Exam for engine

NEW QUESTION 27
What is the Appendix A on PCI DSS 3.0?

NEW QUESTION 28
Risk assessments must be implemented in order to meet requirement 12.2. Please select all risk assessments methodologies that can be used in order to meet this requirement.

NEW QUESTION 29
As defined by PCI DSS Requirement 7, access to cardholder data should be restricted based on which principle?

NEW QUESTION 30
Use of a Qualified Integrator/Reeller (QIR):

NEW QUESTION 31
What is the Appendix B on PCI DSS 3.0?

NEW QUESTION 32
The use of two-factor authentication is NOT a requirement on PCI DSS v3 for remote network access originating from outside the network by personnel and all third parties.

NEW QUESTION 33
PCI DSS Requirement 3.4 states that PAN must be rendered unreadable when stored. Which of the following may be used to meet this requirement?

NEW QUESTION 34
If an e-commerce service provider was deemed eligible to complete an SAQ, which SAQ would they use?

NEW QUESTION 35
An audit trail history should be available immediately for analysis within a minimum of

NEW QUESTION 36
Methods for stealing payment card data include:

NEW QUESTION 37
SELECT ALL THAT APPLY
Select all audit trails that must be recorded for all system components according to requirement 10.3

NEW QUESTION 38
Identify and authenticate access to system components is the __________

NEW QUESTION 39
Which of the following entities will ultimately approve a purchase?

NEW QUESTION 40
An user should be required to re-authenticate to activate the terminal or session if it’s been idle for more than

NEW QUESTION 41
According to requirement 8.1.6 an user ID should be locked out after a maximum how many repeated access attempts?

NEW QUESTION 42
Compensating controls must: (Select ALL that applies)

NEW QUESTION 43
Internal and external penetration tests should be performed_______________ to meet requirement
1 1.3.1 and 11.3.2

NEW QUESTION 44
When evaluating “above and beyond” for compensating controls, an existing PCI DSS requirement MAY be considered as compensating controls if they are required for another area, but are not required for the item under review

NEW QUESTION 45
A company that ________ is considered to be a service provider.

NEW QUESTION 46
What is the NIST standards that provides password complexity requirements

NEW QUESTION 47
PCI DSS Requirement 5 states that anti-virus software must be:

NEW QUESTION 48
The P2PE Standard covers:

NEW QUESTION 49
In the event of a violation of the PCIP Qualification Requirements, disciplinary actions for PCIPs could include:

NEW QUESTION 50
The PCI DSS Requirement most closely associated with “Logging” is ____________