SWIFT Customer Security Programme (CSP) Assessor Certification — Questions and Answers

Question 1: In Swift testing, what is the 'Arrange-Act-Assert' (AAA) pattern?

A structure where you set up state, perform an action, then verify the result (Correct answer)
A method for organizing test files into three directories
An Xcode template for generating three test variants
A CI pipeline with three sequential stages

Correct answer: A structure where you set up state, perform an action, then verify the result

AAA structures each test into three phases: Arrange (set up preconditions), Act (execute the code under test), and Assert (verify outcomes).

Question 2: A bank is transitioning from MT to MX (ISO 20022) messaging. Which stakeholder communication challenge is most common during this migration?

Reducing the number of correspondent banking relationships
Ensuring counterparties understand new data field requirements and update their systems accordingly (Correct answer)
Eliminating the need for SWIFT BICs
Convincing regulators to allow legacy MT messages permanently

Correct answer: Ensuring counterparties understand new data field requirements and update their systems accordingly

ISO 20022 introduces richer data fields and structured formats, requiring extensive communication and coordination with counterparties to ensure compatible system updates.

Question 3: What file format do ISO 20022 MX messages use?

JSON (JavaScript Object Notation)
CSV (Comma-Separated Values)
XML (Extensible Markup Language) (Correct answer)
Plain text (ASCII)

Correct answer: XML (Extensible Markup Language)

ISO 20022 MX messages use XML (Extensible Markup Language), enabling richer, structured data compared to the ASCII-based MT format.

Question 4: Which SWIFT tool provides real-time tracking of payment status and improves transparency in correspondent banking chains?

SWIFT gpi Tracker (Correct answer)
SWIFTRef
SWIFT Compliance Analytics
SWIFT Alliance Gateway

Correct answer: SWIFT gpi Tracker

The SWIFT gpi Tracker gives all banks in a payment chain end-to-end visibility of payment status, fees, and FX rates in real time.

Question 5: A `UITableView` delegate method calls a closure stored in a cell's view model. The closure captures `self` (the view controller). What memory issue can arise and how do you fix it?

Thread safety issues; dispatch to the main queue
A retain cycle keeping the view controller alive; capture `self` as `weak` or `unowned` (Correct answer)
Stack overflow from recursive closures; use `@escaping`
A dangling pointer because closures are value types

Correct answer: A retain cycle keeping the view controller alive; capture `self` as `weak` or `unowned`

If the view model's closure strongly captures the view controller, and the view controller owns the view model, a retain cycle forms — breaking it requires `[weak self]` or `[unowned self]`.

Question 6: What is the consequence for a US bank of processing a SWIFT payment involving an OFAC-sanctioned party?

Required third-party audit of all SWIFT transactions
Mandatory upgrade to ISO 20022 messaging
Temporary suspension of SWIFT messaging rights
Civil and criminal penalties, including fines up to millions of dollars per violation (Correct answer)

Correct answer: Civil and criminal penalties, including fines up to millions of dollars per violation

OFAC violations can result in massive civil penalties (up to $1M+ per violation) and criminal prosecution under US law.

Question 7: You're building a feature flag system. Flags are checked thousands of times per second. A dictionary-backed solution with `String` keys works but a colleague proposes using an enum. What is the runtime advantage?

Enums automatically cache their associated values
Enum cases are compared as integers, making switch exhaustive and O(1) with no hashing (Correct answer)
String keys are O(n) in dictionaries
Enums use less memory than Strings on the heap

Correct answer: Enum cases are compared as integers, making switch exhaustive and O(1) with no hashing

Switching on an enum compiles to an integer comparison or jump table, which is faster and exhaustively checked by the compiler, unlike string-keyed dictionary lookups.

Question 8: What exactly is a sequence?

is the repeated actions
is the algorithmic thinking skills
Is the order in which the commands are given (Correct answer)
specific actions for the computer to perform

Correct answer: Is the order in which the commands are given

In programming, a sequence refers to the specific order in which commands or instructions are given and executed by the computer. The program follows these commands sequentially, one after another, unless control flow statements alter this default order. The correct sequence is vital for a program to function as intended.

