Passwords for default accounts and default administrative accounts should be?

• A.Changed within 30 days after installing a system on the network.
• B.Reset to the default password before installing a system on the network
• C.Changed before installing a system on the network
• D.Configured to expire in 30 days

Comment: *

Name: *

Email: *

Verification: *

Which scenario meets PCI DSS requirements for restricting access to databases containing cardholder data?

• A.User access to the database is only through programmatic methods
• B.User access to the database is restricted to system and network administrators
• C.Application IDs for database applications can only be used by database administrators
• D.Direct queries to the database are restricted to shared database administrator accounts

Comment: *

Name: *

Email: *

Verification: *

A retail merchant has a server room containing systems that store encrypted PAN data. The merchant has implemented a badge access-control system that identities who entered and exited the room onwhat date and at what time There are no video cameras located in the server room Based on this information, which statement is true regarding PCI DSS physical security requirements?

• A.The badge access-control system must be protected from tampering or disabling
• B.The merchant must install video cameras in addition to the existing access-control system
• C.Data from the access-control system must be securely deleted on a monthly basis
• D.The merchant must install motion-sensing alarms in addition to the existing access-control system

Comment: *

Name: *

Email: *

Verification: *

Which systems must have anti-malware solutions'

• A.All CDE systems, connected systems. NSCs. and security-providing systems
• B.All portable electronic storage
• C.All systems that store PAN
• D.Any in-scope system except for those identified as not at risk from malware

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is true whenever a cryptographic key is retired and replaced with a new key?

• A.The retired key must not be used for encryption operations
• B.Cryptographic key components from the retired key must be retained for 3 months before disposal
• C.A new key custodian must be assigned
• D.All data encrypted under the retired key must be securely destroyed

Comment: *

Name: *

Email: *

Verification: *