PCI SSC CPSA_P_New Card Production Security AssessorCPSA Physical NewExam Online Training

PCI SSC CPSA_P_New Online Training

The questions for CPSA_P_New were last updated at Apr 22,2025.

Exam Code: CPSA_P_New
Exam Name: Card Production Security AssessorCPSA Physical NewExam
Certification Provider: PCI SSC
Latest update: Apr 22,2025

Question #11

A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions.

Which of the following are possible outcomes?

A . They may be put into remediation or revoked by the applicable payment brands
B . They may be put into remediation or revoked by PCI SSC
C . They may be fined by the applicable payment brands
D . They may be fined by PCI SSC

Reveal Solution Hide Solution

Question #12

Where can misprinted, partially finished cards be shredded?

A . In any HSA room approved by the security manager
B . Either in the HSA printing room or destruction room
C . Only in the HSA destruction room
D . Either in the HSA destruction room or a loading bay that meets all requirements of a destruction
room

Reveal Solution Hide Solution

Question #13

A vendor is unsure which forms are needed to complete an assessment. Who should they ask?

A . Assessor
B . Issuing banks
C . Payment brands
D . PCI SSC

Reveal Solution Hide Solution

Question #14

During an assessment you do a walk-through of bringing card products into the HSA using the goods-tools trap. You act as production staff, using an empty cardboard box as the card products. During the process, the guard escorts you, along with the box, into the pre-press room.

What is your conclusion?

A . Compliant, because the guard escorted you
B . Compliant, because the guard ensured that the card product remained under dual control
C . Not compliant, because an inventory of the card product did not take place prior to entry
D . Not compliant, because the guard escorted you

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

According to the PCI Card Production Physical Security Requirements, the goods-tools trap is a secure area that separates the HSA from the outside world, and is used to control the entry and exit of card products, tools, and other materials. The goods-tools trap must have two doors that are interlocked, meaning that only one door can be opened at a time. The goods-tools trap must also have a CCTV camera and an alarm system. The process of bringing card products into the HSA using the goods-tools trap must follow these steps1:

The card products must be delivered to the goods-tools trap by authorized personnel, who must present their identification to the guard and sign a delivery note.

The guard must verify the identification of the personnel and the quantity and quality of the card products, and record the details in a log.

The guard must then escort the personnel to the first door of the goods-tools trap, and open it using a key or a card reader. The personnel must place the card products inside the goods-tools trap and exit the area. The guard must then lock the first door.

The guard must then notify the production staff inside the HSA that the card products are ready to be collected. The production staff must present their identification to the guard and sign a receipt note. The guard must then escort the production staff to the second door of the goods-tools trap, and open it using a key or a card reader. The production staff must collect the card products from the goods-tools trap and enter the HSA. The guard must then lock the second door.

In this scenario, the guard escorted the production staff, along with the box, into the pre-press room. This is not compliant, because the guard is not authorized to enter the HSA, and the card products must remain under dual control at all times. The guard should have stayed outside the HSA and only opened the second door of the goods-tools trap for the production staff. This would ensure that the card products are securely transferred from the goods-tools trap to the HSA, and that the guard does not compromise the security of the HSA.

References:

PCI Card Production Physical Security Requirements, v2.0, April 2019, page 15, requirement 2.1.1

PCI Card Production Physical Security Requirements, v2.0, April 2019, page 16, requirement 2.1.2

PCI Card Production Physical Security Requirements, v2.0, April 2019, page 17, requirement 2.1.3

PCI Card Production Physical Security Requirements, v2.0, April 2019, page 18, requirement 2.1.4

Question #15

Under which circumstances may boxes containing card stock remain unsealed within the vault?

A . Where stock from those boxes will be pulled multiple times per day
B . Where the stock from those boxes will be pulled once at the beginning of production
C . Always, as long as an accurate inventory is being maintained
D . This is never permitted

Reveal Solution Hide Solution