PCI SSC Qualified Security Assessor V4 - QSA_New_V4 Free Exam Questions

A. Only after a valid change is installed

B. Periodically as defined by the entity

C. At least monthly

D. At least weekly

A. Any software developed by a third party that can be customized by an entity.

B. Virtual payment terminals.

C. Any software developed by a third party.

D. Software developed by an entity for the entity's own use.

A. A compensating control must address the risk associated with not adhering to the PCI DSS requirement.

B. A compensating control is not necessary if all other PCI DSS requirements are in place.

C. A compensating control worksheet is not required if the acquirer approves the compensating control.

D. An existing PCI DSS requirement can be used as a compensating control if it is already implemented.

A. It may help the entity to meet several requirements in Requirement 6.

B. It automatically makes an entity PCI DSS compliant.

C. The custom software can be excluded from the PCI DSS assessment.

D. There is no impact to the entity.

A. Change control processes are in place to ensure certificates are changed every 90 days.

B. Certificates are assigned only to administrative groups, and not to regular users.

C. Certificates are logged so they can be retrieved when the employee leaves the company.

D. A different certificate is assigned to each individual user account, and certificates are not shared.

A. A network configuration that prevents all network traffic between the CDE and out-of-scope networks.

B. Firewalls that log all network traffic flows between the CDE and out-of-scope networks.

C. Routers that monitor network traffic flows between the CDE and out-of-scope networks.

D. Virtual LANs that route network traffic between the CDE and out-of-scope networks.

A. No, because only compensating controls can be used with the Defined Approach.

B. Yes, if the entity uses no compensating controls.

C. No, because a single approach must be selected.

D. Yes, if the entity is eligible to use both approaches.

A. Changed within 30 days after installing a system on the network.

B. Configured to expire in 30 days.

C. Changed before installing a system on the network.

D. Reset to the default password before installing a system on the network.