SWIFT Customer Security Programme (CSP) Assessor Certification — Questions and Answers

Question 1: What is a 'false positive' in the context of SWIFT sanctions screening?

A payment where the beneficiary information is missing
A legitimate payment flagged as a potential sanctions match requiring manual review (Correct answer)
A sanctioned transaction that passed screening undetected
A SWIFT message with incorrect formatting that is rejected

Correct answer: A legitimate payment flagged as a potential sanctions match requiring manual review

A false positive occurs when a payment is incorrectly flagged as a sanctions match, requiring compliance staff to investigate and clear the transaction.

Question 2: A bank's treasury team is communicating a new nostro reconciliation discrepancy to a correspondent. Which SWIFT message type is most appropriate for raising this formal query?

MT202COV
MT940
MT103
MT195 (Correct answer)

Correct answer: MT195

MT195 (Queries) is the standard SWIFT message for raising formal inquiries about previous messages, making it appropriate for nostro reconciliation discrepancies.

Question 3: What is 'payment fraud' in the context of SWIFT Business Email Compromise (BEC)?

Fraudsters create fake SWIFT BIC codes to redirect payments
Attackers impersonate executives via email to trick finance staff into making unauthorized SWIFT wire transfers (Correct answer)
Hackers intercept SWIFT messages in transit and alter payment details
Criminals bribe SWIFT employees to approve fraudulent transactions

Correct answer: Attackers impersonate executives via email to trick finance staff into making unauthorized SWIFT wire transfers

BEC scams target employees with access to payment systems, using spoofed emails from executives or vendors to authorize fraudulent SWIFT transfers.

Question 4: Which SWIFT tool provides real-time tracking of payment status and improves transparency in correspondent banking chains?

SWIFT Alliance Gateway
SWIFTRef
SWIFT gpi Tracker (Correct answer)
SWIFT Compliance Analytics

Correct answer: SWIFT gpi Tracker

The SWIFT gpi Tracker gives all banks in a payment chain end-to-end visibility of payment status, fees, and FX rates in real time.

Question 5: What advantage does ISO 20022's enhanced remittance information capability provide over MT messages?

Automatic currency conversion applied between parties
Built-in message encryption for all sensitive fields
Significantly faster processing speeds on SWIFT endpoints
Ability to carry more detailed, structured invoice and payment purpose data (Correct answer)

Correct answer: Ability to carry more detailed, structured invoice and payment purpose data

ISO 20022 allows structured remittance information with invoice-level detail, enabling automated reconciliation that is not possible with MT's limited free-form remittance fields.

Question 6: What is the SWIFT MT900 message used for?

Payment cancellation
Customer statement
Confirmation of credit
Confirmation of debit (Correct answer)

Correct answer: Confirmation of debit

MT900 is a Confirmation of Debit sent by a bank to a financial institution to confirm a debit has been applied to its account.

Question 7: What role does active listening play in Swift practice?

It ensures accurate understanding, demonstrates respect, and improves outcomes (Correct answer)
It wastes time
It means staying silent
It is only for counseling professionals

Correct answer: It ensures accurate understanding, demonstrates respect, and improves outcomes

This is fundamental to Swift practice. It ensures accurate understanding, demonstrates respect, and improves outcomes represents the professional standard for communication in the Swift certification framework.

Question 8: What does the SWIFT Compliance Analytics tool (formerly called Transaction Pattern Analysis) primarily help institutions do?

Automate SEPA payment routing
Calculate capital requirements under Basel III
Benchmark their transaction patterns against peers to identify anomalies (Correct answer)
Detect and report cybersecurity breaches in real time

Correct answer: Benchmark their transaction patterns against peers to identify anomalies

SWIFT Compliance Analytics lets banks compare their traffic patterns against community norms to spot suspicious flows that may indicate AML risk.

Question 9: What does 'de-risking' mean in the correspondent banking context?

