Swift Customer Security Programme Assessor Certification

QUESTION NO: 1
A Swift user can only exchange FIN messages via the Swift network.

A. FALSE B. TRUE

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
As a SWIFT CSP Certified Assessor, my external cybersecurity certification (example: CISA) has expired.
Am I still allowed to work as a certified assessor?
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. Yes, if the SWIFT CSP Assessor certification is still valid B. No, a valid external cybersecurity certification is mandatory to keep the CSP Certified Assessor certification

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
From the outsourcing agent diagram, which components in the diagram are in scope and applicable for the Swift user.

A. Components C, D and E B. Components A, B, C, D and E C. None of the above D. Components A and B

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
What are the three main objectives of the Customer Security Controls Framework? (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls

A. 1. Secure your environment
2. Know and Limit Access
3. Detect and Respond B. 1. Raise pragmatically the security bar
2. Maintain appropriate cyber-security hygiene
3. React promptly C. 1. Secure and Protect
2. Prevent and Detect
3. Share and Prepare D. 1. Restrict Internet Access and Protect Critical Systems from General IT Environment
2. Reduce Attack Surface and Vulnerabilities
3. Physically Secure the Environment

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Must all CSCF controls be subject to an assessment?

A. No, only the mandatory controls B. No, the control selection is defined between the Swift User and their assessor C. Yes D. No, only the attested controls (with as a minimum the mandatory ones]

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
A Treasury Management System (TMS) application is installed on the same machine as the customer connector (such as MQ server) connecting towards a Service Bureau Are these applications/systems in scope of CSCF?

A. The TMS application is the highest risk and must be secured appropriately. The MQ server should be secured on a best effort basis B. The TMS application, the MQ server and hosting system are in the scope of the CSCF and must be placed in a secure zone C. Only the MO server application is in scope of the CSCF> The TMS application is considered as back- office D. The TMS application, the MQ server and hosting system enters the scope of the CSCF advisory and should be placed in a secure zone

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
Is it mandated to perform security awareness and other specific trainings every year for individuals with SWIFT-critical roles? (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls

A. Yes, and a track record must show that both awareness and specific training are performed annually B. No, awareness training expected to be performed yearly; specific training to maintain the required knowledge only when needed C. No, both awareness and specific trainings are planned when deemed required D. No, a track record must show that both awareness and specific training are performed at least bi-yearly (every 2 years)

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
What is the purpose of a SWIFT HSM? (Select the correct answer)
*Connectivity
*Generic
*Products Cloud
*Products OnPrem
*Security

A. To connect to the SWIFT Secure IP Network (SIPN) B. To store PKI certificates C. To format the FIN MT messages D. To encrypt the database of the messaging interface

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
Must all CSCF controls be subject to an assessment? (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

A. No, the controls selection is agreed upfront between the SWIFT User and the assessor B. No, only the mandatory controls C. Yes D. No, only the attested controls (with as a minimum the mandatory ones according to the architecture type)

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
In the context of CSP, what type of component is the Alliance Access? (Select the correct answer)
*Connectivity
*Generic
*Products Cloud
*Products OnPrem
*Security

A. A Messaging Interface B. A SWIFT Connector C. A Communication Interface D. A Secure Server

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Swift Customer Security Programme Assessor Certification - CSP-Assessor Exam Questions