Question 1

For each requirement listed in a ROC, which types of findings must have a full narrative response?

Options :

A : All types of findings

B : Non-compliant findings only

C : New or Closed findings only

D : All types except Not Applicable findings

Answer: D

Question 2

Who is required to approve visitor entry to the HSA or cloud-based provisioning environment?

Options :

A : The head of the vendor facility

B : The Security Manager

C : Both the Security Manager and the Production Manager

D : The Security Manager, Production Manager, and the head of the vendor facility

Answer: D

Question 3

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

Options :

A : Adding additional rights to someone’s role to give them access to the mam production vault

B : Any change to a role that directly affects the security of card products and related components

C : Hiring someone that will directly interact with the card issuers

D : Promoting someone to senior management levell

Answer: B

Question 4

For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

Options :

A : Until each applicable payment brand has accepted (and signed off) the ROC and AOC

B : As long as the entity under assessment is a client of the CPSA Company

C : 3 years

D : 1 year

Answer: C

Question 5

An unauthorized individual called Joseph Cyber Expert intends to gain access to a card production facility by weekend night. His plan involves using a firearm to breach an exterior window, enter via it to the HSA and steal finished cards boxes.According to the PCI Card Production Physical Security Standard (v3.0.1), which of the following is a requirement that can help mitigating this scenario?

Options :

A : Windows are prohibited on exterior walls

B : Continuous guard presence is required in all rooms of the facility

C : The acoustic gunshot detection system (GDS) will activate an alarm

D : The glass-break detectors will activate an alarm

Answer: D