| Exam Code | CPSA |
| Exam Name | Card Production Security Assessor (CPSA) Qualification Exam |
| Vendor | PCI SSC |
| Total Questions | 50 |
| Last Updated | 31-Oct, 2026 |
- Latest & Verified Questions
- Detailed Explanations
- Regular Updates
- Full-Length Practice Tests
- Boost Your Exam Confidence
PDF Study Materials
Downloadable guides and resources
Practice Tests
Full-length tests with real exam experience
Progress Tracking
Monitor your performance and improvement
Study Anywhere
Access on desktop, tablet, and mobile
Free CPSA Practice Questions
Explore 5 free practice questions for the PCI SSC CPSA exam and review the answers and explanations to support your preparation.
-
Question 1
Single answerWhere can misprinted, partially finished cards be shredded?
-
Option A:Correct
In any HSA room approved by the security manager
-
Option B:Correct
Either in the HSA printing room or destruction room
-
Option C:Correct
Only in the HSA destruction room
-
Option D:Correct
Either in the HSA destruction room or a loading bay that meets all requirements of a destruction room
Show Answer & Explanation Hide Answer & Explanation
Correct Answer: D
-
-
Question 2
Single answerA vendor puts cardholder information into a chip by sliding a payment card through a machine that programs it and verifies the data. The chip can make contactless transactions. Which of the following best describes the vendor’s activity?
-
Option A:Correct
Card personalization
-
Option B:Correct
Host Card Emulation (HCE) provisioning
-
Option C:Correct
Secure Element (SE) provisioning
-
Option D:Correct
Fulfillment
Show Answer & Explanation Hide Answer & Explanation
Correct Answer: C
Explanation
[Reference: https://www.epsprogramming.com/blog/what-is-secure-provisioning, ]
-
-
Question 3
Single answerFor how long must a vendor retain all applicant and employee background information on file?
-
Option A:Correct
For at least 12 months after termination of the contract of employment
-
Option B:Correct
For at least 18 months after termination of the contract of employment
-
Option C:Correct
For at least 24 months after termination of the contract of employment
-
Option D:Correct
It is not a requirement to store this information beyond termination of the contract
Show Answer & Explanation Hide Answer & Explanation
Correct Answer: C
-
-
Question 4
Single answerBefore you go on-site, the vendor’s primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?
-
Option A:Correct
Vendor senior management
-
Option B:Correct
Payment brands
-
Option C:Correct
Affected issuers
-
Option D:Correct
PCI SSC
Show Answer & Explanation Hide Answer & Explanation
Correct Answer: D
-
-
Question 5
Single answerIn relation to guards, which of the following must the vendor ensure?
-
Option A:Correct
A clear segregation of duties is maintained between production staff and guards
-
Option B:Correct
A clear segregation of duties is maintained between guard and reception related job functions
-
Option C:Correct
There is always at least one guard on-site, including outside of working hours, to monitor security systems and premises
-
Option D:Correct
Show Answer & Explanation Hide Answer & Explanation
Correct Answer: C
-