Free PCI SSC QSA_New_V4 Exam Dumps Questions & Answers

According to Requirement 1, what is the purpose of "Network Security Controls"?

• A.  Manage anti-malware throughout the CDE.
• B.  Encrypt PAN when stored.
• C.  Discover vulnerabilities and rank them.
• D.  Control network traffic between two or more logical or physical network segments.

An entity wants to use the Customized Approach. They are unsure how to complete the Controls Matrix or TRA. During the assessment, you spend time completing the Controls Matrix and the TRA, while also ensuring that the customized control is implemented securely. Which of the following statements is true?

• A.  You can assess the customized control and verify that the customized approach was correctly followed, but you must document this in the ROC.
• B.  You must document the work on the customized control in the ROC, but you can not assess the control or the documentation.
• C.  You can assess the customized control, but another assessor must verify that you completed the TRA correctly.
• D.  Assessors are not allowed to assist an entity with the completion of the Controls Matrix or the TRA.

PCI DSS Requirement 12.7 requires screening and background checks for which of the following?

• A.  Visitors with access to the organization's facilities.
• B.  Cashiers with access to one card number at a time.
• C.  All personnel employed by the organization.
• D.  Personnel with access to the cardholder data environment.

Which of the following describes the intent of installing one primary function per server?

• A.  To allow higher-security functions to protect lower-security functions installed on the same server.
• B.  To prevent server functions with a lower security level from introducing security weaknesses to higher- security functions on the same server.
• C.  To reduce the security level of functions with higher-security needs to meet the needs of lower-security functions.
• D.  To allow functions with different security levels to be implemented on the same server.

What does the PCI PTS standard cover?

• A.  Secure coding practices for commercial payment applications.
• B.  End-lo-end encryption solutions for transmission of account data.
• C.  Development of strong cryptographic algorithms.
• D.  Point-of-Interaction devices used to protect account data.