Free PCI SSC Assessor_New_V4 Exam Dumps Questions & Answers

Which of the following describes the intent of installing one primary function per server?

• A.  To reduce the security level of functions with higher-security needs to meet the needs of lower-security functions
• B.  To allow functions with different security levels to be implemented on the same server
• C.  To prevent server functions with a lower security level from introducing security weaknesses to higher
  -security functions on the same server
• D.  To allow higher-security functions to protect lower-security functions installed on the same server

Where can live PANs be used for testing?

• A.  Pre-production environments that are located within the CDE
• B.  Testing with live PANs must only be performed in the QSA Company environment
• C.  Production (live) environments only
• D.  Pre-production (test) environments only if located outside the CDE.

Which of the following types of events is required to be logged?

• A.  All access to all audit trails
• B.  All use of end-user messaging technologies
• C.  All network transmissions
• D.  All access to external web sites

Where an entity under assessment is using the customized approach, which of the following steps is the responsibility of the assessor?

• A.  Monitor the control.
• B.  Perform the targeted risk analysis as per PCI DSS requirement 12.3.2
• C.  Derive testing procedures and document them in Appendix E of the ROC.
• D.  Document and maintain evidence about each customized control as defined in Appendix E of PCI DSS

Which systems must have anti-malware solutions'

• A.  All portable electronic storage
• B.  All CDE systems, connected systems. NSCs. and security-providing systems
• C.  Any in-scope system except for those identified as not at risk from malware
• D.  All systems that store PAN