Get Ready to Boost your Prepare for your CPSA Exam with 52 Questions [Q30-Q45] : Exam for engine : http://blog.test4engine.com

Q30. A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

They may be put into remediation or revoked by the applicable payment brands

They may be put into remediation or revoked by PCI SSC

They may be fined by the applicable payment brands

They may be fined by PCI SSC

Q31. An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?

Payment brands

Issuing banks

Vendor

PCI SSC

Q32. Which of the following must be used by the vendor to protect doors that provide access to buildings containing air conditioning equipment?

Security tape that will leave an observable trace each time a door is opened

Electrical contacts that log each open and close event to a secure system memory

Magnetic contacts that are permanently alarmed and that are connected to the security control-room panels

Physical locks with a limited set of keys under constant supervision by a guard in the security control-room

Q33. Where can misprinted, partially finished cards be shredded?

In any HSA room approved by the security manager

Either in the HSA printing room or destruction room

Only in the HSA destruction room

Either in the HSA destruction room or a loading bay that meets all requirements of a destruction room

Q34. An assessor must provide which of the following to their client at the start of every assessment?

CPSA Feedback Form

Quality Assurance Manual

Attestation of Compliance

Vendor Release Agreement

Q35. Before you go on-site, the vendor’s primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?

Vendor senior management

Payment brands

Affected issuers

PCI SSC

Q36. A vendor uses codes from a chip manufacturer to ‘unlock’ chips and prepare them for use by adding applications and keys. Which of the following best describes this process?

Data creation

Data preparation

Manufacture

Pre-personalization

Q37. A vendor wants to know if they will be penalized if their vault is not compliant. Who should they ask?

PCI SSC

Assessor

Issuing banks

Payment brands

Q38. To liberate a person detected inside of the inner shipping delivery room and stop the alarm, the software monitoring the access-control system must only allow the opening of which door?

The external facing door

The internal facing door

The last activated door

The least secure door

Q39. Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

Adding additional rights to someone’s role to give them access to the mam production vault

Any change to a role that directly affects the security of card products and related components

Hiring someone that will directly interact with the card issuers

Promoting someone to senior management level

Q40. Which of the following security awareness measures is required for compliance?

Annual training on common attack methods

Annual training on use of mantraps

Security awareness exams for all personnel

Security posters must be placed in the facility

Q41. In relation to guards, which of the following must the vendor ensure?

A clear segregation of duties is maintained between production staff and guards

A clear segregation of duties is maintained between guard and reception related job functions

There is always at least one guard on-site, including outside of working hours, to monitor security systems and premises

There is always at least one guard in the HSA and one guard in the security control room at all times

Q42. A vendor is unsure which forms are needed to complete an assessment. Who should they ask?

Assessor

Issuing banks

Payment brands

PCI SSC

Q43. A vendor puts cardholder information into a chip by sliding a payment card through a machine that programs it and verifies the dat a. The chip can make contactless transactions. Which of the following best describes the vendor’s activity?

Card personalization

Host Card Emulation (HCE) provisioning

Secure Element (SE) provisioning

Fulfillment

Q44. You are driving to a vendor for their first assessment. The facility is in a rural area, twenty miles away from the nearest large town. What most concerns you about the location?

The local fire service may not be able to reach the facility within 15 minutes

Law enforcement services may not be able to reach the facility in a timely manner

Power blackouts may affect security systems

There may not be adequate retail outlets, which may cause problems when sourcing lunch items for onsite personnel

Q45. A vendor hosts virtual secure elements holding cardholder information in their data center. When a cardholder makes a purchase, the vendor creates a payment token which is sent to the cardholder’s mobile device. Which of the following best describes the vendor’s activities?

Card personalization

Host Card Emulation (HCE) provisioning

Secure Element (SE) provisioning

Over-the-air (OTA) provisioning