Online Access Free CPSA_P_New Practice Test

During an assessment you do a walk-through of bringing card products into the HSA using the goods-tools trap. You act as production staff, using an empty cardboard box as the card products. During the process, the guard escorts you, along with the box, into the pre-press room. What is your conclusion?

• A.Compliant, because the guard escorted you
• B.Not compliant, because the guard escorted you
• C.Not compliant, because an inventory of the card product did not take place prior to entry
• D.Compliant, because the guard ensured that the card product remained under dual control

Where can misprinted, partially finished cards be shredded?

• A.Either in the HSA printing room or destruction room
• B.In any HSA room approved by the security manager
• C.Either in the HSA destruction room or a loading bay that meets all requirements of a destruction room
• D.Only in the HSA destruction room

In which of the following locations must the CCTV and access control servers be located?

• A.Within the secure server room inside of the HSA
• B.Within the SCR or a room with equivalent security
• C.Within the Security Control Room (SCR)
• D.Within a room in the HSA with security controls equivalent to the SCR applied

A vendor receives cardholder information and keys from a bank. The vendor then performs the following:
* Uses its HSM to create keys
* Creates cardholder information specific to each cardholder, including name and PAN
* Formats the data for the hardware that will put it on a card
* Writes it to an encrypted file
Which of the following best describes this process?

• A.Pre-personalization
• B.Data creation
• C.Manufacture
• D.Data preparation

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

• A.Any change to a role that directly affects the security of card products and related components
• B.Promoting someone to senior management level
• C.Hiring someone that will directly interact with the card issuers
• D.Adding additional rights to someone's role to give them access to the mam production vault