PCI CPSA_P_New Prüfungsthemen:
| Abschnitt | Ziele |
|---|---|
| Überblick über die Sicherheitsbewertung der Kartenherstellung | - Festlegung des Bewertungsumfangs und Durchführung der Prüfung - Konformitätsbewertung und Berichterstellung
- Anforderungen an physische Sicherheitsmaßnahmen |
PCI Card Production Security AssessorCPSA Physical NewExam CPSA_P_New Prüfungsfragen mit Lösungen
Which of the following must every assessor do to maintain their CPSA certification?
- A. Earn and document at least 20 hours of Continuing Professional Education (CPE) over 3 years
- B. Earn an additional professional certification from List A or B of the Qualification Requirements (QRs)
- C. Submit evidence of internal training in a relevant area (as per the QRs)
- D. Complete annual requalification training or complete 3 assessments for different facilities each year
Antwort: D 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
In which of the following locations must the CCTV and access control servers be located?
- A. Within the secure server room inside of the HSA
- B. Within the Security Control Room (SCR)
- C. Within the SCR or a room with equivalent security
- D. Within a room in the HSA with security controls equivalent to the SCR applied
Antwort: C 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
An assessor must provide which of the following to their client at the start of every assessment?
- A. Quality Assurance Manual
- B. Attestation of Compliance
- C. Vendor Release Agreement
- D. CPSA Feedback Form
Antwort: A 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?
- A. Promoting someone to senior management level
- B. Adding additional rights to someone's role to give them access to the mam production vault
- C. Hiring someone that will directly interact with the card issuers
- D. Any change to a role that directly affects the security of card products and related components
Antwort: D 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
A vendor puts cardholder information into a chip by sliding a payment card through a machine that programs it and verifies the data. The chip can make contactless transactions. Which of the following best describes the vendor's activity?
- A. Host Card Emulation (HCE) provisioning
- B. Card personalization
- C. Secure Element (SE) provisioning
- D. Fulfillment
Antwort: B 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
1056 Kundenbewertungen
