Free PCI SSC Assessor_New_V4 Exam Dumps Questions & Answers

Which statement about PAN is true?

• A.  It does not require protection for transmission over public wireless networks
• B.  It must be protected with strong cryptography for transmission over private wireless networks
• C.  It must be protected with strong cryptography (or transmission over private wired networks
• D.  It does not require protection for transmission over public wired networks

Assigning a unique ID to each person is intended to ensure?

• A.  Access is assigned to group accounts based on need-to-know
• B.  Shared accounts are only used by administrators
• C.  Individual users are accountable for their own actions
• D.  Strong passwords are used for each user account

What would be an appropriate strength for the key-encrypting key (KEK) used to protect an AES 128-bit data-encrypting key (DEK)

• A.  RSA512
• B.  ROT 13
• C.  DES256
• D.  AES 128

Which of the following is a requirement for multi-tenant service providers?

• A.  Provide customers with access to the hosting provider s system configuration files.
• B.  Provide customers with a shared user ID for access to critical system binaries
• C.  Ensure that customers cannot access another entity s cardholder data environment
• D.  Ensure that a customer's log files are available to all hosted entities

Passwords for default accounts and default administrative accounts should be?

• A.  Reset to the default password before installing a system on the network
• B.  Changed within 30 days after installing a system on the network.
• C.  Changed before installing a system on the network
• D.  Configured to expire in 30 days