Free PCI SSC QSA_New_V4 Exam Dumps Questions & Answers

An LDAP server providing authentication services to the cardholder data environment is?

• A.  In scope only if it provides authentication services to systems in the DMZ.
• B.  In scope only if it stores, processes or transmits cardholder data.
• C.  Not in scope for PCI DSS.
• D.  In scope for PCI DSS.

Where can live PANs be used for testing?

• A.  Pre-production (test) environments only it located outside the CDE.
• B.  Testing with live PANs must only be performed in the OSA Company environment.
• C.  Production (live) environments only.
• D.  Pre-production environments that are located within the CDE.

Which statement is true regarding the presence of both hashed and truncated versions of the same PAN in an environment?

• A.  Controls are needed to prevent the original PAN being exposed by the hashed and truncated versions.
• B.  Hashed and truncated versions of a PAN must not exist in same environment.
• C.  The hashed version of the PAN must also be truncated per PCI DSS requirements for strong cryptography.
• D.  The hashed and truncated versions must be correlated so the source PAN can be identified.

Which statement about the Attestation of Compliance (AOC) is correct?

• A.  The AOC must be signed by either the merchant/service provider or the QSA/ISA.
• B.  The AOC must be signed by both the merchant/service provider and by PCI SSC.
• C.  There are different AOC templates for service providers and merchants.
• D.  The same AOC template is used for ROCs and SAQs.

A "Partial Assessment" is a new assessment result. What is a "Partial Assessment"?

• A.  An assessment with at least one requirement marked as "Not Tested".
• B.  A ROC that has been completed after using an SAQ to determine which requirements should be tested, as per FAQ 1331.
• C.  An interim result before the final ROC has been completed.
• D.  A term used by payment brands and acquirers to describe entities that have multiple payment channels, with each channel having its own assessment.