We're so confident of our products that we provide no hassle product exchange.
PCI CPSA_P_New Exam Overview:
| Certification Vendor: | PCI Security Standards Council (PCI SSC) |
|---|---|
| Exam Name: | Card Production Security Assessor CPSA Physical New Exam |
| Exam Number: | CPSA_P_New |
| Exam Price: | Included with New Card Physical Training: $1,650 USD (as of Jan 2026) |
| Certificate Validity Period: | 12 months (annual requalification required) |
| Passing Score: | 75% |
| Available Languages: | English |
| Exam Duration: | 90 minutes |
| Real Exam Qty: | 50 |
| Related Certifications: | CPSA-L (Logical) QSA ISA |
| Exam Format: | Multiple Choice, Closed-Book, Scenario-Based |
| Recommended Training: | PCI Card Production Physical Security Standard Official CPSA-P Instructor-Led Training |
| Exam Registration: | Pearson VUE Testing PCI SSC CPSA Program Portal |
| Sample Questions: | PCI CPSA_P_New Sample Questions |
| Exam Way: | Proctored via Pearson VUE; requalification: non-proctored remote online |
| Pre Condition: | Must be full-time employee of active CPSA Company; complete mandatory CPSA-P training; prior physical security experience recommended |
| Official Syllabus URL: | https://www.pcisecuritystandards.org/program_training_and_qualification/cpsa_qualification/ |
PCI CPSA_P_New Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Production & Material Security | - Storage and inventory reconciliation - PIN mailers and sensitive output protection - Card stock, blanks and pre-personalized inventory - Waste, spoilage and secure destruction |
| Topic 2: Personnel & Visitor Management | - Dual control and segregation of duties - Visitor escort and entry protocols - Background checks and vetting - Security awareness training |
| Topic 3: Assessment Methodology & Reporting | - Evidence gathering and validation - ROC (Report on Compliance) preparation - AOC (Attestation of Compliance) completion - Gap identification and remediation |
| Topic 4: Facility & Perimeter Security | - Access control systems & mantraps - CCTV, surveillance & intrusion detection - Security control room operations - Building construction and exterior protection |
| Topic 5: PCI Card Production Physical Security Standard Framework | - Roles and responsibilities - Standard scope and definitions - High Security Area (HSA) classification |
PCI Card Production Security AssessorCPSA Physical NewExam Sample Questions:
Who is required to approve visitor entry to the HSA or cloud-based provisioning environment?
- A. The head of the vendor facility
- B. Both the Security Manager and the Production Manager
- C. The Security Manager
- D. The Security Manager, Production Manager, and the head of the vendor facility
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
A vendor hosts virtual secure elements holding cardholder information in their data center. When a cardholder makes a purchase, the vendor creates a payment token which is sent to the cardholder's mobile device. Which of the following best describes the vendor's activities?
- A. Host Card Emulation (HCE) provisioning
- B. Over-the-air (OTA) provisioning
- C. Secure Element (SE) provisioning
- D. Card personalization
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?
- A. If John is involved in card personalization, then he must never be involved in PIN printing
- B. If John is involved in PIN printing, then he must never be involved in the card shipment process
- C. If John is involved in card personalization, then he must never be involved in the card shipment process
- D. If John is involved in card personalization then he must not be involved in the printing of the corresponding PINs
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
Under which circumstances may boxes containing card stock remain unsealed within the vault?
- A. Where stock from those boxes will be pulled multiple times per day
- B. This is never permitted
- C. Where the stock from those boxes will be pulled once at the beginning of production
- D. Always, as long as an accurate inventory is being maintained
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
A vendor discovers that a recent shipment of cards is missing a set. Which of the following responses would you expect in a compliant organization?
- A. The head of security initiates a meeting, and once the VPA approves the messaging, law enforcement is notified in two days
- B. An immediate call is made to the issuer and the VPA who, between them, contact law enforcement and put together a joint statement
- C. A report is requested by the issuer, the vendor sends it to them, and the issuer handles the incident with the local police
- D. After an incident review, the VPA, issuer and law enforcement are all notified within 24 hours
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
By Winston
