CPSA_P_New 무료 덤프문제 온라인 액세스

For each requirement listed in a ROC, which types of findings must have a full narrative response?

• A.All types except Not Applicable findings
• B.All types of findings
• C.Non-compliant findings only
• D.New or Closed findings only

Which of the following principles must be enforce by the HSA Access Control system?

• A.Dual control and dual presence
• B.Dual guard entry when required
• C.Dual presence
• D.Dual control

A vendor receives cardholder information and keys from a bank. The vendor then performs the following:
* Uses its HSM to create keys
* Creates cardholder information specific to each cardholder, including name and PAN
* Formats the data for the hardware that will put it on a card
* Writes it to an encrypted file
Which of the following best describes this process?

• A.Pre-personalization
• B.Manufacture
• C.Data creation
• D.Data preparation

Where can misprinted, partially finished cards be shredded?

• A.Only in the HSA destruction room
• B.Either in the HSA printing room or destruction room
• C.In any HSA room approved by the security manager
• D.Either in the HSA destruction room or a loading bay that meets all requirements of a destruction room

An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?

• A.PCI SSC
• B.Vendor
• C.Payment brands
• D.Issuing banks