CSP-Assessor試験無料問題集（118題）「Swift Customer Security Programme Assessor Certification 認定」

出題：1

Can an internal audit department submit and approve their SWIFT user's attestation on the KYC-SA SWIFT portal? (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. Yes, with approval from the Chief Auditor

B. No, this is never an option

C. Yes, an internal auditor can submit the attestation for approval provided they have the appropriate credentials for swift.com. The CISO remains in charge of the approval of the attestation

D. Yes, providing this is agreed by the head of IT operations and the CISO

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

May an assessor rely on an ISAE 3000 report dating back 2 years to support a CSP independent assessment?
(Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. No, an ISAE 3000 report is no valid substitute as a rule

B. Yes, provided there is no change to the SWIFT user's infrastructure

C. Yes, there is no time limit for an ISAE 3000 report

D. No, that is too old, the maximum is 18 months

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

What are the possible impacts for a SWIFT user to be non-compliant to CSP? (Select the two correct answers that apply)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. To be delisted from the BIC directory

B. To be reported to their supervisors (if applicable)

C. To be seen as non-compliant to their counterparts in KYC-SA

D. To be contacted by SWIFT to provide the CSP assessment report and detailed information about the reason of non-compliance

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Using the outsourcing agent diagram. Which components must be placed in a secure zone? (Choose all that apply.)

A. Component A

B. Component D

C. Component C

D. Component B

正解：A,B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A Swift user can only exchange FIN messages via the Swift network.

A. FALSE

B. TRUE

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

To verify the applicability of a CSCF control to a specific component, several actions may be considered.
Which one does not apply in this case?
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. Check in the CSP Policy document

B. Open a case with SWIFT support via the case manager on swift.com if further information or solution cannot be found in the documentation

C. Check carefully the Introduction section of the CSCF

D. Check appendix F of the CSCF

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which operator session flows are expected to be protected in terms of confidentiality and integrity? (Choose all that apply.)

A. All sessions to and from a jump server used to access a component in a secure zone

B. All sessions towards a Swift related application run by an Outsourcing Agent, a Service Bureau or an L2BA Provider

C. All sessions towards a secure zone (on-premises or hosted by a third-party or a Cloud Provider)

D. System administrator sessions towards a host running a Swift related component

正解：A,B,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Must Swift users submit a copy of their final assessment report to Swift?

A. Yes, all documents produced from the assessment must be provided proactively to Swift

B. Yes, a copy of (only) the assessment report must be provided to Swift, no other documents

C. No, it is not required to provide Swift with any documents by default. However, Swift can request a copy of the Assessment completion letter

D. Yes, in cases where a customer performs an Independent assessment rather than an audit then a copy of the assessment report must be provided. However, it is not required for the Swift user to provide any forms when an Internal/External Audit is performed

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

How many Swift Security Officers does an organization need at minimum?

A. 2

B. 1

C. 4

D. 3

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

CSP-Assessor試験無料問題集「Swift Customer Security Programme Assessor Certification 認定」