最新的Swift CSP-Assessor免費考試真題

問題1

The control SWIFT Environment Protection supports several objectives. (Select the one that does not apply)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. Forbids any interactive sessions towards the SWIFT infrastructure

B. Restrict malicious access from external sources

C. Limit risks of lateral movement

D. Limit risks of privileged accounts compromise

正確答案: A

說明：（僅 Fast2test 成員可見）

問題2

Which of the following statements best describe valid implementations when implementing control 2.9 Transaction Business Controls? (Choose all that apply.)

A. Any solutions is acceptable so long as the CISO approves the implementation

B. A customer designed implementation or a combination of different measures are deemed valid if they sufficiently mitigate the control risks

C. Reliance on a recent business assessment or regulator response confirming the effectiveness of the control (as an example CPMI's_ requirement) is especially poignant to this control

D. Multiple measures must be implemented by the Swift user to validate the flows of transactions are in the bounds of the normal expected business

正確答案: B,D

說明：（僅 Fast2test 成員可見）

問題3

Which of the following infrastructures has the smallest SWIFT footprint? (Select the correct answer)
*Connectivity
*Generic
*Products Cloud
*Products OnPrem
*Security

A. Full stack of products up to the Messaging Interface

B. Lite 2 or Alliance Cloud

C. Alliance Remote Gateway

D. A user with a Messaging Interface behind a Service Bureau

正確答案: B

說明：（僅 Fast2test 成員可見）

問題4

Intrusion Detection Control can be met through the following technology. (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls

A. EDR and XDR

B. NIDS

C. A combination of all of the above

D. HIDS

正確答案: C

說明：（僅 Fast2test 成員可見）

問題5

On which one of the following components must a Password/PIN Policy not be defined and implemented as per the CSCF? (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls

A. All equipment within the user environment

B. Operator PCs, (physical or virtual) systems running SWIFT-related components, network devices protecting the secure zone(s), bridging servers

C. Personal tokens or mobile devices used as a possession factor

D. Jump server(s), SWIFT-related components at application level

正確答案: C

說明：（僅 Fast2test 成員可見）

問題6

Can an assessor re-use an ISAE 3000 report dating back 2 years to support an independent assessment?

A. No, that is too old, the maximum is 18 months

B. No, the SAE 3000 report is no validsurrogateas a rule

C. Yes, there is no time limit for an iSAE 3000 report

D. Yes, provided there is no change to the Swift user's infrastructure

正確答案: B

說明：（僅 Fast2test 成員可見）

問題7

How many Swift Security Officers does an organization need at minimum?

A. 3

B. 4

C. 2

D. 1

正確答案: C

說明：（僅 Fast2test 成員可見）

問題8

Can an internal audit department submit and approve their Swift user's attestation on the KYC-SA Swift portal?

A. Yes, providing this is agreed by the head of IT operations and the CISO

B. Yes, with approval from the Chief auditor

C. No, this is never an option

D. Yes, an internal auditor can submit the attestation for approval provided they have the appropriate credentials for switt.com. The CISO remains in charge of the approval of the attestation

正確答案: C

說明：（僅 Fast2test 成員可見）

問題9

The SWIFT HSM Box must be hardened at the system level by the SWIFT user owning the equipment.
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. FALSE

B. TRUE

正確答案: B

說明：（僅 Fast2test 成員可見）

問題10

Must all CSCF controls be subject to an assessment? (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. No, only the attested controls (with as a minimum the mandatory ones according to the architecture type)

B. No, only the mandatory controls

C. No, the controls selection is agreed upfront between the SWIFT User and the assessor

D. Yes

正確答案: A

說明：（僅 Fast2test 成員可見）

最新的Swift Customer Security Programme Assessor Certification - CSP-Assessor免費考試真題

聯系我們

站內鏈接

最新更新