Free Swift CSP-Assessor Exam Dumps Questions & Answers

Select the correct statement(s).

• A.To verify the signature the SwiftNetLink uses the signing private key of the receiver
• B.The public and private keys of a Swift certificate are stored on the Hardware Security Module
• C.The certificate stored on the Swift Hardware Security Module is used during the decryption operation of a message
• D.The decryption operation uses the encryption private key of the receiver

A SWIFT user is not based in the same country as the assessor. The assessor would like to perform the assessment remotely. Is this permitted? (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

• A.It is not allowed to conduct an assessment remotely under any circumstances. However, force majeure circumstances like the global pandemic are an exception to this
• B.This is permitted provided the same level of comfort can be guaranteed
• C.Remote assessments are not permitted under any circumstances
• D.It is possible to perform an assessment remotely only with valid reasons. These reasons must be formally validated by SWIFT CSP office

Select the components a SwiftNet Link (SNL) may communicate with. (Choose all that apply.)

• A.The messaging interface (such as Alliance Access)
• B.The Graphical User Interface
• C.The HSM device
• D.The VPN boxes

Can an internal audit department submit and approve their Swift user's attestation on the KYC-SA Swift portal?

• A.Yes, an internal auditor can submit the attestation for approval provided they have the appropriate credentials for switt.com. The CISO remains in charge of the approval of the attestation
• B.Yes, providing this is agreed by the head of IT operations and the CISO
• C.No, this is never an option
• D.Yes, with approval from the Chief auditor

Is it mandated to perform security awareness and other specific trainings every year for individuals with SWIFT-critical roles? (Select the correct answer)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls

• A.No, a track record must show that both awareness and specific training are performed at least bi-yearly (every 2 years)
• B.No, both awareness and specific trainings are planned when deemed required
• C.Yes, and a track record must show that both awareness and specific training are performed annually
• D.No, awareness training expected to be performed yearly; specific training to maintain the required knowledge only when needed