Practice CPSA_P_New Exam Online

Question 1

A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

A : They may be put into remediation or revoked by the applicable payment brands

B : They may be put into remediation or revoked by PCI SSC

C : They may be fined by the applicable payment brands

D : They may be fined by PCI SSC

Answer: A

Question 2

For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

A : Until each applicable payment brand has accepted (and signed off) the ROC and AOC

B : As long as the entity under assessment is a client of the CPSA Company

C : 3 years

D : 1 year

Answer: C

Question 3

During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

A : Employee information, including background checks, must be stored for at least seven years

B : Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

C : The vendor must retain the background information for at least 18 months after termination of contract

D : The vendor must only retain background information for all current employees, not for those that have been terminated

Answer: A

Question 4

A card production vendor employs a contracted guard service from an outside source. What is one of the responsibilities of the contracted service?

A : Provide only certified guards

B : Register their service with the VPA

C : Maintain their own liability insurance in case of losses to card material

D : Undergo their own Card Production assessment and provide evidence of a passing result

Answer: C

Question 5

When must HSA motion detectors generate an alarm event?

A : Each time movement is detected

B : Each time movement is detected outside of regular business hours

C : Each time movement is detected and the access-control system indicates the room is occupied

D : Each time movement is detected and the access-control system indicates the room is not occupied

Answer: D

Name:	CPSA Physical New
Exam Code:	CPSA_P_New
Certification:	Card Production Security Assessor
Vendor:	PCI Security Standards Council
Total Questions:	50
Last Updated:	Apr 24, 2024

PCI Security Standards Council CPSA_P_New