Question 9: What is the MX equivalent of the MT103 in ISO 20022?

pain.001
pacs.008 (Correct answer)
camt.053
pacs.002

Correct answer: pacs.008

The pacs.008 (FIToFICustomerCreditTransfer) is the ISO 20022 MX equivalent of the MT103 customer credit transfer.

Question 10: Which approach best demonstrates professional competency in Swift practice?

Following only personal preferences
Avoiding challenging situations
Integrating continuing education, practical experience, and evidence-based decision making (Correct answer)
Relying solely on initial training

Correct answer: Integrating continuing education, practical experience, and evidence-based decision making

This is fundamental to Swift practice. Integrating continuing education, practical experience, and evidence-based decision making represents the professional standard for professional standards in the Swift certification framework.

Question 11: Which international body oversees SWIFT's compliance with global financial messaging standards?

The Bank for International Settlements (BIS)
The Financial Action Task Force (FATF) (Correct answer)
The International Monetary Fund (IMF)
The World Bank

Correct answer: The Financial Action Task Force (FATF)

FATF sets the global standards for anti-money laundering and counter-terrorist financing that SWIFT members must follow.

Question 12: What does a SWIFT Business Continuity (BC) plan specifically need to address for messaging infrastructure?

Redundant SWIFT connectivity and failover procedures for service restoration (Correct answer)
Currency hedging strategies during outages
Regulatory capital buffers during system downtime
Staff succession planning for compliance officers

Correct answer: Redundant SWIFT connectivity and failover procedures for service restoration

BC plans must ensure redundant SWIFT connections and documented failover so payment flows can resume quickly after an outage.

Question 13: What does 'typo squatting' in SWIFT payments refer to?

Fraudsters using IBAN or account numbers with minor errors to divert payments to their accounts (Correct answer)
Using incorrect SWIFT message types to bypass validation
Errors in MT message field formatting that cause payment failures
Attackers registering BIC codes similar to legitimate banks

Correct answer: Fraudsters using IBAN or account numbers with minor errors to divert payments to their accounts

Typo squatting involves account numbers or IBANs with deliberate errors designed to redirect payments to fraudster-controlled accounts.

Question 14: What is the SWIFT CSCF (Customer Security Controls Framework)?

A customer onboarding checklist
A framework for SWIFT fee calculation
The technical and operational security baseline that all SWIFT users must self-attest to annually (Correct answer)
A framework for resolving SWIFT message disputes

Correct answer: The technical and operational security baseline that all SWIFT users must self-attest to annually

The CSCF defines mandatory and advisory security controls and requires annual self-attestation by all SWIFT network participants.

Question 15: In a Swift project, what is the purpose of a 'test target' separate from the main app target?

To isolate test code so it doesn't ship with production code (Correct answer)
To generate documentation automatically
To manage app signing certificates
To compile a release build of the app

Correct answer: To isolate test code so it doesn't ship with production code

A separate test target keeps test code out of the production binary, ensuring tests only run in the development/CI environment.

Question 16: Which SWIFT message category is primarily used for financial institution transfers (bank-to-bank) rather than customer payments?

MT 103
MT 900
MT 202 (Correct answer)
MT 950

Correct answer: MT 202

MT 202 messages are used for bank-to-bank transfers, while MT 103 messages carry customer payment instructions.

Question 17: In the context of SWIFT security, what is Relationship Management Application (RMA) used for?

Controlling which institutions can exchange messages with each other (Correct answer)
Monitoring daily payment volume limits
Encrypting message content end-to-end
Managing nostro account reconciliation schedules

Correct answer: Controlling which institutions can exchange messages with each other

RMA is a bilateral authorization mechanism that requires both counterparties to explicitly authorize message exchange, preventing unsolicited message flows.

Question 18: What is the SWIFT Customer Security Programme (CSP) designed to do?

