Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

PCI CPSA Exam - Topic 1 Question 2 Discussion

Actual exam question for PCI's CPSA exam
Question #: 2
Topic #: 1
[All CPSA Questions]

A vendor discovers that a recent shipment of cards is missing a set. Which of the following responses would you expect in a compliant organization?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

0/2000 characters
Teri
4 months ago
I’m not convinced about D. What if they need more time to assess?
upvoted 0 times
...
Sanda
4 months ago
Wait, they’d really notify law enforcement in 24 hours? That seems fast!
upvoted 0 times
...
Gregoria
5 months ago
C seems more realistic, though. Not sure if they’d act that fast.
upvoted 0 times
...
Ashley
5 months ago
Definitely agree with D, anything less seems risky.
upvoted 0 times
...
Sophia
5 months ago
I think option D is the best response. Quick action is key!
upvoted 0 times
...
Cristen
5 months ago
I feel like option C is too passive. If there's a security issue, shouldn't law enforcement be involved right away?
upvoted 0 times
...
Elmer
5 months ago
I'm a bit uncertain about the roles involved. Does the issuer always handle the police notification, or could it be the vendor too?
upvoted 0 times
...
Izetta
5 months ago
I remember a practice question where immediate reporting was emphasized, so I feel like option A might be the best choice here.
upvoted 0 times
...
Jovita
5 months ago
I think option D sounds right because timely communication is crucial in these situations, but I'm not entirely sure if 24 hours is the standard.
upvoted 0 times
...
Tamesha
5 months ago
Wait, I'm a bit confused. Does the product also need a master product? Or is that not required? I'll have to review the options again.
upvoted 0 times
...
Loreta
6 months ago
This looks straightforward. I think option A is the correct answer since it uses the "add ns acl" command to deny access to the specific IP address for the required 10-minute duration.
upvoted 0 times
...
Kristian
6 months ago
Based on our practice questions, I'm leaning towards 4 licenses, but I keep second-guessing some of the process timings.
upvoted 0 times
...
Ashlyn
6 months ago
I'm not too sure, but I remember something like "Zero-hour" being mentioned in a practice question.
upvoted 0 times
...
Emerson
6 months ago
This seems straightforward enough. Based on the scenario, the pricing for data security protections in the vendor contracts is likely the least crucial piece of information from a privacy perspective. The more important factors are the data access, liability, and audit rights.
upvoted 0 times
...

Save Cancel