NEW QUESTION 22
A vendor has a list of pre-approved third parties which may be granted access to the facility. Under what circumstances can other third-parties be granted access?

NEW QUESTION 23
Which of the following must every assessor do to maintain their CPSA certification?

NEW QUESTION 24
You wish to check that you are using the most current version of the Card Production requirements. What should you do?

NEW QUESTION 25
Which of these are guards allowed access to?

NEW QUESTION 26
A card production vendor employs a contracted guard service from an outside source. What is one of the responsibilities of the contracted service?

NEW QUESTION 27
Which of the following statements is true in relation to visitor access badges?

NEW QUESTION 28
A vendor receives cardholder information and keys from a bank. The vendor then performs the following:
* Uses its HSM to create keys
* Creates cardholder information specific to each cardholder, including name and PAN
* Formats the data for the hardware that will put it on a card
* Writes it to an encrypted file
Which of the following best describes this process?

NEW QUESTION 29
The receptionist responsible for the entrance and departure of visitors must have which of the following?

NEW QUESTION 30
Which of these is a requirement of the security control room?

NEW QUESTION 31
During an assessment you walk the perimeter of the building with a guard you find an emergency exit door from the facility and ask the guard what is on the other side. The guard can’t remember, and so uses their assigned, secure key to open the door and show you a corridor within the facility. What most concerns you about the situation?

NEW QUESTION 32
If you have a query about a missing field in the card production reporting template, which organization is best-placed to answer it?

NEW QUESTION 33
For each requirement listed in a ROC, which types of findings must have a full narrative response?

NEW QUESTION 34
Which of the following statements is true about the facility’s non-emergency exits?

NEW QUESTION 35
When must HSA motion detectors generate an alarm event?

NEW QUESTION 36
For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

NEW QUESTION 37
The vendor’s technical documentation shows that the alarm system does not send alerts to the security control room. After a discussion you learn that the alarm works perfectly, and sends a clear signal to summon the local police every time an emergency exit is opened. Why might this cause a problem for their assessment?

NEW QUESTION 38
A vendor discovers that a recent shipment of cards is missing a set. Which of the following responses would you expect in a compliant organization?

NEW QUESTION 39
A vendor’s HSA access is enforced by a security turnstile they have a logical access-control system that ensures anti pass-back. The device is functioning correctly. When must the status of the access change?

NEW QUESTION 40
A vendor puts cardholder information into a chip by sliding a payment card through a machine that programs it and verifies the dat a. The chip can make contactless transactions. Which of the following best describes the vendor’s activity?

NEW QUESTION 41
A cardholder wants to make purchases using their phone, so they have their cardholder information programmed into their SIM card using their mobile phone provider. Which of the following best describes this system?