Banks terminating correspondent relationships with high-risk jurisdictions or clients to avoid AML exposure (Correct answer)
Reducing SWIFT transaction fees through volume agreements
Migrating from MT to ISO 20022 messages to reduce errors
Applying encryption to reduce cybersecurity risk

Correct answer: Banks terminating correspondent relationships with high-risk jurisdictions or clients to avoid AML exposure

De-risking occurs when banks exit correspondent banking relationships in high-risk regions to avoid regulatory penalties for AML failures.

Question 10: What is the primary purpose of SWIFT's Mandatory Customer Security Controls (MCSCs)?

Define messaging standards for cross-border payments
Establish a baseline of cybersecurity controls all users must implement (Correct answer)
Govern KYC documentation standards
Set liquidity requirements for correspondent banks

Correct answer: Establish a baseline of cybersecurity controls all users must implement

MCSCs define the minimum cybersecurity baseline every SWIFT user must implement and attest to annually under the CSP.

Question 11: You're designing an API for a payment processor. Multiple concrete types (`CreditCard`, `PayPal`, `ApplePay`) must all be usable wherever a `PaymentMethod` is expected. Which Swift mechanism is most appropriate?

A base class that all types subclass
A generic function constrained to Codable
A typealias grouping the three types
A protocol that all types conform to (Correct answer)

Correct answer: A protocol that all types conform to

A `PaymentMethod` protocol defines the contract (e.g., `charge(amount:)`), and each concrete type independently conforms, enabling polymorphism without inheritance hierarchies.

Question 12: You're building a feature flag system. Flags are checked thousands of times per second. A dictionary-backed solution with `String` keys works but a colleague proposes using an enum. What is the runtime advantage?

Enum cases are compared as integers, making switch exhaustive and O(1) with no hashing (Correct answer)
Enums use less memory than Strings on the heap
String keys are O(n) in dictionaries
Enums automatically cache their associated values

Correct answer: Enum cases are compared as integers, making switch exhaustive and O(1) with no hashing

Switching on an enum compiles to an integer comparison or jump table, which is faster and exhaustively checked by the compiler, unlike string-keyed dictionary lookups.

Question 13: What exactly is a sequence?

specific actions for the computer to perform
Is the order in which the commands are given (Correct answer)
is the repeated actions
is the algorithmic thinking skills

Correct answer: Is the order in which the commands are given

In programming, a sequence refers to the specific order in which commands or instructions are given and executed by the computer. The program follows these commands sequentially, one after another, unless control flow statements alter this default order. The correct sequence is vital for a program to function as intended.

Question 14: What is the maximum length of a SWIFT BIC (Business Identifier Code)?

12 characters
11 characters (Correct answer)
8 characters
16 characters

Correct answer: 11 characters

A SWIFT BIC can be either 8 or 11 characters; the 11-character version includes a 3-character branch code.

Question 15: Which US government body administers the most widely referenced sanctions list in SWIFT payment screening?

FinCEN (Financial Crimes Enforcement Network)
FDIC (Federal Deposit Insurance Corporation)
SEC (Securities and Exchange Commission)
OFAC (Office of Foreign Assets Control) (Correct answer)

Correct answer: OFAC (Office of Foreign Assets Control)

OFAC, part of the US Treasury, administers sanctions lists including the SDN (Specially Designated Nationals) list used globally for payment screening.

Question 16: How does a Swift professional communicate risks to stakeholders?

By presenting risks clearly with context, potential impacts, and recommended actions (Correct answer)
Through annual reports only
Using technical jargon only
By minimizing all risks

Correct answer: By presenting risks clearly with context, potential impacts, and recommended actions

This is fundamental to Swift practice. By presenting risks clearly with context, potential impacts, and recommended actions represents the professional standard for risk management in the Swift certification framework.

Question 17: Which SWIFT MT message does the ISO 20022 pacs.008 replace for single customer credit transfers?

MT 102
MT 202
MT 103 (Correct answer)
MT 940

Correct answer: MT 103

The pacs.008 (FI to FI Customer Credit Transfer) is the ISO 20022 equivalent of the MT 103 single customer credit transfer message.

Question 18: What is the primary AML concern with correspondent banking via SWIFT?

