Question 1

When must HSA motion detectors generate an alarm event?

Options :

A : Each time movement is detected

B : Each time movement is detected outside of regular business hours

C : Each time movement is detected and the access-control system indicates the room is occupied

D : Each time movement is detected and the access-control system indicates the room is not occupied

Answer: D

Question 2

CCTV cameras should not have zoom or scanning functionality in which of the following locations?

Options :

A : PIN-mailer room

B : Cloud-based provisioning areas

C : Work In Progress room (WIP)

D : Vault

E : Destruction room

F : Security Control Room (SCR)

Answer: A

Question 3

Which of the following areas permits multiple people to enter simultaneously and does not prevent piggybacking or tailgating?

Options :

A : Security control room

B : SOC entrance

C : HSA entrances

D : Vault

E : Exterior entrances

Answer: D

Question 4

An unauthorized individual called Joseph Cyber Expert intends to gain access to a card production facility by weekend night. His plan involves using a firearm to breach an exterior window, enter via it to the HSA and steal finished cards boxes.According to the PCI Card Production Physical Security Standard (v3.0.1), which of the following is a requirement that can help mitigating this scenario?

Options :

A : Windows are prohibited on exterior walls

B : Continuous guard presence is required in all rooms of the facility

C : The acoustic gunshot detection system (GDS) will activate an alarm

D : The glass-break detectors will activate an alarm

Answer: D

Question 5

During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

Options :

A : Employee information, including background checks, must be stored for at least seven years

B : Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

C : The vendor must retain the background information for at least 18 months after termination of contract

D : The vendor must only retain background information for all current employees, not for those that have been terminated

Answer: A

Confidently Practice Online with Free CPSA_P_New Exam Cram

Buying Options: