100% Passing Guarantee - Brilliant CPSA Exam Questions PDF [Oct-2023]
CPSA Dumps 2023 - NewPCI CPSA Exam Questions
PCI CPSA or Card Production Security Assessor Qualification, is an exam designed for professionals who want to become qualified security assessors for card production organizations. CPSA exam is administered by the Payment Card Industry Security Standards Council (PCI SSC), and it focuses on providing a comprehensive understanding of the security requirements for card production organizations. The PCI CPSA exam is a globally recognized certification, and it is highly valued by employers who want to ensure that their card production processes meet the highest security standards.
NEW QUESTION # 23
A card production vendor employs a contracted guard service from an outside source. What is one of the responsibilities of the contracted service?
- A. Provide only certified guards
- B. Maintain their own liability insurance in case of losses to card material
- C. Register their service with the VPA
- D. Undergo their own Card Production assessment and provide evidence of a passing result
Answer: B
NEW QUESTION # 24
An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?
- A. Vendor
- B. PCI SSC
- C. Payment brands
- D. Issuing banks
Answer: B
NEW QUESTION # 25
Before you go on-site, the vendor's primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?
- A. PCI SSC
- B. Vendor senior management
- C. Payment brands
- D. Affected issuers
Answer: A
NEW QUESTION # 26
A vendor wants to know if they will be penalized if their vault is not compliant. Who should they ask?
- A. Assessor
- B. PCI SSC
- C. Payment brands
- D. Issuing banks
Answer: A
NEW QUESTION # 27
You wish to check that you are using the most current version of the Card Production requirements. What should you do?
- A. Email a request for the document to PCI SSC
- B. Have the CPSA Company's point of contact request the document
- C. Download it from PCI SSC's Document Library
- D. View it directly via PCI SSC Assessor Portal
Answer: C
NEW QUESTION # 28
Which document describes the results of an assessment, and is signed by both the assessor and the vendor executive officer?
- A. Attestation of Compliance (AOC)
- B. Letter of Approval (LOA)
- C. Report on Compliance (ROC)
- D. Security Assessment Questionnaire (SAQ)
Answer: C
NEW QUESTION # 29
During an assessment you do a walk-through of bringing card products into the HSA using the goods-tools trap. You act as production staff, using an empty cardboard box as the card products. During the process, the guard escorts you, along with the box, into the pre-press room. What is your conclusion?
- A. Not compliant, because the guard escorted you
- B. Compliant, because the guard escorted you
- C. Compliant, because the guard ensured that the card product remained under dual control
- D. Not compliant, because an inventory of the card product did not take place prior to entry
Answer: C
NEW QUESTION # 30
For how long must a vendor retain all applicant and employee background information on file?
- A. It is not a requirement to store this information beyond termination of the contract
- B. For at least 24 months after termination of the contract of employment
- C. For at least 12 months after termination of the contract of employment
- D. For at least 18 months after termination of the contract of employment
Answer: B
NEW QUESTION # 31
Which of these are guards allowed access to?
- A. Audit logs
- B. Physical master keys that provide access to card production or provisioning areas
- C. HSAs
- D. Loading bays
Answer: B
NEW QUESTION # 32
John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?
- A. If John is involved in card personalization, then he must never be involved in PIN printing
- B. If John is involved in PIN printing, then he must never be involved in the card shipment process
- C. If John is involved in card personalization then he must not be involved in the printing of the corresponding PINs
- D. If John is involved in card personalization, then he must never be involved in the card shipment process
Answer: A
NEW QUESTION # 33
Who performs regular AQM audits of CPSA companies?
- A. Vendor
- B. PCI SSC
- C. Payment brands
- D. Issuing banks
Answer: B
NEW QUESTION # 34
For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?
- A. 1 year
- B. As long as the entity under assessment is a client of the CPSA Company
- C. Until each applicable payment brand has accepted (and signed off) the ROC and AOC
- D. 3 years
Answer: D
NEW QUESTION # 35
Which of the follow best describes a Technical FAQ?
- A. Technical FAQs only apply to the specific technology as the FAQ defines it
- B. Use of the Technical FAQs is mandatory, they shall be used during an assessment
- C. Use of the Technical FAQs is optional, they are considered guidance
- D. Technical FAQs can be submitted to PCI SSC at any time
Answer: C
NEW QUESTION # 36
During an assessment you walk the perimeter of the building with a guard you find an emergency exit door from the facility and ask the guard what is on the other side. The guard can't remember, and so uses their assigned, secure key to open the door and show you a corridor within the facility. What most concerns you about the situation?
- A. The guard should have sought permission from their manager before opening the door
- B. The exit door should not lead into the facility
- C. The guard should not have forgotten where the door leads to
- D. The exit door should not be capable of being opened from the outside
Answer: A
NEW QUESTION # 37
Which of the following principles must be enforce by the HSA Access Control system?
- A. Dual guard entry when required
- B. Dual presence
- C. Dual control
- D. Dual control and dual presence
Answer: D
NEW QUESTION # 38
The receptionist responsible for the entrance and departure of visitors must have which of the following?
- A. A shredder for the destruction of disposable visitor badges
- B. A means of communicating directly with the visitor while on the premises
- C. A constant, open communication channel with a guard
- D. An unobstructed view of the reception area at all times
Answer: D
NEW QUESTION # 39
In which of the following locations must the CCTV and access control servers be located?
- A. Within the SCR or a room with equivalent security
- B. Within the Security Control Room (SCR)
- C. Within the secure server room inside of the HSA
- D. Within a room in the HSA with security controls equivalent to the SCR applied
Answer: A
NEW QUESTION # 40
Under which circumstances may boxes containing card stock remain unsealed within the vault?
- A. This is never permitted
- B. Where the stock from those boxes will be pulled once at the beginning of production
- C. Always, as long as an accurate inventory is being maintained
- D. Where stock from those boxes will be pulled multiple times per day
Answer: C
NEW QUESTION # 41
Where can misprinted, partially finished cards be shredded?
- A. In any HSA room approved by the security manager
- B. Only in the HSA destruction room
- C. Either in the HSA printing room or destruction room
- D. Either in the HSA destruction room or a loading bay that meets all requirements of a destruction room
Answer: D
NEW QUESTION # 42
Which of these is a requirement of the security control room?
- A. Access must be controlled by a physical key (in case of power-failure)
- B. At least one guard must be present at all times
- C. Access must be monitored in real-time
- D. Dual-control must be used to grant entry
Answer: D
NEW QUESTION # 43
......
Free CPSA braindumps download: https://validdumps.free4torrent.com/CPSA-valid-dumps-torrent.html