SWIFT BIC codes reveal account holder identity
Correspondent banks cannot screen transactions in real time
Nested correspondent relationships can obscure the ultimate originator of funds (Correct answer)
MT messages contain insufficient encryption

Correct answer: Nested correspondent relationships can obscure the ultimate originator of funds

Nested correspondent banking creates chains of banks where the originating customer is hidden, increasing money laundering risk.

Question 19: In UIKit, which method must you call to ensure UI updates happen on the correct thread?

DispatchQueue.global().async
DispatchQueue.main.async (Correct answer)
Thread.detachNewThread
RunLoop.main.run

Correct answer: DispatchQueue.main.async

UIKit is not thread-safe, so all UI mutations must be dispatched to DispatchQueue.main.

Question 20: How should an Swift professional respond to a compliance violation?

Report it promptly, investigate the root cause, and implement corrective actions (Correct answer)
Wait for an external audit to find it
Conceal it if minor
Blame the regulatory framework

Correct answer: Report it promptly, investigate the root cause, and implement corrective actions

This is fundamental to Swift practice. Report it promptly, investigate the root cause, and implement corrective actions represents the professional standard for regulatory in the Swift certification framework.

Question 21: How does continuous improvement apply to Swift quality management?

It applies only to products
It means constant major changes
It is a one-time initiative
It involves ongoing incremental enhancements to processes based on data and feedback (Correct answer)

Correct answer: It involves ongoing incremental enhancements to processes based on data and feedback

This is fundamental to Swift practice. It involves ongoing incremental enhancements to processes based on data and feedback represents the professional standard for quality in the Swift certification framework.

Question 22: Which SWIFT message is used to advise an amendment to a documentary credit?

MT750
MT700
MT710
MT707 (Correct answer)

Correct answer: MT707

MT707 is the Amendment to a Documentary Credit message sent by the issuing bank to notify the advising bank of changes.

Question 23: In the context of SWIFT payment investigations, what timeline standard does gpi set for correspondent banks to respond to payment status inquiries?

Up to 6 months for complex cases
30 business days
Within 24 hours for gpi-member corridors (Correct answer)
No defined timeline under gpi rules

Correct answer: Within 24 hours for gpi-member corridors

SWIFT gpi requires participating banks to provide payment status updates within 24 hours of receiving a gpi payment, setting a clear communication service standard.

Question 24: What is ISO 20022 and why is SWIFT migrating to it?

A richer financial messaging standard replacing MT messages to enable better data and automation (Correct answer)
A security framework for SWIFT network authentication
An international standard for SWIFT BIC code assignment
A compliance standard for cross-border payment reporting

Correct answer: A richer financial messaging standard replacing MT messages to enable better data and automation

ISO 20022 is an XML-based financial messaging standard that carries richer, structured data than legacy MT messages, enabling greater automation and straight-through processing.

Question 25: How should an Swift professional approach a novel situation not covered by standard procedures?

Follow the closest standard procedure exactly
Improvise without documentation
Refuse to proceed
Apply foundational principles, assess risks, consult resources, and document the rationale for decisions (Correct answer)

Correct answer: Apply foundational principles, assess risks, consult resources, and document the rationale for decisions

This is fundamental to Swift practice. Apply foundational principles, assess risks, consult resources, and document the rationale for decisions represents the professional standard for practical in the Swift certification framework.

Question 26: What does 'name matching' in sanctions screening aim to identify?

Beneficiary banks that are not registered SWIFT members
Payments routed through high-risk jurisdictions
Duplicate SWIFT messages from the same sender
Payment parties whose names are similar to or identical to sanctioned individuals or entities (Correct answer)

Correct answer: Payment parties whose names are similar to or identical to sanctioned individuals or entities

Name matching algorithms compare payment party names against sanctions lists, accounting for spelling variations, transliterations, and aliases.

Question 27: What is SWIFT gpi (Global Payments Innovation) designed to improve?

Onboarding of new SWIFT member banks
The formatting of ISO 20022 messages
Speed, transparency, and tracking of cross-border payments (Correct answer)
Security of SWIFT authentication tokens

Correct answer: Speed, transparency, and tracking of cross-border payments

SWIFT gpi enhances cross-border payments by enabling same-day processing, end-to-end tracking, and full fee transparency.