Standardize KYC documentation across SWIFT members
Manage customer onboarding for new SWIFT members
Strengthen the cybersecurity posture of SWIFT users through mandatory controls (Correct answer)
Provide customer support for SWIFT connectivity issues

Correct answer: Strengthen the cybersecurity posture of SWIFT users through mandatory controls

The CSP establishes mandatory and advisory security controls that all SWIFT users must implement to protect their SWIFT environments.

Question 19: What does a SWIFT BIC (Business Identifier Code) uniquely identify?

A single SWIFT transaction
An individual bank customer
A country's central bank only
A specific financial institution and its location (Correct answer)

Correct answer: A specific financial institution and its location

A BIC identifies a specific financial institution, its country, location, and optionally its branch.

Question 20: In Swift UI testing with XCTest, which class is used to represent and interact with the running application?

XCUIApplication (Correct answer)
XCUIScreen
XCUIElement
XCTestCase

Correct answer: XCUIApplication

XCUIApplication represents the app under test and provides methods to launch, terminate, and interact with it during UI tests.

Question 21: Which ISO 20022 message replaces the MT 202 financial institution credit transfer?

pacs.009 (Correct answer)
pacs.004
pacs.010
pacs.002

Correct answer: pacs.009

The pacs.009 (Financial Institution Credit Transfer) is the ISO 20022 replacement for the MT 202, used for bank-to-bank transfers not involving customer funds.

Question 22: A professional handling a high-value transaction notices the originator information (Field 50) is missing from an MT 103. What should they do?

Substitute the correspondent bank's details for the missing originator field
Process the transaction and request the information retroactively
Forward the transaction with a covering note explaining the omission
Reject or hold the payment and request the missing mandatory originator details (Correct answer)

Correct answer: Reject or hold the payment and request the missing mandatory originator details

Field 50 (Ordering Customer) is mandatory in MT 103; processing a payment with missing originator information violates FATF Travel Rule and Swift standards.

Question 23: Which type of transaction monitoring is most effective for detecting SWIFT payment fraud patterns?

Requiring dual-authorization only for payments over $1 million
Blocking all international payments above a fixed threshold
Behavioral analytics that establish baseline payment patterns and flag anomalies (Correct answer)
Manual review of every SWIFT message by compliance staff

Correct answer: Behavioral analytics that establish baseline payment patterns and flag anomalies

Behavioral analytics use machine learning to model normal payment behavior and alert on deviations such as unusual beneficiaries, amounts, or timing.

Question 24: A bank's treasury team is communicating a new nostro reconciliation discrepancy to a correspondent. Which SWIFT message type is most appropriate for raising this formal query?

MT195 (Correct answer)
MT202COV
MT940
MT103

Correct answer: MT195

MT195 (Queries) is the standard SWIFT message for raising formal inquiries about previous messages, making it appropriate for nostro reconciliation discrepancies.

Question 25: What is the consequence of non-compliance for Swift professionals?

Potential fines, license revocation, legal liability, and reputational damage (Correct answer)
Just additional paperwork
No significant consequences
Only verbal warnings

Correct answer: Potential fines, license revocation, legal liability, and reputational damage

This is fundamental to Swift practice. Potential fines, license revocation, legal liability, and reputational damage represents the professional standard for regulatory in the Swift certification framework.

Question 26: What does the FATF Recommendation 16 (the 'Travel Rule') require in SWIFT payments?

Originator and beneficiary information must accompany wire transfers (Correct answer)
Banks must report all international transfers over $10,000
All payments must be processed within 24 hours
SWIFT messages must include a unique transaction hash

Correct answer: Originator and beneficiary information must accompany wire transfers

FATF Recommendation 16 requires that accurate originator and beneficiary information travel with wire transfers throughout the payment chain.

Question 27: Under Wolfsberg Correspondent Banking Principles, what due diligence is required before establishing a new correspondent relationship?

