Question No. 1

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

AAdding additional rights to someone's role to give them access to the mam production vault

BAny change to a role that directly affects the security of card products and related components

CHiring someone that will directly interact with the card issuers

DPromoting someone to senior management level

Show Answer

Correct Answer: B

Question No. 2

Which of these are guards allowed access to?

AHSAs

BAudit logs

CLoading bays

DPhysical master keys that provide access to card production or provisioning areas

Show Answer

Correct Answer: D

Question No. 3

The receptionist responsible for the entrance and departure of visitors must have which of the following?

AA shredder for the destruction of disposable visitor badges

BA constant, open communication channel with a guard

CAn unobstructed view of the reception area at all times

DA means of communicating directly with the visitor while on the premises

Show Answer

Correct Answer: C

Question No. 4

During an assessment you ask to see employee records for employees with access to the HS

AThe records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

AEmployee information, including background checks, must be stored for at least seven years

BEmployee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

CThe vendor must retain the background information for at least 18 months after termination of contract

DThe vendor must only retain background information for all current employees, not for those that have been terminated

Show Answer

Correct Answer: A, A

Question No. 5

If you have a query about a missing field in the card production reporting template, which organization is best-placed to answer it?

AThe payment brands

BThe vendor

CThe issuer

DPCI SSC

Show Answer

Correct Answer: C

Free PCI CPSA Exam Actual Questions

The questions for CPSA were last updated On Dec 17, 2024