Question 28: What is a 'mule account' in the context of SWIFT fraud?

A SWIFT-monitored account flagged for high transaction volume
A dormant account reactivated to process legitimate backdated payments
An account used exclusively for correspondent banking settlements
A bank account used to receive and quickly forward fraudulent SWIFT payments to obscure the money trail (Correct answer)

Correct answer: A bank account used to receive and quickly forward fraudulent SWIFT payments to obscure the money trail

Mule accounts receive stolen funds from fraudulent SWIFT transfers and immediately move them onward, making it harder for banks to recover the money.

Question 29: How should an Swift professional handle an outcome that differs from expectations?

Analyze contributing factors, document findings, and adjust approach based on lessons learned (Correct answer)
Ignore the discrepancy
Blame external factors
Repeat the same approach

Correct answer: Analyze contributing factors, document findings, and adjust approach based on lessons learned

This is fundamental to Swift practice. Analyze contributing factors, document findings, and adjust approach based on lessons learned represents the professional standard for practical in the Swift certification framework.

Question 30: What is the consequence for a US bank of processing a SWIFT payment involving an OFAC-sanctioned party?

Mandatory upgrade to ISO 20022 messaging
Civil and criminal penalties, including fines up to millions of dollars per violation (Correct answer)
Temporary suspension of SWIFT messaging rights
Required third-party audit of all SWIFT transactions

Correct answer: Civil and criminal penalties, including fines up to millions of dollars per violation

OFAC violations can result in massive civil penalties (up to $1M+ per violation) and criminal prosecution under US law.

Question 31: What is 'KYC' in the context of SWIFT correspondent banking?

Know Your Customer — due diligence on the identity and risk profile of banking clients and counterparties (Correct answer)
Key Yield Certificate — a trade finance instrument
Know Your Counterpart — a SWIFT gpi requirement
Keep Your Credentials — a SWIFT security protocol

Correct answer: Know Your Customer — due diligence on the identity and risk profile of banking clients and counterparties

KYC (Know Your Customer) refers to due diligence processes banks use to verify identities and assess the money laundering risk of clients and correspondent banks.

Question 32: Why is Swift good for game development?

Fast
Accessible
Unsafe
B & D (Correct answer)

Correct answer: B & D

Swift is well-suited for game development because it is both fast and accessible. Its design prioritizes performance, which is crucial for games requiring quick execution and responsiveness. Additionally, Swift's modern syntax, safety features, and strong typing make it relatively accessible for developers, contributing to more efficient development and fewer common programming errors.

Question 33: What is the purpose of sanctions screening in SWIFT payment processing?

To verify that SWIFT BIC codes are registered and active
To confirm that foreign exchange rates are within acceptable ranges
To validate that message formatting meets SWIFT standards
To check payment parties against government-issued lists of prohibited individuals, entities, and countries (Correct answer)

Correct answer: To check payment parties against government-issued lists of prohibited individuals, entities, and countries

Sanctions screening compares payment originators, beneficiaries, and intermediaries against OFAC, UN, EU, and other sanctions lists to prevent prohibited transactions.

Question 34: Which SWIFT security incident led to major reforms in the Customer Security Programme and mandatory control attestation requirements?

The 2010 Greek sovereign debt crisis
The Lehman Brothers collapse in 2008
The Bangladesh Bank heist of 2016 (Correct answer)
The 2013 Target retail data breach

Correct answer: The Bangladesh Bank heist of 2016

The 2016 Bangladesh Bank heist, where $81 million was stolen via fraudulent SWIFT messages, directly prompted SWIFT to launch the CSP with mandatory security controls.

Question 35: What command is used in Swift Playground to collect the jewels?

getGem()
collectJewel()
collectGem() (Correct answer)
getJewel()

Correct answer: collectGem()

In Swift Playgrounds, the `collectGem()` function is the correct and specific command used for the character Byte to pick up a gem (often referred to as a 'jewel'). This function call executes the action of gathering the collectible item within the game environment. The parentheses are essential for invoking the function.

