CPSA_P_New 무료 덤프문제 온라인 액세스

A vendor's HSA access is enforced by a security turnstile they have a logical access-control system that ensures anti pass-back. The device is functioning correctly. When must the status of the access change?

• A.Only when the person has successfully completed the access cycle
• B.Upon initial presentation of an authorised badge, prior to completion of the access cycle
• C.Upon initial entry of the person into the device, prior to completion of the access cycle
• D.Only when an unauthorised badge is presented

During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

• A.The vendor must only retain background information for all current employees, not for those that have been terminated
• B.Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)
• C.Employee information, including background checks, must be stored for at least seven years
• D.The vendor must retain the background information for at least 18 months after termination of contract

In which of the following locations must the CCTV and access control servers be located?

• A.Within a room in the HSA with security controls equivalent to the SCR applied
• B.Within the Security Control Room (SCR)
• C.Within the SCR or a room with equivalent security
• D.Within the secure server room inside of the HSA

When must HSA motion detectors generate an alarm event?

• A.Each time movement is detected
• B.Each time movement is detected and the access-control system indicates the room is occupied
• C.Each time movement is detected and the access-control system indicates the room is not occupied
• D.Each time movement is detected outside of regular business hours

A vendor wants to know if they will be penalized if their vault is not compliant. Who should they ask?

• A.PCI SSC
• B.Assessor
• C.Issuing banks
• D.Payment brands