An entity accepts e-commerce payment card transactions and stores account data in a database. The database server and the web server are both accessible from the Internet. The database server and the web server are on separate physical servers. What is required for the entity to meet PCI DSS requirements?

• A.The web server and the database server should be installed on the same physical server.
• B.The database server should be relocated so that it is not accessible from untrusted networks.
• C.The web server should be moved into the internal network.
• D.The database server should be moved to a separate segment from the web server to allow for more concurrent connections.

Comment: *

Name: *

Email: *

Verification: *

Security policies and operational procedures should be?

• A.Encrypted with strong cryptography.
• B.Stored securely so that only management has access.
• C.Reviewed and updated at least quarterly.
• D.Distributed to and understood by all affected parties.

Comment: *

Name: *

Email: *

Verification: *

Which of the following describes the intent of installing one primary function per server?

• A.To allow functions with different security levels to be implemented on the same server.
• B.To prevent server functions with a lower security level from introducing security weaknesses to higher- security functions on the same server.
• C.To allow higher-security functions to protect lower-security functions installed on the same server.
• D.To reduce the security level of functions with higher-security needs to meet the needs of lower-security functions.

Comment: *

Name: *

Email: *

Verification: *