Question 36: Under the SWIFT Customer Security Programme (CSP), what happens if a member institution fails its mandatory attestation?

Supervisory reporting and possible access restrictions (Correct answer)
Reduced transaction limits only
No consequence; attestation is voluntary
Immediate network disconnection

Correct answer: Supervisory reporting and possible access restrictions

Non-attesting institutions face supervisory notification and may have access controls applied, though not automatic disconnection.

Question 37: Which of the following is an example of a developer's error when programming?

Undeclared variables
Extra semicolons
All of the above (Correct answer)
Uninitialized variables

Correct answer: All of the above

All the listed options—extra semicolons, undeclared variables, and uninitialized variables—are common types of errors developers encounter during programming. These issues can lead to syntax errors, compilation failures, or unexpected program behavior, preventing the code from running correctly. Identifying and fixing them is a key part of debugging.

Question 38: Which risk category best describes the exposure a bank faces when a correspondent bank in a foreign country fails due to sovereign default?

Operational risk
Country/sovereign risk (Correct answer)
Settlement risk
Reputational risk

Correct answer: Country/sovereign risk

Country or sovereign risk arises when a foreign government's actions or default impair the ability of counterparties in that jurisdiction to fulfill obligations.

Question 39: What is the role of a SWIFT 'Payment Controls' service in fraud prevention?

Validating SWIFT BIC codes in outgoing messages
Encrypting SWIFT messages before transmission
Real-time monitoring of SWIFT payment flows to detect and stop anomalous transactions before they are processed (Correct answer)
Managing SWIFT network access credentials

Correct answer: Real-time monitoring of SWIFT payment flows to detect and stop anomalous transactions before they are processed

SWIFT Payment Controls provides real-time monitoring of institutions' outbound SWIFT messages, flagging unusual patterns before funds leave the bank.

Question 40: Which approach to correspondent banking risk management does FATF recommend over wholesale de-risking?

Mandatory government guarantees for all correspondent accounts
Limiting correspondent banking to G20 members only
Risk-based approach with enhanced due diligence for higher-risk relationships (Correct answer)
Immediate account closure for any high-risk jurisdiction

Correct answer: Risk-based approach with enhanced due diligence for higher-risk relationships

FATF advocates a risk-based approach where banks apply proportionate controls—including enhanced due diligence—rather than exiting all high-risk relationships.

Question 41: You need a `Stack<T>` collection that works with any type and exposes `push`, `pop`, and `peek`. What is the correct Swift approach?

A protocol with a Self requirement
A generic struct with a private Array<T> backing store (Correct answer)
A class with an Any array property
An enum with associated values for each element

Correct answer: A generic struct with a private Array<T> backing store

A generic struct `Stack<T>` with a private `[T]` backing store is idiomatic Swift: value semantics, type-safe, and zero boxing overhead.

Question 42: What is the first step in risk assessment for Swift professionals?

Implementing controls immediately
Identifying potential hazards and vulnerabilities in the specific context (Correct answer)
Delegating to others
Purchasing insurance

Correct answer: Identifying potential hazards and vulnerabilities in the specific context

This is fundamental to Swift practice. Identifying potential hazards and vulnerabilities in the specific context represents the professional standard for risk management in the Swift certification framework.

Question 43: What is the SWIFT Customer Security Programme (CSP) designed to do?

Standardize KYC documentation across SWIFT members
Manage customer onboarding for new SWIFT members
Strengthen the cybersecurity posture of SWIFT users through mandatory controls (Correct answer)
Provide customer support for SWIFT connectivity issues

Correct answer: Strengthen the cybersecurity posture of SWIFT users through mandatory controls

The CSP establishes mandatory and advisory security controls that all SWIFT users must implement to protect their SWIFT environments.

Question 44: A Swift property wrapper `@Clamped(range: 0...100)` should constrain any `Int` to the given range on set. Which stored property inside the wrapper holds the backing value?

`storedValue` as a special keyword
`projectedValue` accessed via the `$` prefix
`wrappedValue` with a setter that clamps before storing to a private variable (Correct answer)
`rawValue` like a RawRepresentable type

Correct answer: `wrappedValue` with a setter that clamps before storing to a private variable

Property wrappers use `wrappedValue` as the primary interface; a custom setter there can clamp the incoming value before assigning it to a private backing store.

