CPSA試験無料問題集（52題）「PCI Card Production Security Assessor (CPSA) Qualification 認定」

出題：1

Who is required to approve visitor entry to the HSA or cloud-based provisioning environment?

A. The head of the vendor facility

B. Both the Security Manager and the Production Manager

C. The Security Manager

D. The Security Manager, Production Manager, and the head of the vendor facility

正解：D 解答を投票する

出題：2

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

A. Hiring someone that will directly interact with the card issuers

B. Any change to a role that directly affects the security of card products and related components

C. Adding additional rights to someone's role to give them access to the mam production vault

D. Promoting someone to senior management level

正解：B 解答を投票する

出題：3

For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

A. 1 year

B. 3 years

C. Until each applicable payment brand has accepted (and signed off) the ROC and AOC

D. As long as the entity under assessment is a client of the CPSA Company

正解：B 解答を投票する

出題：4

You wish to check that you are using the most current version of the Card Production requirements. What should you do?

A. Email a request for the document to PCI SSC

B. View it directly via PCI SSC Assessor Portal

C. Have the CPSA Company's point of contact request the document

D. Download it from PCI SSC's Document Library

正解：D 解答を投票する

出題：5

A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

A. They may be put into remediation or revoked by the applicable payment brands

B. They may be put into remediation or revoked by PCI SSC

C. They may be fined by PCI SSC

D. They may be fined by the applicable payment brands

正解：A 解答を投票する

出題：6

The vendor's technical documentation shows that the alarm system does not send alerts to the security control room. After a discussion you learn that the alarm works perfectly, and sends a clear signal to summon the local police every time an emergency exit is opened. Why might this cause a problem for their assessment?

A. During working hours, the alarm should be managed in the security control room, or by a central monitoring service

B. If the local police have not been issued with an exterior key. they will not be able to investigate the cause of the alarm and reset it

C. If the local police receive too many false-positive alerts, they may not respond within 15 minutes of the alarm

D. During busy times, the local police may not be able to respond

正解：C 解答を投票する

CPSA試験無料問題集「PCI Card Production Security Assessor (CPSA) Qualification 認定」