Question 1

Which of the following is NOT a principle of the PCI DSS?

Options :

A : Regularly monitoring and testing networks to ensure security controls remain effective

B : Implementing access controls to restrict cardholder data access on a "need-to-know" basis

C : Using proprietary encryption algorithms for securing cardholder data

D : Protecting cardholder data during transmission over open, public networks through strong cryptography

Answer: C

Question 2

An entity has a visitor attending their premises. Part of this visit includes entering a secure server room which houses the CDE. Out of the following, which applies?

Options :

A : The visitor must ensure they tell suitable staff where they are going when not being escorted

B : The visitor must be escorted at all times

C : The visitor can attend any location on their own if they are carrying out an assessment

D : The visitor should never be able to access a server room which houses CDE, regardless of their job or reason

Answer: B

Question 3

All internal scanning must be what?

Options :

A : Performed monthly

B : Require an ASV for internal scanning to match external scanning

C : Performed via authenticated scanning

D : Performed via unauthenticated scanning

Answer: C

Question 4

An entity is determining what their audit logs should capture. Which one of the listed options should they include?

Options :

A : Logs that show when members of an admin group have made a phone call

B : An entity can determine how thorough their logs are as this is not specifically included in the PCI DSS version 4

C : Logs of when staff have taken their lunch break

D : Starting, stopping, or pausing of the existing logs

Answer: D

Question 5

Which of these should be secured as per requirement 1.2.8?

Options :

A : All staff passwords

B : A note on top of NSCs that says "Do not touch"

C : Any file or setting used to configure NSCs

D : Vendor guidance for configuring firewalls

Answer: C

Confidently Practice Online with Free PCIP_New_V4 Exam Cram

Buying Options: