2025 Current CSP-Assessor dumps Preparation through Our Practice Test
100% Reliable Microsoft CSP-Assessor Exam Dumps Test Pdf Exam Material
NEW QUESTION # 20
The Swift secure zone is composed of a Swift connector, a middleware server and a back office system Is the selection of only one of the above components a representative sample based on the High-Level Test Plan (HLTP) guidelines?
- A. No
- B. Yes
Answer: A
NEW QUESTION # 21
The Physical Security protection control is also aimed at protecting the "on call" and "working from home" employees' equipment used to access the Swift-related components.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 22
Where is the implementation of multi-factor authentication deemed sufficient to support control 4.2 compliance? (Choose all that apply.)
- A. When login on the jump server filtering access to local Swift secure zone
- B. On the General Operator PC used to access a Swift-related component
- C. When accessing an outsourcing agent or an L2BA Swift-related application
- D. When logging-in on an interface, a connector, or the system running such component
Answer: A,B,C,D
NEW QUESTION # 23
Which of the following statements best describe valid implementations when implementing control 2.9 Transaction Business Controls? (Choose all that apply.)
- A. Any solutions is acceptable so long as the CISO approves the implementation
- B. A customer designed implementation or a combination of different measures are deemed valid if they sufficiently mitigate the control risks
- C. Multiple measures must be implemented by the Swift user to validate the flows of transactions are in the bounds of the normal expected business
- D. Reliance on a recent business assessment or regulator response confirming the effectiveness of the control (as an example CPMI's_ requirement) is especially poignant to this control
Answer: B,C,D
NEW QUESTION # 24
The only type of HSM devices offered by Swift are HSM tokens and HSM boxes.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 25
What does the CSCF expect in terms of Database Integrity? (Choose all that apply.)
- A. Nothing is needed when the messaging or connector integrates/embeds an integrity check functionality at each Swift transaction record level.
- B. When a database is used by a messaging interface or connector, the related hosted database and its supporting system must be protected as a Swift-related component and exceptions alerted
- C. Alerts generated from performed integrity checks are captured and analysed for appropriate treatment
Answer: B,C
NEW QUESTION # 26
The internet connectivity restriction control prevents having internet access on any CSCE m-scope components.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 27
The Swift user would like to perform their CSP assessment in May for the CSCF version that will only be active as from July the same year. Is it allowed?
- A. Yes, the assessment on a particular version can start before the actual activation date
- B. No, an assessment can only be done on the active version of the CSCF
Answer: B
NEW QUESTION # 28
- A. 1. Bridging Server (Middleware Server)
2. Bridging Server (Middleware Server)
3. Bridging Server (Middleware Server)
4. Bridging Server (Middleware Server) - B. 1. Customer Connector
2. Bridging Server (Middleware Server)
3. Customer Connector
4. Bridging Server (Middleware Server) - C. 1. Customer Connector
2. Customer Connector
3. Customer Connector
4. Customer Connector - D. Option B
- E. Option C
- F. Option D
- G. 1. Customer Connector
2. Bridging Server (Middleware Server)
3. Customer Connector
4. Customer Connector - H. Option A
Answer: B,H
NEW QUESTION # 29
Application Hardening basically applies the following principles. (Choose all that apply.)
- A. Least Privileges
- B. Access on a need to have
- C. Reduced footprint for less potential vulnerabilities
- D. Enhanced Straight Through Processing
Answer: A,B,C
NEW QUESTION # 30
The Alliance Web Platform Administrator uses both the GUI and command line to perform configuration and monitoring tasks on AWP SE.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 31
Can an internal audit department submit and approve their Swift user's attestation on the KYC-SA Swift portal?
- A. Yes, providing this is agreed by the head of IT operations and the CISO
- B. Yes, an internal auditor can submit the attestation for approval provided they have the appropriate credentials for switt.com. The CISO remains in charge of the approval of the attestation
- C. Yes, with approval from the Chief auditor
- D. No, this is never an option
Answer: B
NEW QUESTION # 32
What type of control effectiveness needs to be validated for an independent assessment?
- A. An independent assessment is a point in time review with possible reviews of older evidence as appropriate
- B. Effectiveness is never validated only the control design
- C. Operational effectiveness needs to be validated
- D. None of the above
Answer: C
NEW QUESTION # 33
Must Swift users submit a copy of their final assessment report to Swift?
- A. Yes, all documents produced from the assessment must be provided proactively to Swift
- B. No, it is not required to provide Swift with any documents by default. However, Swift can request a copy of the Assessment completion letter
- C. Yes, in cases where a customer performs an Independent assessment rather than an audit then a copy of the assessment report must be provided. However, it is not required for the Swift user to provide any forms when an Internal/External Audit is performed
- D. Yes, a copy of (only) the assessment report must be provided to Swift, no other documents
Answer: B
NEW QUESTION # 34
Can a Swift user choose to implement the security controls (example: logging and monitoring) in systems which are not directly in scope of the CSCE?
- A. Yes
- B. No
Answer: A
NEW QUESTION # 35
Is the control 2. 11 "RMA Business Controls" only about the process of validating the defined counterparty relationships?
- A. No
- B. Yes
Answer: A
NEW QUESTION # 36
Which authentication methods are possible on the Alliance Interfaces? (Choose all that apply.)
- A. Password and TOTP
- B. Password
- C. Radius One-time password
- D. LDAP Authentication
Answer: A,B,C,D
NEW QUESTION # 37
Is it necessary to formally explain to the Swift user the testing methodology that will be used for the CSP assessment during the kick-off?
- A. Yes
- B. No
Answer: A
NEW QUESTION # 38
Penetration testing must be performed at application level against the Swift-related components, such as the interfaces, Swift and customer connectors?
- A. True, those are key components
- B. False, only the components as defined in Swift Testing Policy
Answer: A
NEW QUESTION # 39
......
Free CSP-Assessor Dumps are Available for Instant Access: https://freetorrent.itpass4sure.com/CSP-Assessor-practice-exam.html
