Card Production Security Assessor (CPSA) Qualification Exam CPSA Exam Questions

Preparing for the CPSA exam is simple with CertsGate. We offer easy-to-understand study materials that help you learn the most important exam topics. You can study using our PDF questions, practice online with a real exam-style test, or use the desktop practice software. Choose the study method that works best for you and prepare at your own pace.

At CertsGate, we keep our CPSA practice questions up to date. Whenever the exam syllabus or objectives change, we update our study materials so you always learn the latest topics. This helps you save time, avoid outdated content, and feel more confident when you take your exam.

Question #1 (Topic: Demo Questions)

Where can misprinted, partially finished cards be shredded?

In any HSA room approved by the security manager

Either in the HSA printing room or destruction room

Only in the HSA destruction room

Either in the HSA destruction room or a loading bay that meets all requirements of a destruction room

Correct Answer: D

Question #2 (Topic: Demo Questions)

A vendor puts cardholder information into a chip by sliding a payment card through a machine that programs it and verifies the data. The chip can make contactless transactions. Which of the following best describes the vendor’s activity?

Card personalization

Host Card Emulation (HCE) provisioning

Secure Element (SE) provisioning

Fulfillment

Correct Answer: C

Explanation:

[Reference: https://www.epsprogramming.com/blog/what-is-secure-provisioning, ]

Question #3 (Topic: Demo Questions)

For how long must a vendor retain all applicant and employee background information on file?

For at least 12 months after termination of the contract of employment

For at least 18 months after termination of the contract of employment

For at least 24 months after termination of the contract of employment

It is not a requirement to store this information beyond termination of the contract

Correct Answer: C

Question #4 (Topic: Demo Questions)

Before you go on-site, the vendor’s primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?

Vendor senior management

Payment brands

Affected issuers

PCI SSC

Correct Answer: D

Question #5 (Topic: Demo Questions)

In relation to guards, which of the following must the vendor ensure?

A clear segregation of duties is maintained between production staff and guards

A clear segregation of duties is maintained between guard and reception related job functions

There is always at least one guard on-site, including outside of working hours, to monitor security systems and premises

There is always at least one guard in the HSA and one guard in the security control room at all times

Correct Answer: C

Page: 1 / 1