Only name screening against sanctions lists
Approval from the local central bank only
A SWIFT audit of the respondent's messaging infrastructure
Comprehensive KYC/AML due diligence on the respondent bank (Correct answer)

Correct answer: Comprehensive KYC/AML due diligence on the respondent bank

The Wolfsberg Principles require thorough KYC/AML due diligence covering ownership, business model, AML controls, and jurisdiction risk before opening accounts.

Question 28: What does the 'ChargeBearerCode' field in ISO 20022 pacs messages specify?

Who bears the transaction charges, using codes such as DEBT, CRED, SHAR, or SLEV (Correct answer)
The payment processing priority tier assigned by the sending bank
The encryption level applied to fee-related message fields
The credit rating of the institution levying the charge

Correct answer: Who bears the transaction charges, using codes such as DEBT, CRED, SHAR, or SLEV

The ChargeBearerCode (DEBT, CRED, SHAR, SLEV) specifies which party bears the transaction fees, equivalent to field 71A in the MT 103.

Question 29: What distinguishes an MT 202 from an MT 202 COV in the Swift messaging standard?

MT 202 COV includes underlying customer credit transfer details for cover payment transparency (Correct answer)
MT 202 COV is used for higher-value transactions above $1 million
MT 202 COV is encrypted end-to-end while MT 202 uses standard Swift encryption
MT 202 COV requires dual authorization while MT 202 requires single authorization

Correct answer: MT 202 COV includes underlying customer credit transfer details for cover payment transparency

MT 202 COV was introduced to carry information about the underlying customer payment (MT 103) it covers, improving transparency for correspondent banks.

Question 30: Which SWIFT message type is used for a customer credit transfer (single customer payment)?

MT300
MT202
MT103 (Correct answer)
MT700

Correct answer: MT103

MT103 is the standard SWIFT message for single customer credit transfers between financial institutions.

Question 31: What is the professional obligation of a Swift practitioner who identifies a potential gap between their institution's implemented controls and the current CSCF version?

Classify it as low risk if no incidents have occurred and take no action
Immediately document the gap, assess the risk, and initiate a remediation plan (Correct answer)
Report the gap externally to regulators before addressing it internally
Wait until the next annual self-attestation cycle to address the gap

Correct answer: Immediately document the gap, assess the risk, and initiate a remediation plan

Professional competency requires proactive identification and remediation of control gaps, including documentation and risk assessment, not deferral to annual cycles.

Question 32: A US correspondent bank receives an MT910 message. What is the stakeholder communication purpose of this message?

It notifies of a debit to the sender's nostro account
It requests a payment to be made
It confirms that funds have been credited to the recipient's account (Correct answer)
It queries the status of a pending transaction

Correct answer: It confirms that funds have been credited to the recipient's account

MT910 (Confirmation of Credit) notifies the account owner that their account has been credited, serving as a key confirmation in payment communication workflows.

Question 33: Your app stores user settings with keys like `"theme"`, `"fontSize"`, etc. A teammate suggests using an enum with raw values instead of string literals. What is the primary benefit?

Enums automatically conform to Codable
Compile-time safety prevents typos in key names (Correct answer)
String raw values are deprecated in Swift 5
Enums are stored faster in UserDefaults than strings

Correct answer: Compile-time safety prevents typos in key names

Enum cases with String raw values let the compiler catch misspelled key names, eliminating a class of runtime bugs common with bare string literals.

Question 34: Which provision of the USA PATRIOT Act specifically addresses due diligence requirements for US banks maintaining correspondent accounts for foreign institutions?

Section 312 (Correct answer)
Section 314
Section 311
Section 326

Correct answer: Section 312

Section 312 of the USA PATRIOT Act requires US banks to establish due diligence programs for foreign correspondent accounts, with enhanced due diligence for high-risk jurisdictions.

Question 35: What is 'de-risking' in the context of SWIFT and correspondent banking?

Encrypting all SWIFT messages end-to-end
Banks terminating relationships with entire categories of customers or regions to avoid AML risk (Correct answer)
Reducing the number of SWIFT message types used
Installing firewalls on SWIFT infrastructure

Correct answer: Banks terminating relationships with entire categories of customers or regions to avoid AML risk

De-risking occurs when banks exit entire markets or customer segments to avoid regulatory risk, reducing financial inclusion globally.

