[Q28-Q43] Real4Prep CPSA Real Exam Question Answers Updated [Jan 15, 2024]

Rate this post

Real4Prep CPSA Real Exam Question Answers Updated [Jan 15, 2024]

Easily To Pass New PCI CPSA Dumps with 52 Questions

QUESTION 28
To liberate a person detected inside of the inner shipping delivery room and stop the alarm, the software monitoring the access-control system must only allow the opening of which door?

The external facing door

The internal facing door

The last activated door

The least secure door

QUESTION 29
If a vendor plans to terminate an employee, which of these must be done?

The employee must be escorted from the premises immediately

The employee’s locker and desk must be searched prior to termination

The Human Resources department must be notified prior to termination

The security manager must be notified in writing prior to termination

QUESTION 30
Which of the following statements is true in relation to visitor access badges?

Each visitor entering the facility must be issued and must visibly wear a disposable ID badge that identifies them as a non-employee

Each visitor entering the facility must wear their issued access badge above waist height

Badges with access-controls must not be issued to visitors

Unissued visitor access badges must be securely stored

QUESTION 31
An assessor must provide which of the following to their client at the start of every assessment?

CPSA Feedback Form

Quality Assurance Manual

Attestation of Compliance

Vendor Release Agreement

QUESTION 32
A cardholder wants to make purchases using their phone, so they have their cardholder information programmed into their SIM card using their mobile phone provider. Which of the following best describes this system?

Card personalization

Host Card Emulation (HCE) provisioning

Secure Element (SE) provisioning

Over-the-air (OTA) provisioning

QUESTION 33
How frequently must alarms on external doors of a card production and provisioning vendor environment be tested?

Every day

Every week

Every month

Every 3 months

QUESTION 34
Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

Adding additional rights to someone’s role to give them access to the mam production vault

Any change to a role that directly affects the security of card products and related components

Hiring someone that will directly interact with the card issuers

Promoting someone to senior management level

QUESTION 35
A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

They may be put into remediation or revoked by the applicable payment brands

They may be put into remediation or revoked by PCI SSC

They may be fined by the applicable payment brands

They may be fined by PCI SSC

QUESTION 36
A vendor receives cardholder information and keys from a bank. The vendor then performs the following:
* Uses its HSM to create keys
* Creates cardholder information specific to each cardholder, including name and PAN
* Formats the data for the hardware that will put it on a card
* Writes it to an encrypted file
Which of the following best describes this process?

Data creation

Data preparation

Manufacture

Pre-personalization

QUESTION 37
Which of the following security awareness measures is required for compliance?

Annual training on common attack methods

Annual training on use of mantraps

Security awareness exams for all personnel

Security posters must be placed in the facility

QUESTION 38
The vendor’s technical documentation shows that the alarm system does not send alerts to the security control room. After a discussion you learn that the alarm works perfectly, and sends a clear signal to summon the local police every time an emergency exit is opened. Why might this cause a problem for their assessment?

If the local police have not been issued with an exterior key. they will not be able to investigate the cause of the alarm and reset it

During working hours, the alarm should be managed in the security control room, or by a central monitoring service

If the local police receive too many false-positive alerts, they may not respond within 15 minutes of the alarm

During busy times, the local police may not be able to respond

QUESTION 39
Before you go on-site, the vendor’s primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?

Vendor senior management

Payment brands

Affected issuers

PCI SSC

QUESTION 40
If you have a query about a missing field in the card production reporting template, which organization is best-placed to answer it?

The payment brands

The vendor

The issuer

PCI SSC

QUESTION 41
Which of the following must be used by the vendor to protect doors that provide access to buildings containing air conditioning equipment?

Security tape that will leave an observable trace each time a door is opened

Electrical contacts that log each open and close event to a secure system memory

Magnetic contacts that are permanently alarmed and that are connected to the security control-room panels

Physical locks with a limited set of keys under constant supervision by a guard in the security control-room

QUESTION 42
Which of the following must every assessor do to maintain their CPSA certification?

Complete annual requalification training or complete 3 assessments for different facilities each year

Earn and document at least 20 hours of Continuing Professional Education (CPE) over 3 years

Earn an additional professional certification from List A or B of the Qualification Requirements (QRs)

Submit evidence of internal training in a relevant area (as per the QRs)

QUESTION 43
An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?

Payment brands

Issuing banks

Vendor

PCI SSC

Loading …

The Card Production Security Assessor (CPSA) program is an important certification program for individuals who work in the card production industry. The CPSA certification exam is a rigorous test designed to assess an individual’s understanding of the CPSR standard and their ability to evaluate the security of card production processes. Individuals who pass the CPSA certification exam are recognized as qualified assessors by the PCI, which allows them to work with card production organizations to evaluate the security of their processes and identify areas of weakness that need to be addressed.

Latest CPSA Study Guides 2024 – With Test Engine PDF: https://www.real4prep.com/CPSA-exam.html