Question 45: Why is evidence-based practice important in Swift?

It replaces experience
It only applies to academic settings
It is a theoretical concept only
It integrates best available evidence with professional expertise for optimal outcomes (Correct answer)

Correct answer: It integrates best available evidence with professional expertise for optimal outcomes

This is fundamental to Swift practice. It integrates best available evidence with professional expertise for optimal outcomes represents the professional standard for research in the Swift certification framework.

Question 46: Which settlement risk concept describes the danger that one party delivers assets but the counterparty defaults before delivering its side in a foreign exchange transaction?

Herstatt risk (principal risk) (Correct answer)
Replacement cost risk
Liquidity gap risk
Roll-over risk

Correct answer: Herstatt risk (principal risk)

Herstatt risk (principal risk) occurs in FX when one leg of the trade is settled but the counterparty fails before completing the other, named after Bankhaus Herstatt's 1974 collapse.

Question 47: In SWIFT messaging, what is the primary role of a Relationship Manager when a correspondent bank raises concerns about transaction delays?

Suspend the correspondent's access pending review
Investigate root causes and provide timely, accurate status updates (Correct answer)
Escalate directly to regulators
Redirect all queries to the compliance team

Correct answer: Investigate root causes and provide timely, accurate status updates

Relationship managers must investigate issues and communicate accurate, timely updates to maintain trust with correspondents.

Question 48: Your app stores user settings with keys like `"theme"`, `"fontSize"`, etc. A teammate suggests using an enum with raw values instead of string literals. What is the primary benefit?

Compile-time safety prevents typos in key names (Correct answer)
String raw values are deprecated in Swift 5
Enums automatically conform to Codable
Enums are stored faster in UserDefaults than strings

Correct answer: Compile-time safety prevents typos in key names

Enum cases with String raw values let the compiler catch misspelled key names, eliminating a class of runtime bugs common with bare string literals.

Question 49: What is the primary purpose of regulatory compliance in Swift practice?

To protect public safety, ensure quality standards, and maintain professional accountability (Correct answer)
To create bureaucratic burden
To benefit regulators only
To limit competition

Correct answer: To protect public safety, ensure quality standards, and maintain professional accountability

This is fundamental to Swift practice. To protect public safety, ensure quality standards, and maintain professional accountability represents the professional standard for regulatory in the Swift certification framework.

Question 50: Which metric is used in SWIFT gpi to measure the speed and transparency of cross-border payments?

SWIFT Availability Index (SAI)
Value-at-Risk (VaR)
Service Level Agreement (SLA) adherence rate (Correct answer)
Correspondent Banking Efficiency Ratio (CBER)

Correct answer: Service Level Agreement (SLA) adherence rate

SWIFT gpi measures bank performance against SLA commitments for payment speed, end-to-end tracking, and fee transparency.

Question 51: In risk management, what does 'de-risking' in correspondent banking primarily refer to?

Hedging currency exposure using derivatives
Reducing capital requirements through risk transfer
Implementing two-factor authentication on payment systems
Banks exiting high-risk correspondent relationships instead of managing the risk (Correct answer)

Correct answer: Banks exiting high-risk correspondent relationships instead of managing the risk

De-risking refers to the practice of banks terminating or restricting correspondent relationships with higher-risk customers or jurisdictions rather than applying risk-based mitigation.

Question 52: A correspondent bank notices that an MT 910 confirmation was received but the corresponding MT 103 was never sent by their institution. What risk event does this most likely indicate?

Potential fraud — an unauthorized payment may have been sent in their name (Correct answer)
FX conversion error in the payment chain
Duplicate message due to SWIFT network retry logic
Nostro reconciliation break caused by timing differences

Correct answer: Potential fraud — an unauthorized payment may have been sent in their name

An unexpected MT 910 confirmation with no matching outgoing MT 103 is a red flag indicating an unauthorized payment may have been executed using the institution's credentials.

