Free CPSA Exam Braindumps
Card Production Security Assessor (CPSA) Qualification Exam Questions 16–20 (page: 5)

Updated On: 9-Feb-2026

John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder.
Which of the following statements is true?

  1. If John is involved in card personalization then he must not be involved in the printing of the corresponding PINs
  2. If John is involved in card personalization, then he must never be involved in the card shipment process
  3. If John is involved in card personalization, then he must never be involved in PIN printing
  4. If John is involved in PIN printing, then he must never be involved in the card shipment process

Answer(s): C



A card production vendor employs a contracted guard service from an outside source.
What is one of the responsibilities of the contracted service?

  1. Provide only certified guards
  2. Register their service with the VPA
  3. Maintain their own liability insurance in case of losses to card material
  4. Undergo their own Card Production assessment and provide evidence of a passing result

Answer(s): C



For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

  1. Until each applicable payment brand has accepted (and signed off) the ROC and AOC
  2. As long as the entity under assessment is a client of the CPSA Company
  3. 3 years
  4. 1 year

Answer(s): C


Reference:

https://listings.pcisecuritystandards.org/documents/Card_Production_Security__Assessor_(CPSA)_Q ualification_Requirements__v1.0_Apr__2019.pdf



Which document describes the results of an assessment, and is signed by both the assessor and the vendor executive officer?

  1. Security Assessment Questionnaire (SAQ)
  2. Attestation of Compliance (AOC)
  3. Report on Compliance (ROC)
  4. Letter of Approval (LOA)

Answer(s): C



To liberate a person detected inside of the inner shipping delivery room and stop the alarm, the software monitoring the access-control system must only allow the opening of which door?

  1. The external facing door
  2. The internal facing door
  3. The last activated door
  4. The least secure door

Answer(s): B



Viewing page 5 of 11
Viewing questions 21 - 25 out of 50 questions


Post your Comments and Discuss PCI CPSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!