PCI CPSA Quiz 1 Topic 1 Questions 1-5

Question: 1

Which of the following must every assessor do to maintain their CPSA certification?

AComplete annual requalification training or complete 3 assessments for different facilities each year

BEarn and document at least 20 hours of Continuing Professional Education (CPE) over 3 years

CEarn an additional professional certification from List A or B of the Qualification Requirements (QRs)

DSubmit evidence of internal training in a relevant area (as per the QRs)

Show Answer

Question: 2

A cardholder wants to make purchases using their phone, so they have their cardholder information programmed into their SIM card using their mobile phone provider. Which of the following best describes this system?

ACard personalization

BHost Card Emulation (HCE) provisioning

CSecure Element (SE) provisioning

DOver-the-air (OTA) provisioning

Show Answer

Question: 3

A vendor wants to know if they will be penalized if their vault is not compliant. Who should they ask?

APCI SSC

BAssessor

CIssuing banks

DPayment brands

Show Answer

Question: 4

A vendor's HSA access is enforced by a security turnstile they have a logical access-control system that ensures anti pass-back. The device is functioning correctly. When must the status of the access change?

AOnly when an unauthorised badge is presented

BOnly when the person has successfully completed the access cycle

CUpon initial entry of the person into the device, prior to completion of the access cycle

DUpon initial presentation of an authorised badge, prior to completion of the access cycle

Show Answer

Question: 5

In which of the following locations must the CCTV and access control servers be located?

AWithin the Security Control Room (SCR)

BWithin a room in the HSA with security controls equivalent to the SCR applied

CWithin the SCR or a room with equivalent security

DWithin the secure server room inside of the HSA

Show Answer

PCI CPSA Quiz:1 Topic:1 Questions:1-5