Which of the following is a requirement for multi-tenant service providers?

• A.Ensure that customers cannot access another entity's cardholder data environment.
• B.Provide customers with access to the hosting provider's system configuration files.
• C.Provide customers with a shared user ID for access to critical system binaries.
• D.Ensure that a customer's log files are available to all hosted entities.

Comment: *

Name: *

Email: *

Verification: *

Which scenario meets PCI DSS requirements for restricting access to databases containing cardholder data?

• A.User access to the database is only through programmatic methods.
• B.User access to the database is restricted to system and network administrators.
• C.Application IDs for database applications can only be used by database administrators.
• D.Direct queries to the database are restricted to shared database administrator accounts.

Comment: *

Name: *

Email: *

Verification: *

Which statement is true regarding the PCI DSS Report on Compliance (ROC)?

• A.The ROC Reporting Template and instructions provided by PCI SSC should be used for all ROCs.
• B.The assessor may use either their own template or the ROC Reporting Template provided by PCI SSC.
• C.The assessor must create their own ROC template tor each assessment report.
• D.The ROC Reporting Template provided by PCI SSC is only required for service provider assessments.

Comment: *

Name: *

Email: *

Verification: *

Which of the following file types must be monitored by a change-detection mechanism (for example, a file- integrity monitoring tool)?

• A.Application vendor manuals
• B.Files that regularly change
• C.Security policy and procedure documents
• D.System configuration and parameter files

Comment: *

Name: *

Email: *

Verification: *

A retail merchant has a server room containing systems that store encrypted PAN data. The merchant has implemented a badge access-control system that identifies who entered and exited the room, on what date, and at what time. There are no video cameras located in the server room. Based on this information, which statement is true regarding PCI DSS physical security requirements?

• A.The badge access-control system must be protected from tampering or disabling.
• B.The merchant must install video cameras in addition to the existing access-control system.
• C.Data from the access-control system must be securely deleted on a monthly basis.
• D.The merchant must install motion-sensing alarms in addition to the existing access-control system.

Comment: *

Name: *

Email: *

Verification: *