Question 36: What is the purpose of sanctions screening in SWIFT payment processing?

To confirm that foreign exchange rates are within acceptable ranges
To verify that SWIFT BIC codes are registered and active
To check payment parties against government-issued lists of prohibited individuals, entities, and countries (Correct answer)
To validate that message formatting meets SWIFT standards

Correct answer: To check payment parties against government-issued lists of prohibited individuals, entities, and countries

Sanctions screening compares payment originators, beneficiaries, and intermediaries against OFAC, UN, EU, and other sanctions lists to prevent prohibited transactions.

Question 37: What key data element does ISO 20022 introduce that MT messages lacked?

Automatic routing rules
Encrypted message payloads
Structured legal entity identifiers (LEI) and full remittance information (Correct answer)
Built-in FX conversion rates

Correct answer: Structured legal entity identifiers (LEI) and full remittance information

ISO 20022 supports structured remittance data, LEIs, and purpose codes that enable end-to-end automation and regulatory reporting.

Question 38: How should Swift professionals prioritize identified risks?

Based on likelihood of occurrence combined with severity of potential impact (Correct answer)
Alphabetically
Randomly
By cost to mitigate only

Correct answer: Based on likelihood of occurrence combined with severity of potential impact

This is fundamental to Swift practice. Based on likelihood of occurrence combined with severity of potential impact represents the professional standard for risk management in the Swift certification framework.

Question 39: In risk management, what does 'de-risking' in correspondent banking primarily refer to?

Banks exiting high-risk correspondent relationships instead of managing the risk (Correct answer)
Implementing two-factor authentication on payment systems
Reducing capital requirements through risk transfer
Hedging currency exposure using derivatives

Correct answer: Banks exiting high-risk correspondent relationships instead of managing the risk

De-risking refers to the practice of banks terminating or restricting correspondent relationships with higher-risk customers or jurisdictions rather than applying risk-based mitigation.

Question 40: Which SWIFT message is used to advise an amendment to a documentary credit?

MT710
MT707 (Correct answer)
MT750
MT700

Correct answer: MT707

MT707 is the Amendment to a Documentary Credit message sent by the issuing bank to notify the advising bank of changes.

Question 41: What is a risk mitigation strategy in Swift practice?

Implementing controls that reduce the likelihood or impact of identified risks (Correct answer)
Only addressing risks after they occur
Transferring all responsibility
Ignoring low-probability risks

Correct answer: Implementing controls that reduce the likelihood or impact of identified risks

This is fundamental to Swift practice. Implementing controls that reduce the likelihood or impact of identified risks represents the professional standard for risk management in the Swift certification framework.

Question 42: What is the role of a 'cover payment' (MT 202 COV) in cross-border transactions, and what risk does it create?

It insures the payment against FX losses; risk is currency mismatch
It converts currency automatically; risk is execution slippage
It confirms receipt of funds; risk is duplicate settlement
It moves funds between correspondent banks to cover an MT 103; risk is reduced AML transparency in the interbank leg (Correct answer)

Correct answer: It moves funds between correspondent banks to cover an MT 103; risk is reduced AML transparency in the interbank leg

The MT 202 COV is the interbank funding message accompanying an MT 103, but historically the cover leg lacked originator details, creating AML transparency gaps now addressed by FATF standards.

Question 43: Under the EU's DORA regulation, how does SWIFT network connectivity affect a financial institution's obligations?

DORA applies only to payment processors, not SWIFT users
SWIFT use exempts firms from DORA
Firms must include SWIFT connectivity in their ICT risk management frameworks (Correct answer)
SWIFT itself bears all DORA compliance obligations

Correct answer: Firms must include SWIFT connectivity in their ICT risk management frameworks

DORA requires EU financial entities to manage ICT risks holistically, which includes third-party services like SWIFT connectivity.

