EMT Practice Test

1. Question Content...

---

Question1: If you have a query about a missing field in the card production reporting template, which organization is best-placed to answer it?

Question2: A vendor wants to know if they will be penalized if their vault is not compliant. Who should they ask?

Question3: A card production vendor employs a contracted guard service from an outside source. What is one of the responsibilities of the contracted service?

Question4: You wish to check that you are using the most current version of the Card Production requirements. What should you do?

Question5: A cardholder wants to make purchases using their phone, so they have their cardholder information programmed into their SIM card using their mobile phone provider. Which of the following best describes this system?

Question6: Which of the following statements is true about the facility's non-emergency exits?

Question7: To liberate a person detected inside of the inner shipping delivery room and stop the alarm, the software monitoring the access-control system must only allow the opening of which door?

Question8: When must HSA motion detectors generate an alarm event?

Question9: A vendor has a list of pre-approved third parties which may be granted access to the facility. Under what circumstances can other third-parties be granted access?

Question10: Where can misprinted, partially finished cards be shredded?

Question11: A vendor discovers that a recent shipment of cards is missing a set. Which of the following responses would you expect in a compliant organization?

Question12: John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?

Question13: The vendor's technical documentation shows that the alarm system does not send alerts to the security control room. After a discussion you learn that the alarm works perfectly, and sends a clear signal to summon the local police every time an emergency exit is opened. Why might this cause a problem for their assessment?

Question14: A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

Question15: A vendor receives cardholder information and keys from a bank. The vendor then performs the following:
* Uses its HSM to create keys
* Creates cardholder information specific to each cardholder, including name and PAN
* Formats the data for the hardware that will put it on a card
* Writes it to an encrypted file
Which of the following best describes this process?

Question16: During an assessment you do a walk-through of bringing card products into the HSA using the goods-tools trap. You act as production staff, using an empty cardboard box as the card products. During the process, the guard escorts you, along with the box, into the pre-press room. What is your conclusion?

Question17: Before you go on-site, the vendor's primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?

Question18: A vendor is unsure which forms are needed to complete an assessment. Who should they ask?

Question19: In which of the following locations must the CCTV and access control servers be located?

Question20: During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

Question21: Who is required to approve visitor entry to the HSA or cloud-based provisioning environment?

Question22: Which of the following must be used by the vendor to protect doors that provide access to buildings containing air conditioning equipment?