Download Free PCI CPSA Real Exam Questions Download
Latest PCI CPSA Real Exam Dumps PDF
NEW QUESTION # 14
A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?
- A. They may be put into remediation or revoked by PCI SSC
- B. They may be fined by PCI SSC
- C. They may be put into remediation or revoked by the applicable payment brands
- D. They may be fined by the applicable payment brands
Answer: C
NEW QUESTION # 15
Which of the following statements about unsolicited visitors is true?
- A. They must be registered, their identities confirmed, and must be allocated an escort before entry
- B. They must be able to prove a legitimate reason for their visit prior to entry
- C. They must complete an NDA before entry is granted
- D. They must be turned away
Answer: A
NEW QUESTION # 16
Where can misprinted, partially finished cards be shredded?
- A. Either in the HSA printing room or destruction room
- B. In any HSA room approved by the security manager
- C. Only in the HSA destruction room
- D. Either in the HSA destruction room or a loading bay that meets all requirements of a destruction room
Answer: D
NEW QUESTION # 17
A vendor has a list of pre-approved third parties which may be granted access to the facility. Under what circumstances can other third-parties be granted access?
- A. When no card production activities are taking place
- B. When the third party s liability insurance covers the risk
- C. When they are approved by the physical security manager or senior management
- D. None, only people on the pre-approved list may enter
Answer: C
NEW QUESTION # 18
A vendor uses codes from a chip manufacturer to 'unlock' chips and prepare them for use by adding applications and keys. Which of the following best describes this process?
- A. Data creation
- B. Manufacture
- C. Data preparation
- D. Pre-personalization
Answer: D
NEW QUESTION # 19
For how long must a vendor retain all applicant and employee background information on file?
- A. For at least 18 months after termination of the contract of employment
- B. It is not a requirement to store this information beyond termination of the contract
- C. For at least 12 months after termination of the contract of employment
- D. For at least 24 months after termination of the contract of employment
Answer: D
NEW QUESTION # 20
Under which circumstances may boxes containing card stock remain unsealed within the vault?
- A. This is never permitted
- B. Always, as long as an accurate inventory is being maintained
- C. Where the stock from those boxes will be pulled once at the beginning of production
- D. Where stock from those boxes will be pulled multiple times per day
Answer: B
NEW QUESTION # 21
Who performs regular AQM audits of CPSA companies?
- A. Payment brands
- B. Vendor
- C. PCI SSC
- D. Issuing banks
Answer: C
NEW QUESTION # 22
Which of the follow best describes a Technical FAQ?
- A. Technical FAQs only apply to the specific technology as the FAQ defines it
- B. Use of the Technical FAQs is mandatory, they shall be used during an assessment
- C. Use of the Technical FAQs is optional, they are considered guidance
- D. Technical FAQs can be submitted to PCI SSC at any time
Answer: C
NEW QUESTION # 23
An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?
- A. Payment brands
- B. Vendor
- C. PCI SSC
- D. Issuing banks
Answer: C
NEW QUESTION # 24
A vendor puts cardholder information into a chip by sliding a payment card through a machine that programs it and verifies the dat a. The chip can make contactless transactions. Which of the following best describes the vendor's activity?
- A. Host Card Emulation (HCE) provisioning
- B. Fulfillment
- C. Card personalization
- D. Secure Element (SE) provisioning
Answer: D
NEW QUESTION # 25
John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?
- A. If John is involved in card personalization, then he must never be involved in the card shipment process
- B. If John is involved in PIN printing, then he must never be involved in the card shipment process
- C. If John is involved in card personalization then he must not be involved in the printing of the corresponding PINs
- D. If John is involved in card personalization, then he must never be involved in PIN printing
Answer: D
NEW QUESTION # 26
Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?
- A. Adding additional rights to someone's role to give them access to the mam production vault
- B. Hiring someone that will directly interact with the card issuers
- C. Any change to a role that directly affects the security of card products and related components
- D. Promoting someone to senior management level
Answer: C
NEW QUESTION # 27
After reviewing their completed ROC and AOC, which state that they are compliant, the vendor wishes to be listed on PCI SSC's list of Compliant Card Vendors. How should you assist them with the listing process?
- A. Inform the vendor that PCI SSC does not list compliant vendors
- B. Inform the vendor that they must request a listing via the payment brand(s) that received their ROC
- C. Submit the full ROC to PCI SSC
- D. Submit only the AOC to PCI SSC
Answer: B
NEW QUESTION # 28
A vendor discovers that a recent shipment of cards is missing a set. Which of the following responses would you expect in a compliant organization?
- A. The head of security initiates a meeting, and once the VPA approves the messaging, law enforcement is notified in two days
- B. After an incident review, the VPA, issuer and law enforcement are all notified within 24 hours
- C. A report is requested by the issuer, the vendor sends it to them, and the issuer handles the incident with the local police
- D. An immediate call is made to the issuer and the VPA who, between them, contact law enforcement and put together a joint statement
Answer: B
NEW QUESTION # 29
......
PDF (New 2023) Actual PCI CPSA Exam Questions: https://actualtests.passsureexam.com/CPSA-pass4sure-exam-dumps.html