PCI SSC Assessor_New_V4 - Assessor_New_V4 Free Exam Questions

A. Public keys must be encrypted with a key-encrypting key.

B. Key-encrypting keys and data-encrypting keys must be assigned to the same key custodian

C. Data-encrypting keys must be stronger than the key-encrypting key that protects it.

D. Private or secret keys must be encrypted, stored within an SCD or stored as key components

A. Administrative access to respond to requests to change the firewall is limited to one individual at a time

B. Logs of user activity on the firewall are correlated to identify and respond to suspicious behavior

C. A current baseline of application configurations is maintained and any mis-configuration is responded to promptly

D. Active network connections are tracked so that invalid response' traffic can be identified.

A. Intrusion detection techniques are required to alert personnel of suspected compromises

B. Intrusion detection techniques are required on all system components

C. Intrusion detection techniques are required to identify all instances of cardholder data

D. Intrusion detection techniques are required to isolate systems in the cardholder data environment from all other systems

A. Only software which runs on PCI PTS devices

B. Software developed by the entity in accordance with the Secure SLC Standard

C. Any payment software in the CDE

D. Validated Payment Applications that are listed by PCI SSC and have undergone a PA-DSS assessment

A. Individuals with read/write access

B. Individuals with administrator privileges

C. Individuals with a job-related need

D. Individuals who performed the logged activity

A. Firewalls that log all network traffic flows between the CDE and out of-scope networks

B. Virtual LANs that route network traffic between the CDE and out-of-scope networks

C. Routers that monitor network traffic flows between the CDE and out-of-scope networks

D. A network configuration that prevents all network traffic between the CDE and out-of-scope networks

A. Details of how the assessor observed the entity s systems were compliant with the requirement

B. Details of the entity s project plan for implementing the requirement

C. Details of the entity s reason for not implementing the requirement

D. Details of how the assessor observed the entity s systems were not compliant with the requirement