Question 1

During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

Options :

A : Employee information, including background checks, must be stored for at least seven years

B : Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

C : The vendor must retain the background information for at least 18 months after termination of contract

D : The vendor must only retain background information for all current employees, not for those that have been terminated

Answer: A

Question 2

CCTV cameras should not have zoom or scanning functionality in which of the following locations?

Options :

A : PIN-mailer room

B : Cloud-based provisioning areas

C : Work In Progress room (WIP)

D : Vault

E : Destruction room

F : Security Control Room (SCR)

Answer: A

Question 3

According to requirement 2.3.6.2, how long must a log of the event be maintained following the apprehension of an unauthorized individual detected by the movement detector, located inside the inner room or the shipping area, when both the intermediate and inner doors are closed and locked?

Options :

A : At least 3 years

B : Permanently

C : At least 2 years

D : Until the incident follow-up is completed

Answer: C

Question 4

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

Options :

A : Adding additional rights to someone’s role to give them access to the mam production vault

B : Any change to a role that directly affects the security of card products and related components

C : Hiring someone that will directly interact with the card issuers

D : Promoting someone to senior management levell

Answer: B

Question 5

For how long must a vendor retain all applicant and employee background information on file?

Options :

A : For at least 12 months after termination of the contract of employment

B : For at least 18 months after termination of the contract of employment

C : For at least 24 months after termination of the contract of employment

D : It is not a requirement to store this information beyond termination of the contract

Answer: C

Free CPSA_P_New Mock Exam – Practice Online Confidently

Buying Options: