Get The Important Preparation Guide With CPSA_P_New Dumps [Q17-Q40]

NEW QUESTION 17
A card production vendor employs a contracted guard service from an outside source. What is one of the responsibilities of the contracted service?

Provide only certified guards

Register their service with the VPA

Maintain their own liability insurance in case of losses to card material

Undergo their own Card Production assessment and provide evidence of a passing result

NEW QUESTION 18
In which of the following locations must the CCTV and access control servers be located?

Within the secure server room inside of the HSA

Within the Security Control Room (SCR)

Within a room in the HSA with security controls equivalent to the SCR applied

Within the SCR or a room with equivalent security

NEW QUESTION 19
Who performs regular AQM audits of CPSA companies?

Issuing banks

Payment brands

PCI SSC

Vendor

NEW QUESTION 20
A vendor’s HSA access is enforced by a security turnstile they have a logical access-control system that ensures anti pass-back. The device is functioning correctly. When must the status of the access change?

Only when an unauthorised badge is presented

Only when the person has successfully completed the access cycle

Upon initial entry of the person into the device, prior to completion of the access cycle

Upon initial presentation of an authorised badge, prior to completion of the access cycle

NEW QUESTION 21
Who is required to approve visitor entry to the HSA or cloud-based provisioning environment?

The head of the vendor facility

The Security Manager

Both the Security Manager and the Production Manager

The Security Manager, Production Manager, and the head of the vendor facility

NEW QUESTION 22
Which of the follow best describes a Technical FAQ?

Technical FAQs only apply to the specific technology as the FAQ defines it

Technical FAQs can be submitted to PCI SSC at any time

Use of the Technical FAQs is mandatory, they shall be used during an assessment

Use of the Technical FAQs is optional, they are considered guidance

NEW QUESTION 23
The vendor’s technical documentation shows that the alarm system does not send alerts to the security control room. After a discussion you learn that the alarm works perfectly, and sends a clear signal to summon the local police every time an emergency exit is opened. Why might this cause a problem for their assessment?

If the local police have not been issued with an exterior key. they will not be able to investigate the cause of the alarm and reset it

During working hours, the alarm should be managed in the security control room, or by a central monitoring service

If the local police receive too many false-positive alerts, they may not respond within 15 minutes of the alarm

During busy times, the local police may not be able to respond

NEW QUESTION 24
During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

Employee information, including background checks, must be stored for at least seven years

Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

The vendor must retain the background information for at least 18 months after termination of contract

The vendor must only retain background information for all current employees, not for those that have been terminated

NEW QUESTION 25
Which of the following must every assessor do to maintain their CPSA certification?

Complete annual requalification training or complete 3 assessments for different facilities each year

Earn and document at least 20 hours of Continuing Professional Education (CPE) over 3 years

Earn an additional professional certification from List A or B of the Qualification Requirements (QRs)

Submit evidence of internal training in a relevant area (as per the QRs)

NEW QUESTION 26
A vendor discovers that a recent shipment of cards is missing a set. Which of the following responses would you expect in a compliant organization?

An immediate call is made to the issuer and the VPA who, between them, contact law enforcement and put together a joint statement

The head of security initiates a meeting, and once the VPA approves the messaging, law enforcement is notified in two days

A report is requested by the issuer, the vendor sends it to them, and the issuer handles the incident with the local police

After an incident review, the VPA, issuer and law enforcement are all notified within 24 hours

NEW QUESTION 27
An assessor must provide which of the following to their client at the start of every assessment?

CPSA Feedback Form

Quality Assurance Manual

Attestation of Compliance

Vendor Release Agreement

NEW QUESTION 28
For how long must a vendor retain all applicant and employee background information on file?

For at least 12 months after termination of the contract of employment

For at least 18 months after termination of the contract of employment

For at least 24 months after termination of the contract of employment

It is not a requirement to store this information beyond termination of the contract

NEW QUESTION 29
Which of the following security awareness measures is required for compliance?

Annual training on common attack methods

Annual training on use of mantraps

Security awareness exams for all personnel

Security posters must be placed in the facility

NEW QUESTION 30
For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

Until each applicable payment brand has accepted (and signed off) the ROC and AOC

As long as the entity under assessment is a client of the CPSA Company

3 years

1 year

NEW QUESTION 31
When must HSA motion detectors generate an alarm event?

Each time movement is detected

Each time movement is detected outside of regular business hours

Each time movement is detected and the access-control system indicates the room is occupied

Each time movement is detected and the access-control system indicates the room is not occupied

NEW QUESTION 32
A vendor puts cardholder information into a chip by sliding a payment card through a machine that programs it and verifies the data. The chip can make contactless transactions. Which of the following best describes the vendor’s activity?

Card personalization

Host Card Emulation (HCE) provisioning

Secure Element (SE) provisioning

Fulfillment

NEW QUESTION 33
A cardholder wants to make purchases using their phone, so they have their cardholder information programmed into their SIM card using their mobile phone provider. Which of the following best describes this system?

Card personalization

Host Card Emulation (HCE) provisioning

Secure Element (SE) provisioning

Over-the-air (OTA) provisioning

NEW QUESTION 34
John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?

If John is involved in card personalization then he must not be involved in the printing of the corresponding PINs

If John is involved in card personalization, then he must never be involved in the card shipment process

If John is involved in card personalization, then he must never be involved in PIN printing

If John is involved in PIN printing, then he must never be involved in the card shipment process

NEW QUESTION 35
A vendor is unsure which forms are needed to complete an assessment. Who should they ask?

Assessor

Issuing banks

Payment brands

PCI SSC

NEW QUESTION 36
If a vendor plans to terminate an employee, which of these must be done?

The employee must be escorted from the premises immediately

The employee’s locker and desk must be searched prior to termination

The Human Resources department must be notified prior to termination

The security manager must be notified in writing prior to termination

NEW QUESTION 37
Under which circumstances may boxes containing card stock remain unsealed within the vault?

Where stock from those boxes will be pulled multiple times per day

Where the stock from those boxes will be pulled once at the beginning of production

Always, as long as an accurate inventory is being maintained

This is never permitted

Actual Test Materials

Get The Important Preparation Guide With CPSA_P_New Dumps [Q17-Q40]

Byadmin

By admin

Related Post

Leave a Reply Cancel reply

you might like

Validate your Sales-Cloud-Consultant Exam Preparation with Sales-Cloud-Consultant Practice Test (Online & Offline) [Q41-Q58]

Get Aug-2026 updated Exam DP-300 Dumps with New Questions [Q201-Q225]

[Aug 23, 2026] Download Free Oracle 1Z0-1151-25 Real Exam Questions [Q22-Q42]

[Aug 22, 2026] Pass Your Copado-Extension-Builder Dumps Free Latest Copado Practice Tests [Q21-Q39]

Actual Test Materials