PCI CPSA Card Production Security Assessor (CPSA) Qualification Exam Exam Practice Test Questions

• Question 1

  An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?

  • Payment brands
  • Issuing banks
  • Vendor
  • PCI SSC

  Show Answer Answer: D Next

• Question 2

  A card production vendor employs a contracted guard service from an outside source. What is one of the responsibilities of the contracted service?

  • Provide only certified guards
  • Register their service with the VPA
  • Maintain their own liability insurance in case of losses to card material
  • Undergo their own Card Production assessment and provide evidence of a passing result

  Show Answer Answer: C Next

• Question 3

  An assessor must provide which of the following to their client at the start of every assessment?

  • CPSA Feedback Form
  • Quality Assurance Manual
  • Attestation of Compliance
  • Vendor Release Agreement

  Show Answer Answer: C Next

• Question 4

  For how long must a vendor retain all applicant and employee background information on file?

  • For at least 12 months after termination of the contract of employment
  • For at least 18 months after termination of the contract of employment
  • For at least 24 months after termination of the contract of employment
  • It is not a requirement to store this information beyond termination of the contract

  Show Answer Answer: C Next

• Question 5

  A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

  • They may be put into remediation or revoked by the applicable payment brands
  • They may be put into remediation or revoked by PCI SSC
  • They may be fined by the applicable payment brands
  • They may be fined by PCI SSC

  Show Answer Answer: A Next