Question 44: What is the primary purpose of SWIFT's Mandatory Customer Security Controls (MCSCs)?

Govern KYC documentation standards
Set liquidity requirements for correspondent banks
Define messaging standards for cross-border payments
Establish a baseline of cybersecurity controls all users must implement (Correct answer)

Correct answer: Establish a baseline of cybersecurity controls all users must implement

MCSCs define the minimum cybersecurity baseline every SWIFT user must implement and attest to annually under the CSP.

Question 45: What does the SWIFT Compliance Analytics tool (formerly called Transaction Pattern Analysis) primarily help institutions do?

Benchmark their transaction patterns against peers to identify anomalies (Correct answer)
Automate SEPA payment routing
Detect and report cybersecurity breaches in real time
Calculate capital requirements under Basel III

Correct answer: Benchmark their transaction patterns against peers to identify anomalies

SWIFT Compliance Analytics lets banks compare their traffic patterns against community norms to spot suspicious flows that may indicate AML risk.

Question 46: Which approach to correspondent banking risk management does FATF recommend over wholesale de-risking?

Mandatory government guarantees for all correspondent accounts
Risk-based approach with enhanced due diligence for higher-risk relationships (Correct answer)
Limiting correspondent banking to G20 members only
Immediate account closure for any high-risk jurisdiction

Correct answer: Risk-based approach with enhanced due diligence for higher-risk relationships

FATF advocates a risk-based approach where banks apply proportionate controls—including enhanced due diligence—rather than exiting all high-risk relationships.

Question 47: Which Swift keyword captures a closure's surrounding variables by value rather than by reference?

unowned
weak
@escaping
capture list with `=` syntax (Correct answer)

Correct answer: capture list with `=` syntax

A capture list entry like `[x = x]` copies the current value of `x` into the closure rather than capturing a reference to it.

Question 48: Why is screening Field 59 (Beneficiary) in SWIFT MT103 messages critical for sanctions compliance?

Field 59 contains the sending bank's routing code
Field 59 determines which sanctions list applies
The beneficiary is the ultimate recipient of funds and must not be a sanctioned party (Correct answer)
Regulators require this field to be encrypted

Correct answer: The beneficiary is the ultimate recipient of funds and must not be a sanctioned party

Field 59 identifies who receives the funds, and if the beneficiary is a sanctioned entity, the bank must block the payment.

Question 49: What is a compliance management system in Swift practice?

An optional business tool
A government reporting requirement
A structured framework of policies, procedures, and controls that ensure regulatory adherence (Correct answer)
A software application only

Correct answer: A structured framework of policies, procedures, and controls that ensure regulatory adherence

This is fundamental to Swift practice. A structured framework of policies, procedures, and controls that ensure regulatory adherence represents the professional standard for regulatory in the Swift certification framework.

Question 50: A researcher recruits participants by asking initial participants to refer others from their social networks. This is called:

Systematic sampling
Cluster sampling
Snowball sampling (Correct answer)
Stratified sampling

Correct answer: Snowball sampling

Snowball sampling leverages social networks to recruit hard-to-reach populations, with each participant referring additional participants.

Question 51: A financial institution's Swift operator sends a payment with an incorrect BIC. What is the first corrective action per Swift best practices?

Issue a Swift MT 192 or MT 292 recall/cancellation request (Correct answer)
Contact the beneficiary bank by phone to redirect funds
Send a new payment immediately to the correct BIC
Wait 24 hours for automatic rejection and reprocessing

Correct answer: Issue a Swift MT 192 or MT 292 recall/cancellation request

Swift best practices require using MT 192 (customer) or MT 292 (bank) recall messages to cancel or correct a misdirected payment.

Question 52: What is a key compliance benefit of ISO 20022's structured and longer name/address fields compared to MT messages?

