Free Practice PCI Security Standards Council CPSA_P_New Exam Questions 2025

Stay ahead with 100% Free CPSA Physical New CPSA_P_New Dumps Practice Questions

Page: 1 / 20

Total 100 Questions | Updated On: Apr 25, 2025

Add To Cart

Question 1

When must HSA motion detectors generate an alarm event?

A : Each time movement is detected

B : Each time movement is detected outside of regular business hours

C : Each time movement is detected and the access-control system indicates the room is occupied

D : Each time movement is detected and the access-control system indicates the room is not occupied

Answer: D

Question 2

During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

A : Employee information, including background checks, must be stored for at least seven years

B : Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

C : The vendor must retain the background information for at least 18 months after termination of contract

D : The vendor must only retain background information for all current employees, not for those that have been terminated

Answer: A

Question 3

For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

A : Until each applicable payment brand has accepted (and signed off) the ROC and AOC

B : As long as the entity under assessment is a client of the CPSA Company

C : 3 years

D : 1 year

Answer: C

Question 4

A card production vendor employs a contracted guard service from an outside source. What is one of the responsibilities of the contracted service?

A : Provide only certified guards

B : Register their service with the VPA

C : Maintain their own liability insurance in case of losses to card material

D : Undergo their own Card Production assessment and provide evidence of a passing result

Answer: C

Question 5

A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

A : They may be put into remediation or revoked by the applicable payment brands

B : They may be put into remediation or revoked by PCI SSC

C : They may be fined by the applicable payment brands

D : They may be fined by PCI SSC

Answer: A

Page: 1 / 20

Total 100 Questions | Updated On: Apr 25, 2025

Add To Cart