Question No. 1

For how long must a vendor retain all applicant and employee background information on file?

AFor at least 12 months after termination of the contract of employment

BFor at least 18 months after termination of the contract of employment

CFor at least 24 months after termination of the contract of employment

DIt is not a requirement to store this information beyond termination of the contract

Show Answer

Correct Answer: C

Question No. 2

A vendor is unsure which forms are needed to complete an assessment. Who should they ask?

AAssessor

BIssuing banks

CPayment brands

DPCI SSC

Show Answer

Correct Answer: D

Question No. 3

Where can misprinted, partially finished cards be shredded?

AIn any HSA room approved by the security manager

BEither in the HSA printing room or destruction room

COnly in the HSA destruction room

DEither in the HSA destruction room or a loading bay that meets all requirements of a destruction room

Show Answer

Correct Answer: D

Question No. 4

Which of the following statements about unsolicited visitors is true?

AThey must be turned away

BThey must complete an NDA before entry is granted

CThey must be able to prove a legitimate reason for their visit prior to entry

DThey must be registered, their identities confirmed, and must be allocated an escort before entry

Show Answer

Correct Answer: D

Question No. 5

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

AAdding additional rights to someone's role to give them access to the mam production vault

BAny change to a role that directly affects the security of card products and related components

CHiring someone that will directly interact with the card issuers

DPromoting someone to senior management level

Show Answer

Correct Answer: B

Free PCI CPSA Exam Actual Questions