Question 53: In SWIFT messaging, what control helps detect whether an MT 103 payment instruction has been tampered with in transit?

LAU (Local Authentication) (Correct answer)
RMA (Relationship Management Application)
Message sequencing
Bilateral Key Exchange (BKE)

Correct answer: LAU (Local Authentication)

LAU (Local Authentication) applies a cryptographic signature to outbound messages, allowing the receiver to verify integrity and authenticity.

Question 54: How do continuing education requirements benefit Swift certified professionals?

They are unnecessary formalities
They only benefit training providers
They reduce practical skills
They ensure professionals stay current with evolving industry practices and knowledge (Correct answer)

Correct answer: They ensure professionals stay current with evolving industry practices and knowledge

This is fundamental to Swift practice. They ensure professionals stay current with evolving industry practices and knowledge represents the professional standard for professional standards in the Swift certification framework.

Question 55: Why is screening Field 59 (Beneficiary) in SWIFT MT103 messages critical for sanctions compliance?

Field 59 contains the sending bank's routing code
The beneficiary is the ultimate recipient of funds and must not be a sanctioned party (Correct answer)
Regulators require this field to be encrypted
Field 59 determines which sanctions list applies

Correct answer: The beneficiary is the ultimate recipient of funds and must not be a sanctioned party

Field 59 identifies who receives the funds, and if the beneficiary is a sanctioned entity, the bank must block the payment.

Question 56: How do Swift professionals contribute to advancing their field?

By competing with colleagues
By conducting research, sharing outcomes, mentoring others, and participating in professional forums (Correct answer)
Individual contribution is not possible
By maintaining current practices

Correct answer: By conducting research, sharing outcomes, mentoring others, and participating in professional forums

This is fundamental to Swift practice. By conducting research, sharing outcomes, mentoring others, and participating in professional forums represents the professional standard for research in the Swift certification framework.

Question 57: A bank processes a payment for a customer that later turns out to be a sanctioned entity not yet on its screening list. Which type of risk has materialized?

Basis risk
Strategic risk
Pure market risk
Regulatory/compliance risk (Correct answer)

Correct answer: Regulatory/compliance risk

Processing a payment for a sanctioned entity exposes the bank to regulatory penalties, fines, and reputational damage—core manifestations of compliance risk.

Question 58: What is the SWIFT Customer Security Controls Framework (CSCF)?

A framework for formatting SWIFT financial messages
A customer onboarding checklist for new SWIFT members
A set of guidelines for ISO 20022 migration
A set of mandatory and advisory security controls all SWIFT users must attest to annually (Correct answer)

Correct answer: A set of mandatory and advisory security controls all SWIFT users must attest to annually

The CSCF defines the security baseline that SWIFT users must meet and self-attest compliance with each year.

Question 59: What does 'typo squatting' in SWIFT payments refer to?

Using incorrect SWIFT message types to bypass validation
Errors in MT message field formatting that cause payment failures
Attackers registering BIC codes similar to legitimate banks
Fraudsters using IBAN or account numbers with minor errors to divert payments to their accounts (Correct answer)

Correct answer: Fraudsters using IBAN or account numbers with minor errors to divert payments to their accounts

Typo squatting involves account numbers or IBANs with deliberate errors designed to redirect payments to fraudster-controlled accounts.

Question 60: A SWIFT member bank receives an MT199 free-format message from a counterparty requesting clarification on a transaction. What is the most appropriate response channel?

Reply via email outside SWIFT
File a formal dispute with SWIFT
Send an MT199 response directly through SWIFT (Correct answer)
Issue a phone call only

Correct answer: Send an MT199 response directly through SWIFT

Free-format queries received via MT199 should be answered with an MT199 response through the SWIFT network to maintain secure, traceable communication.

SWIFT Customer Security Programme (CSP) Assessor Certification

The SWIFT CSP-Assessor certification validates expertise in SWIFT network infrastructure, the Customer Security Controls Framework (CSCF), ISO 20022/MX messaging standards, financial crime prevention (AML), and risk assessment methodologies used by financial institutions on the SWIFT network.

Questions

90 min

Time Limit

72%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy