What must be included m an organization's procedures for managing visitors9

• A.Visitor log includes visitor name, address, and contact phone number
• B.Visitor badges are identical to badges used by onsite personnel
• C.Visitors are escorted at all times within areas where cardholder data is processed or maintained
• D.Visitors retain their identification (for example a visitor badge) for 30 days after completion of the visit

Comment: *

Name: *

Email: *

Verification: *

What is the intent of classifying media that contains cardholder data?

• A.Ensuring that media is property protected according to the sensitivity of the data it contains
• B.Ensuring that media containing cardholder data is moved from secured areas an a quarterly basis
• C.Ensuring that media is clearly and visibly labeled as 'Confidential so all personnel know that the media contains cardholder data
• D.Ensuring that all media is consistently destroyed on the same schedule regardless of the contents

Comment: *

Name: *

Email: *

Verification: *

What process is requited by PCI DSS for protecting card-reading devices at the point-of-sale?

• A.Devices are periodically inspected to detect unauthorized card stammers.
• B.The serial number of each device is periodically verified with the device manufacturer
• C.Device identifiers and security labels are periodically replaced
• D.Devices are physically destroyed if there is suspicion of compromise

Comment: *

Name: *

Email: *

Verification: *

A sample of business facilities is reviewed during the PCI DSS assessment What is the assessor required to validate about the sample?

• A.It includes a consistent set of facilities that are reviewed for all assessments.
• B.The number of facilities in the sample is at least 10 percent of the total number of facilities
• C.Every facility where cardholder data is stored is reviewed
• D.All types and locations of facilities are represented

Comment: *

Name: *

Email: *

Verification: *

Which scenario meets PCI DSS requirements for critical systems to have correct and consistent time?

• A.Each internal system is configured to be its own time server.
• B.Access to time configuration settings is available to all users of the system.
• C.Central time servers receive time signals from specific, approved external sources
• D.Each internal system peersdirectorywith an external source to ensure accuracy of time updates

Comment: *

Name: *

Email: *

Verification: *