Question 1

According to requirement 2.3.6.2, how long must a log of the event be maintained following the apprehension of an unauthorized individual detected by the movement detector, located inside the inner room or the shipping area, when both the intermediate and inner doors are closed and locked?

Options :

A : At least 3 years

B : Permanently

C : At least 2 years

D : Until the incident follow-up is completed

Answer: C

Question 2

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

Options :

A : Adding additional rights to someone’s role to give them access to the mam production vault

B : Any change to a role that directly affects the security of card products and related components

C : Hiring someone that will directly interact with the card issuers

D : Promoting someone to senior management levell

Answer: B

Question 3

Which of the following events does not necessitate an audible alarm?

Options :

A : Detection of motion in the HSA when it is supposed to be unoccupied

B : Attempting to use an access badge that has been deactivated or reported stolen

C : Security control room door left open for more than 30 seconds

D : Connection loss of CCTV video feed

Answer: B

Question 4

CCTV cameras should not have zoom or scanning functionality in which of the following locations?

Options :

A : PIN-mailer room

B : Cloud-based provisioning areas

C : Work In Progress room (WIP)

D : Vault

E : Destruction room

F : Security Control Room (SCR)

Answer: A

Question 5

A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

Options :

A : They may be put into remediation or revoked by the applicable payment brands

B : They may be put into remediation or revoked by PCI SSC

C : They may be fined by the applicable payment brands

D : They may be fined by PCI SSC

Answer: A