[2023年最新] 高合格率な最新無料CPSA試験問題集アンサーを使おう
CPSA知能問題集PDF！PCI CPSA試験問セット
質問 # 27
An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?
- A. Vendor
- B. Issuing banks
- C. Payment brands
- D. PCI SSC
正解：D
質問 # 28
In which of the following locations must the CCTV and access control servers be located?
- A. Within the Security Control Room (SCR)
- B. Within a room in the HSA with security controls equivalent to the SCR applied
- C. Within the secure server room inside of the HSA
- D. Within the SCR or a room with equivalent security
正解：D
質問 # 29
A vendor is unsure which forms are needed to complete an assessment. Who should they ask?
- A. Assessor
- B. Issuing banks
- C. Payment brands
- D. PCI SSC
正解：D
質問 # 30
A vendor wants to know if they will be penalized if their vault is not compliant. Who should they ask?
- A. Assessor
- B. PCI SSC
- C. Issuing banks
- D. Payment brands
正解：A
質問 # 31
A vendor puts cardholder information into a chip by sliding a payment card through a machine that programs it and verifies the dat a. The chip can make contactless transactions. Which of the following best describes the vendor's activity?
- A. Card personalization
- B. Secure Element (SE) provisioning
- C. Host Card Emulation (HCE) provisioning
- D. Fulfillment
正解：B
質問 # 32
Who is required to approve visitor entry to the HSA or cloud-based provisioning environment?
- A. The head of the vendor facility
- B. The Security Manager, Production Manager, and the head of the vendor facility
- C. The Security Manager
- D. Both the Security Manager and the Production Manager
正解：B
質問 # 33
During an assessment you do a walk-through of bringing card products into the HSA using the goods-tools trap. You act as production staff, using an empty cardboard box as the card products. During the process, the guard escorts you, along with the box, into the pre-press room. What is your conclusion?
- A. Compliant, because the guard ensured that the card product remained under dual control
- B. Compliant, because the guard escorted you
- C. Not compliant, because an inventory of the card product did not take place prior to entry
- D. Not compliant, because the guard escorted you
正解：A
質問 # 34
Which of the following statements is true about the facility's non-emergency exits?
- A. They may be left unlocked when a guard is present
- B. They must be fitted with biometric access-control devices
- C. They must be contact-alarm monitored only when card production activities are taking place
- D. They must be configured to prevent staff tailgating
正解：D
質問 # 35
John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?
- A. If John is involved in card personalization, then he must never be involved in the card shipment process
- B. If John is involved in PIN printing, then he must never be involved in the card shipment process
- C. If John is involved in card personalization then he must not be involved in the printing of the corresponding PINs
- D. If John is involved in card personalization, then he must never be involved in PIN printing
正解：D
質問 # 36
Which of the following statements about unsolicited visitors is true?
- A. They must be registered, their identities confirmed, and must be allocated an escort before entry
- B. They must be able to prove a legitimate reason for their visit prior to entry
- C. They must be turned away
- D. They must complete an NDA before entry is granted
正解：A
質問 # 37
The receptionist responsible for the entrance and departure of visitors must have which of the following?
- A. A shredder for the destruction of disposable visitor badges
- B. A means of communicating directly with the visitor while on the premises
- C. An unobstructed view of the reception area at all times
- D. A constant, open communication channel with a guard
正解：C
質問 # 38
For each requirement listed in a ROC, which types of findings must have a full narrative response?
- A. All types of findings
- B. All types except Not Applicable findings
- C. Non-compliant findings only
- D. New or Closed findings only
正解：B
質問 # 39
An assessor must provide which of the following to their client at the start of every assessment?
- A. Quality Assurance Manual
- B. Attestation of Compliance
- C. CPSA Feedback Form
- D. Vendor Release Agreement
正解：B
質問 # 40
How frequently must alarms on external doors of a card production and provisioning vendor environment be tested?
- A. Every 3 months
- B. Every day
- C. Every month
- D. Every week
正解：A
質問 # 41
A vendor discovers that a recent shipment of cards is missing a set. Which of the following responses would you expect in a compliant organization?
- A. An immediate call is made to the issuer and the VPA who, between them, contact law enforcement and put together a joint statement
- B. A report is requested by the issuer, the vendor sends it to them, and the issuer handles the incident with the local police
- C. After an incident review, the VPA, issuer and law enforcement are all notified within 24 hours
- D. The head of security initiates a meeting, and once the VPA approves the messaging, law enforcement is notified in two days
正解：C
質問 # 42
Which of the following statements is true in relation to visitor access badges?
- A. Unissued visitor access badges must be securely stored
- B. Each visitor entering the facility must be issued and must visibly wear a disposable ID badge that identifies them as a non-employee
- C. Badges with access-controls must not be issued to visitors
- D. Each visitor entering the facility must wear their issued access badge above waist height
正解：B
質問 # 43
Before you go on-site, the vendor's primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?
- A. Vendor senior management
- B. Payment brands
- C. Affected issuers
- D. PCI SSC
正解：D
質問 # 44
Which of these is a requirement of the security control room?
- A. Access must be controlled by a physical key (in case of power-failure)
- B. At least one guard must be present at all times
- C. Access must be monitored in real-time
- D. Dual-control must be used to grant entry
正解：D
質問 # 45
Under which circumstances may boxes containing card stock remain unsealed within the vault?
- A. Where stock from those boxes will be pulled multiple times per day
- B. Always, as long as an accurate inventory is being maintained
- C. This is never permitted
- D. Where the stock from those boxes will be pulled once at the beginning of production
正解：B
質問 # 46
Who performs regular AQM audits of CPSA companies?
- A. Vendor
- B. Issuing banks
- C. Payment brands
- D. PCI SSC
正解：D
質問 # 47
......
PCI CPSA問題集PDFを使ってベストオプションを目指そう：https://jp.fast2test.com/CPSA-premium-file.html