Discuss PCI CPSA Exam Topic 1 Question 7

Which of the following personnel changes must result in the vendor notifying the Vendor Program Administration (VPA)?

AAdding additional rights to someone's role to give them access to the mam production vault

BAny change to a role that directly affects the security of card products and related components

CHiring someone that will directly interact with the card issuers

DPromoting someone to senior management level

Suggested Answer: B

Get Premium CPSA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Eden 11 months ago

B is a must, can't compromise on card security!

Carlee 11 months ago

Not sure about A, adding rights doesn't always mean a risk.

Paz 12 months ago

Surprised D isn't on the list, that seems major!

Lenna 12 months ago

I think C is also important, right?

Sabina 1 year ago

Definitely B, security changes are crucial!

Rima 1 year ago

Promoting to senior management seems significant, but I wonder if it directly impacts the VPA notification requirement. I might lean towards B.

Claudio 1 year ago

I feel like hiring someone who interacts with card issuers might require notification, but I can't recall if that's a strict rule.

Leila 1 year ago

I remember we discussed that adding rights to access sensitive areas like the production vault is critical. So, A could be a possibility too.

Chi 1 year ago

I think any change that affects security is important, so maybe B is the right answer? But I'm not entirely sure.

Harrison 1 year ago

The second query with the != operator looks promising, but I'm not sure if it's the most efficient approach for a large data set. I'll need to consider the potential performance implications.

Luisa 1 year ago

Hmm, I'm not totally sure about this one. I know S&OP is important for aligning operations and management, but I'm not sure which of these options best captures that.

Shawn 1 year ago

Responsibility center - that's gotta be the right answer. It matches the description of an organization unit with formal responsibilities. I'm confident in this one.

Myong 1 year ago

I'm leaning towards SELECT being the right answer; it aligns with what I studied regarding access permissions for views.

Edison 1 year ago

I really struggled with these concepts, but I remember the importance of aligning everything with the business architecture, so probably B is correct.

PCI CPSA Exam - Topic 1 Question 7 Discussion