Free Practice Questions for PCI CPSA Exam

Question 1

Which of the following principles must be enforce by the HSA Access Control system?

ADual control

BDual presence

CDual control and dual presence

DDual guard entry when required

Correct Answer: C. Dual control and dual presence

Question 2

Which of the following statements is true in relation to visitor access badges?

AEach visitor entering the facility must be issued and must visibly wear a disposable ID badge that identifies them as a non-employee

BEach visitor entering the facility must wear their issued access badge above waist height

CBadges with access-controls must not be issued to visitors

DUnissued visitor access badges must be securely stored

Correct Answer: A. Each visitor entering the facility must be issued and must visibly wear a disposable ID badge that identifies them as a non-employee

Question 3

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

AAdding additional rights to someone's role to give them access to the mam production vault

BAny change to a role that directly affects the security of card products and related components

CHiring someone that will directly interact with the card issuers

DPromoting someone to senior management level

Correct Answer: B. Any change to a role that directly affects the security of card products and related components

Question 4

A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

AThey may be put into remediation or revoked by the applicable payment brands

BThey may be put into remediation or revoked by PCI SSC

CThey may be fined by the applicable payment brands

DThey may be fined by PCI SSC

Correct Answer: A. They may be put into remediation or revoked by the applicable payment brands

Question 5

A vendor hosts virtual secure elements holding cardholder information in their data center. When a cardholder makes a purchase, the vendor creates a payment token which is sent to the cardholder's mobile device. Which of the following best describes the vendor's activities?

ACard personalization

BHost Card Emulation (HCE) provisioning

CSecure Element (SE) provisioning

DOver-the-air (OTA) provisioning

Correct Answer: C. Secure Element (SE) provisioning

Question 6

A vendor uses codes from a chip manufacturer to 'unlock' chips and prepare them for use by adding applications and keys. Which of the following best describes this process?

AData creation

BData preparation

CManufacture

DPre-personalization

Correct Answer: D. Pre-personalization