PCI SSC Assessor_New_V4 - Assessor_New_V4무료 덤프문제 풀어보기

A. A term used by payment brands and acquirers to describe entities that have multiple payment channels with each channel having its own assessment

B. An interim result before the final ROC has been completed

C. An assessment with at least one requirement marked as Not Tested"

D. A ROC that has been completed after using an SAQ to determine which requirements should be tested.
As per FAQ 1331. (As long as the entity meets the SAQs eligibility criteria)

A. Application vendor manuals

B. Security policy and procedure documents

C. Files that regularly change

D. System configuration and parameter files

A. User access to the database is restricted to system and network administrators

B. User access to the database is only through programmatic methods

C. Direct queries to the database are restricted to shared database administrator accounts

D. Application IDs for database applications can only be used by database administrators

A. Intrusion detection techniques are required on all system components

B. Intrusion detection techniques are required to identify all instances of cardholder data

C. Intrusion detection techniques are required to alert personnel of suspected compromises

D. Intrusion detection techniques are required to isolate systems in the cardholder data environment from all other systems

A. Personnel with access to the cardholder data environment.

B. Visitors with access to the organization s facilities

C. All personnel employed by the organization

D. Cashiers with access to one card number at a time

A. A current baseline of application configurations is maintained and any mis-configuration is responded to promptly

B. Active network connections are tracked so that invalid response' traffic can be identified.

C. Administrative access to respond to requests to change the firewall is limited to one individual at a time

D. Logs of user activity on the firewall are correlated to identify and respond to suspicious behavior

A. It is allowed to be stored by merchants after authorization if encrypted

B. It is out of scope for PCI DSS

C. It is not applicable for PCI DSS Requirement 3.2

D. It is sensitive authentication data