Faster message processing at SWIFT network endpoints
Improved beneficiary identification leading to fewer false positives in sanctions screening (Correct answer)
Reduced data storage requirements for financial institutions
Automatic regulatory reporting submissions to central banks

Correct answer: Improved beneficiary identification leading to fewer false positives in sanctions screening

Structured and complete name/address data in ISO 20022 reduces false positives in AML/sanctions screening by providing unambiguous beneficiary identification.

Question 53: In Core Data integrated with Swift, what is an `NSManagedObjectContext` responsible for?

Encrypting stored data on disk
Defining the data schema
Acting as a scratch pad for creating, fetching, and saving managed objects (Correct answer)
Handling network requests for remote data

Correct answer: Acting as a scratch pad for creating, fetching, and saving managed objects

The `NSManagedObjectContext` is the in-memory workspace where you create, fetch, and modify managed objects before persisting them to the store.

Question 54: Which regulatory framework specifically introduced requirements for banks to identify and assess de-risking impacts caused by withdrawing correspondent banking relationships?

MiFID II
FATF Guidance on Correspondent Banking (Correct answer)
Basel III Pillar 2
PSD2

Correct answer: FATF Guidance on Correspondent Banking

FATF's guidance on correspondent banking explicitly addresses de-risking, urging banks to manage risk proportionately rather than wholesale exit relationships.

Question 55: What does 'statistical significance' (p < 0.05) indicate in research findings?

The sample size was adequate
There is less than a 5% probability the result occurred by chance (Correct answer)
The effect size is large
The intervention is clinically meaningful

Correct answer: There is less than a 5% probability the result occurred by chance

A p-value below 0.05 means there is less than a 5% probability the observed result is due to random chance alone.

Question 56: A social worker uses a manualized treatment protocol with demonstrated effectiveness. This approach BEST exemplifies:

Clinical intuition
Evidence-based practice (Correct answer)
Theoretical orientation
Practice wisdom

Correct answer: Evidence-based practice

Evidence-based practice integrates the best available research evidence with clinical expertise and client values to guide intervention decisions.

Question 57: In SWIFT messaging, what is the primary role of a Relationship Manager when a correspondent bank raises concerns about transaction delays?

Investigate root causes and provide timely, accurate status updates (Correct answer)
Suspend the correspondent's access pending review
Escalate directly to regulators
Redirect all queries to the compliance team

Correct answer: Investigate root causes and provide timely, accurate status updates

Relationship managers must investigate issues and communicate accurate, timely updates to maintain trust with correspondents.

Question 58: A fraudster gains access to an operator's SWIFT credentials and sends unauthorized MT 202 COV messages. Which control layer would most directly prevent message transmission?

Network-level TLS encryption
Monthly credential rotation policy
Four-eyes principle (dual authorization) on payment release (Correct answer)
IP whitelisting of back-office systems

Correct answer: Four-eyes principle (dual authorization) on payment release

A dual-authorization (four-eyes) requirement means no single operator can release a payment alone, directly blocking unauthorized single-person transmission.

Question 59: What is the purpose of regular risk reviews in Swift practice?

To identify new risks, evaluate control effectiveness, and update mitigation strategies (Correct answer)
To reduce workload
To generate reports
To satisfy auditors only

Correct answer: To identify new risks, evaluate control effectiveness, and update mitigation strategies

This is fundamental to Swift practice. To identify new risks, evaluate control effectiveness, and update mitigation strategies represents the professional standard for risk management in the Swift certification framework.

Question 60: A bank implements a daily payment cap on its SWIFT outbound messages. Which category of risk control is this?

Compensating control
Preventive control (Correct answer)
Detective control
Corrective control

Correct answer: Preventive control

A payment cap prevents excessive or unauthorized transactions from occurring in the first place, making it a preventive control.

SWIFT Customer Security Programme (CSP) Assessor Certification

The SWIFT CSP-Assessor certification validates expertise in SWIFT network infrastructure, the Customer Security Controls Framework (CSCF), ISO 20022/MX messaging standards, financial crime prevention (AML), and risk assessment methodologies used by financial institutions on the SWIFT network.

Questions

35 min

Time Limit

72%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds