EMT Practice Test

1. Question Content...

---

Question1: In which of the following locations must the CCTV and access control servers be located?

Question2: John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?

Question3: During an assessment you ask to see employee records for employees with access to the HSA. The records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

Question4: For how long must a vendor retain all applicant and employee background information on file?

Question5: A vendor's HSA access is enforced by a security turnstile they have a logical access-control system that ensures anti pass-back. The device is functioning correctly. When must the status of the access change?

Question6: Before you go on-site, the vendor's primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?

Question7: A CPSA Company has submitted multiple reports that are incomplete and do not contain the information described in the reporting instructions. Which of the following are possible outcomes?

Question8: An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?

Question9: A vendor has a list of pre-approved third parties which may be granted access to the facility. Under what circumstances can other third-parties be granted access?

Question10: If a vendor plans to terminate an employee, which of these must be done?

Question11: How frequently must alarms on external doors of a card production and provisioning vendor environment be tested?

Question12: Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

Question13: Which of the following statements about unsolicited visitors is true?

Question14: Where can misprinted, partially finished cards be shredded?

Question15: Which of the following statements is true about the facility's non-emergency exits?

Question16: When must HSA motion detectors generate an alarm event?

Question17: The vendor's technical documentation shows that the alarm system does not send alerts to the security control room. After a discussion you learn that the alarm works perfectly, and sends a clear signal to summon the local police every time an emergency exit is opened. Why might this cause a problem for their assessment?

Question18: An assessor must provide which of the following to their client at the start of every assessment?

Question19: A vendor hosts virtual secure elements holding cardholder information in their data center. When a cardholder makes a purchase, the vendor creates a payment token which is sent to the cardholder's mobile device. Which of the following best describes the vendor's activities?

Question20: Which document describes the results of an assessment, and is signed by both the assessor and the vendor executive officer?

Question21: A card production vendor employs a contracted guard service from an outside source. What is one of the responsibilities of the contracted service?