Card Production Security Assessor (CPSA) Qualification Exam (CPSA) Free Practice Test

Question 1

How frequently must alarms on external doors of a card production and provisioning vendor environment be tested?

A. Every 3 months

B. Every month

C. Every week

D. Every day

Correct Answer: A

Question 2

Which of the follow best describes a Technical FAQ?

A. Technical FAQs only apply to the specific technology as the FAQ defines it

B. Use of the Technical FAQs is optional, they are considered guidance

C. Technical FAQs can be submitted to PCI SSC at any time

D. Use of the Technical FAQs is mandatory, they shall be used during an assessment

Correct Answer: B

Question 3

Which of the following statements about unsolicited visitors is true?

A. They must complete an NDA before entry is granted

B. They must be able to prove a legitimate reason for their visit prior to entry

C. They must be turned away

D. They must be registered, their identities confirmed, and must be allocated an escort before entry

Correct Answer: D

Question 4

During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

A. Employee information, including background checks, must be stored for at least seven years

B. The vendor must only retain background information for all current employees, not for those that have been terminated

C. The vendor must retain the background information for at least 18 months after termination of contract

D. Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

Correct Answer: A

Question 5

The receptionist responsible for the entrance and departure of visitors must have which of the following?

A. A constant, open communication channel with a guard

B. An unobstructed view of the reception area at all times

C. A shredder for the destruction of disposable visitor badges

D. A means of communicating directly with the visitor while on the premises

Correct Answer: B

Question 6

After reviewing their completed ROC and AOC, which state that they are compliant, the vendor wishes to be listed on PCI SSC's list of Compliant Card Vendors. How should you assist them with the listing process?

A. Inform the vendor that PCI SSC does not list compliant vendors

B. Submit the full ROC to PCI SSC

C. Submit only the AOC to PCI SSC

D. Inform the vendor that they must request a listing via the payment brand(s) that received their ROC

Correct Answer: D

Welcome to TestSimulate

PCI Card Production Security Assessor (CPSA) Qualification (CPSA) Free Practice Test