PCI CPSA Exam Questions Instant Access - No Installation Required

Question 1

The receptionist responsible for the entrance and departure of visitors must have which of the following?

AA shredder for the destruction of disposable visitor badges

BA constant, open communication channel with a guard

CAn unobstructed view of the reception area at all times

DA means of communicating directly with the visitor while on the premises

Answer : C

Question 2

When must HSA motion detectors generate an alarm event?

AEach time movement is detected

BEach time movement is detected outside of regular business hours

CEach time movement is detected and the access-control system indicates the room is occupied

DEach time movement is detected and the access-control system indicates the room is not occupied

Answer : D

Question 3

Who performs regular AQM audits of CPSA companies?

AIssuing banks

BPayment brands

CPCI SSC

DVendor

Answer : C

Question 4

Which of the following must every assessor do to maintain their CPSA certification?

AComplete annual requalification training or complete 3 assessments for different facilities each year

BEarn and document at least 20 hours of Continuing Professional Education (CPE) over 3 years

CEarn an additional professional certification from List A or B of the Qualification Requirements (QRs)

DSubmit evidence of internal training in a relevant area (as per the QRs)

Answer : B

Question 5

For how long must a vendor retain all applicant and employee background information on file?

AFor at least 12 months after termination of the contract of employment

BFor at least 18 months after termination of the contract of employment

CFor at least 24 months after termination of the contract of employment

DIt is not a requirement to store this information beyond termination of the contract

Answer : C

Question 6

During an assessment you do a walk-through of bringing card products into the HSA using the goods-tools trap. You act as production staff, using an empty cardboard box as the card products. During the process, the guard escorts you, along with the box, into the pre-press room. What is your conclusion?

ACompliant, because the guard escorted you

BCompliant, because the guard ensured that the card product remained under dual control

CNot compliant, because an inventory of the card product did not take place prior to entry

DNot compliant, because the guard escorted you

Answer : B

Question 7

During an assessment you ask to see employee records for employees with access to the HS

AThe records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

AEmployee information, including background checks, must be stored for at least seven years

BEmployee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

CThe vendor must retain the background information for at least 18 months after termination of contract

DThe vendor must only retain background information for all current employees, not for those that have been terminated

Answer : A, A

PCI Card Production Security Assessor (CPSA) Qualification CPSA Exam Questions