CPSA_P_New Exam Dumps (V8.02) – Pass Your Card Production Security Assessor (CPSA) Physical New Exam

1. A vendor puts cardholder information into a chip by sliding a payment card through a machine that

programs it and verifies the data. The chip can make contactless transactions.

Which of the following best describes the vendor’s activity?

2. You are driving to a vendor for their first assessment. The facility is in a rural area, twenty miles away from the nearest large town.

What most concerns you about the location?

3. A vendor wants to know if they will be penalized if their vault is not compliant. Who should they ask?

4. A vendor receives cardholder information and keys from a bank.

The vendor then performs the following:

* Uses its HSM to create keys

* Creates cardholder information specific to each cardholder, including name and PAN

* Formats the data for the hardware that will put it on a card

* Writes it to an encrypted file

Which of the following best describes this process?

5. An assessor must provide which of the following to their client at the start of every assessment?

6. An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?

7. When must HSA motion detectors generate an alarm event?

8. Which of these is a requirement of the security control room?

9. During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously.

You note this as non- compliant, why?

10. The vendor's technical documentation shows that the alarm system does not send alerts to the security control room. After a discussion you learn that the alarm works perfectly, and sends a clear signal to summon the local police every time an emergency exit is opened.

Why might this cause a problem for their assessment?

11. A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions.

Which of the following are possible outcomes?

12. Where can misprinted, partially finished cards be shredded?

13. A vendor is unsure which forms are needed to complete an assessment. Who should they ask?

14. During an assessment you do a walk-through of bringing card products into the HSA using the goods-tools trap. You act as production staff, using an empty cardboard box as the card products. During the process, the guard escorts you, along with the box, into the pre-press room.

What is your conclusion?

15. Under which circumstances may boxes containing card stock remain unsealed within the vault?