Free Access to PCISSC.QSA_New_V4.v2026-02-05.q53 with Valid Practice Test (Page 5)

Question 16

Viewing of audit log files should be limited to?

A.Individuals who performed the logged activity.
B.Individuals with read/write access.
C.Individuals with administrator privileges.
D.Individuals with a job-related need.

Question 17

An LDAP server providing authentication services to the cardholder data environment is_____________?

A.in scope for PCI DSS.
B.not In scope for PCI DSS.
C.in scope only if it stores, processes or transmits cardholder data.
D.in scope only if itprovides authentication services to systems in the DMZ.

Question 18

An internal NTP server that provides time services to the Cardholder Data Environment is?

A.Only in scope if it provides time services to database servers.
B.Not in scope for PCI DSS.
C.Only in scope if it stores, processes or transmits cardholder data.
D.In scope for PCI DSS.

Question 19

Where can live PANs be used for testing?

A.Production (live) environments only.
B.Pre-production (test) environments only it located outside the CDE.
C.Pre-production environments that are located within the CDE.
D.Testing with live PANs must only be performed in the OSA Company environment.

Question 20

An entity accepts e-commerce payment card transactions and stores account data in a database. The database server and the web server are both accessible from the Internet. The database server and the web server are on separate physical servers. What is required for the entity to meet PCI DSS requirements?

A.The web server and the database server should be installed on the same physical server.
B.The database server should be relocated so that it is not accessible from untrusted networks.
C.The web server should be moved into the Internal network.
D.The database server should be moved to a separate segment from the web server to allow for more concurrent connections.

Question 16

Question 17

Question 18

Question 19

Question 20

Download PDF File