Swift infrastructure which restricts malicious access from the external world and from the General IT environment of the Swift user.
Correct Answer:
A. TRUE