Question 1

For how long must a vendor retain all applicant and employee background information on file?

Options :

A : For at least 12 months after termination of the contract of employment

B : For at least 18 months after termination of the contract of employment

C : For at least 24 months after termination of the contract of employment

D : It is not a requirement to store this information beyond termination of the contract

Answer: C

Question 2

A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

Options :

A : They may be put into remediation or revoked by the applicable payment brands

B : They may be put into remediation or revoked by PCI SSC

C : They may be fined by the applicable payment brands

D : They may be fined by PCI SSC

Answer: A

Question 3

According to requirement 2.3.6.2, how long must a log of the event be maintained following the apprehension of an unauthorized individual detected by the movement detector, located inside the inner room or the shipping area, when both the intermediate and inner doors are closed and locked?

Options :

A : At least 3 years

B : Permanently

C : At least 2 years

D : Until the incident follow-up is completed

Answer: C

Question 4

For each requirement listed in a ROC, which types of findings must have a full narrative response?

Options :

A : All types of findings

B : Non-compliant findings only

C : New or Closed findings only

D : All types except Not Applicable findings

Answer: D

Question 5

Which of the following events does not necessitate an audible alarm?

Options :

A : Detection of motion in the HSA when it is supposed to be unoccupied

B : Attempting to use an access badge that has been deactivated or reported stolen

C : Security control room door left open for more than 30 seconds

D : Connection loss of CCTV video feed

Answer: B