Q29. In which of the following locations must the CCTV and access control servers be located?

Q30. Which of the following must be used by the vendor to protect doors that provide access to buildings containing air conditioning equipment?

Q31. Which of these is a requirement of the security control room?

Q32. Which of the following must every assessor do to maintain their CPSA certification?

Q33. A vendor discovers that a recent shipment of cards is missing a set. Which of the following responses would you expect in a compliant organization?

Q34. Before you go on-site, the vendor’s primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?

Q35. To liberate a person detected inside of the inner shipping delivery room and stop the alarm, the software monitoring the access-control system must only allow the opening of which door?

Q36. The receptionist responsible for the entrance and departure of visitors must have which of the following?

Q37. After reviewing their completed ROC and AOC, which state that they are compliant, the vendor wishes to be listed on PCI SSC’s list of Compliant Card Vendors. How should you assist them with the listing process?

Q38. An assessor must provide which of the following to their client at the start of every assessment?

Q39. Which of the following security awareness measures is required for compliance?

Q40. A vendor is unsure which forms are needed to complete an assessment. Who should they ask?

Q41. Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

Q42. A vendor has a list of pre-approved third parties which may be granted access to the facility. Under what circumstances can other third-parties be granted access?

Q43. Which of the following statements is true about the facility’s non-emergency exits?

Q44. During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

Q45. How frequently must alarms on external doors of a card production and provisioning vendor environment be tested?

Q46. If a vendor plans to terminate an employee, which of these must be done?

Q47. John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?

Q48. A vendor is unsure which forms are needed to complete an assessment. Who should they ask?

Q49. Which of the following statements about unsolicited visitors is true?