更新された2025年02月合格させるCSP-Assessor試験リアル練習テスト問題 [Q19-Q34]

Share

更新された2025年02月合格させるCSP-Assessor試験リアル練習テスト問題

無料ダウンロードSwift CSP-Assessorリアル試験問題


Swift CSP-Assessor 認定試験の出題範囲:

トピック出題範囲
トピック 1
  • 方法論と評価の成果物の理解: このセクションは、Swift システムを扱う独立監査人向けに設計されています。CSP 評価を実施する際の評価者の役割と義務に関する候補者の理解度をテストします。このセクションでは、評価プロセス中に考慮すべき重要な要素に関する知識を評価します。
トピック 2
  • Swift 顧客セキュリティ プログラムの理解: このドメインは、Swift の運用に携わるコンプライアンス担当者とリスク マネージャーを対象としています。候補者の CSP 管理フレームワークの理解度と、顧客セキュリティ管理フレームワーク (CSCF) に概説されている適切なアーキテクチャ タイプと関連範囲を決定する能力を評価します。
トピック 3
  • Swift の理解: 試験のこのセクションでは、Swift ネットワーク管理者のスキルを測定し、Swift ネットワークとそのインフラストラクチャの構造と運用など、国際金融コミュニティにおける Swift の重要な役割をカバーします。

 

質問 # 19
Using the outsourcing agent diagram. Which components must be placed in a secure zone? (Choose all that apply.)

  • A. Component D
  • B. Component B
  • C. Component C
  • D. Component A

正解:A、D


質問 # 20
What is expected regarding Token Management when (physical or software-based) tokens are used? (Choose all that apply.)

  • A. Similar to user accounts, individual assignment and ownership for accurate traceability and revocation in case of potential tampering, loss or in case of user role change
  • B. All tokens must be stored in a safe when not used
  • C. Individuals must not share their tokens. Tokens must remain under the control and supervision of its owner
  • D. Have in place a strict token assignment process. This avoids the need to perform g a regular review of assigned tokens

正解:A、C


質問 # 21
When hesitant on the applicability of a CSCF control to a particular component? What steps should you take? (Choose all that apply.)

  • A. Call your Swift contact
  • B. Check appendix F of the CSCF
  • C. Check carefully the Introduction section of the CSCF
  • D. Open a case with Swift support via the case manager on swift com if further information or solution cannot be found in the documentation

正解:A、B、C、D


質問 # 22
Which of the following infrastructures has the smallest Swift footprint?

  • A. Full stack of products includinq IPLA
  • B. Alliance Lite2
  • C. Alliance Remote Gateway
  • D. Full stack of products up to the Messaging Interface

正解:B


質問 # 23
The Swift secure zone is composed of a Swift connector, a middleware server and a back office system Is the selection of only one of the above components a representative sample based on the High-Level Test Plan (HLTP) guidelines?

  • A. No
  • B. Yes

正解:A


質問 # 24
Select the correct statement(s) about the Swift Alliance Gateway. (Choose all that apply.)

  • A. It allows the creation and/or modification of some Swift messages (depending on the types &/or formats)
  • B. The Alliance Gateway can only be accessed by a SWIFTNet user
  • C. It allows sharing of PKI profiles between application or individuals, through the use of virtual profiles
  • D. It acts as the single window to SwiftNet messaging services by concentrating your traffic flows

正解:C、D


質問 # 25
Which statement(s) is/are correct about the LSO/RSO accounts on a Swift Alliance Access? (Choose all that apply.)

  • A. Their PKI certificates are stored either on a HSM Token or on a HSM-box
  • B. They are the business profiles that can sign the Swift financial transactions
  • C. They are local Security Officers
  • D. They are responsible for the configuration and management of the security functions of the server

正解:A、C、D


質問 # 26
Which encryption methods are used to secure the communications between the SNL host and HSM boxes?

  • A. NTLS and Telnet
  • B. NTLS and SSH
  • C. MPLS and SSL
  • D. Telnet and SSL

正解:B


質問 # 27
A detailed CSP assessment report has been provided to the Swift user following the assessment. Is a completion letter also mandated to be supplied?

  • A. Yes
  • B. No

正解:A


質問 # 28
The cluster of VPN boxes is also called managed-customer premises equipment (M-CPE).

  • A. FALSE
  • B. TRUE

正解:B


質問 # 29
How are online SwiftNet Security Officers authenticated?

  • A. Via their swift.com account and secure code card
  • B. Via their swift.com account
  • C. Via their PKI certificate

正解:C


質問 # 30
The only type of HSM devices offered by Swift are HSM tokens and HSM boxes.

  • A. FALSE
  • B. TRUE

正解:B


質問 # 31
The Swift user would like to perform their CSP assessment in May for the CSCF version that will only be active as from July the same year. Is it allowed?

  • A. No, an assessment can only be done on the active version of the CSCF
  • B. Yes, the assessment on a particular version can start before the actual activation date

正解:A


質問 # 32
As a Swift CSP Certified Assessor. Swift contacted me to provide evidence on an assessment I have performed. This is required to support their quality assurance validation process. Is it allowed?

  • A. Yes, one of the obligations of the certification programme is that quality assessment can be performed by Swift
  • B. No, it's confidential

正解:A


質問 # 33
What are the conditions required to permit reliance on the compliance conclusion of a control assessed in the previous year? (Choose all that apply.)

  • A. The control compliance conclusion must have already been relied on the past two years
  • B. The control-design and implementation are the same
  • C. The previous assessment was performed on the (correct) CSCF version of the previous year
  • D. The control definition has not changed

正解:B、C、D


質問 # 34
......

CSP-Assessor問題集100パー合格保証には最新のサンプル:https://www.passtest.jp/Swift/CSP-Assessor-shiken.html

あなたを合格させる試験には100%確認済みCSP-Assessor試験問題:https://drive.google.com/open?id=1TBvRbu2Xc56vT2vbWIi21K0Pi5uTh3j1