Which scenario meets PCI DSS requirements for critical systems to have correct and consistent time?

• A.Each internal system is configured to be its own time server.
• B.Access to time configuration settings is available to all users of the system.
• C.Central time servers receive time signals from specific, approved external sources.
• D.Each internal system peers directly with an external source to ensure accuracy of time updates.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is required to be included in an incident response plan?

• A.Procedures for notifying PCI SSC of the security incident.
• B.Procedures for responding to the detection of unauthorized wireless access points.
• C.Procedures for securely deleting incident response records immediately upon resolution of the incident.
• D.Procedures for launching a reverse-attack on the individual(s) responsible for the security incident.

Comment: *

Name: *

Email: *

Verification: *

A retail merchant has a server room containing systems that store encrypted PAN data. The merchant has Implemented a badge access-control system that Identifies who entered and exited the room, on what date, and at what time. There are no video cameras located in the server room.Based on this information, which statement is true regarding PCI DSS physical security requirements?

• A.The badge access-control system must be protected from tampering or disabling.
• B.The merchant must Install video cameras in addition to the existing access-control system.
• C.Data from the access-control system must be securely deleted on a monthly basis.
• D.The merchant must install motion-sensing alarms In addition to the existing access-control system.

Comment: *

Name: *

Email: *

Verification: *

Which statement is true regarding the PCI DSS Report on Compliance (ROC)?

• A.The ROC Reporting Template and instructions provided by PCI SSC should be used for all ROCs.
• B.The assessor may use either their own template or the ROC Reporting Template provided by PCI SSC.
• C.The assessor must create their own ROC template for each assessment report.
• D.The ROC Reporting Template provided by PCI SSC is only required for service provider assessments.

Comment: *

Name: *

Email: *

Verification: *

Which statement about the Attestation of Compliance (AOC) is correct?

• A.The same AOC template is used W ROCs and SAQs.
• B.The AOC must be signed by either the merchant/service provider or the QSA/ISA.
• C.The AOC must be signed by both the merchant/service provider and by PCI SSC.
• D.There are different AOC templates for service providers and merchants.

Comment: *

Name: *

Email: *

Verification: *