Online Access Free Assessor_New_V4 Exam Questions

Which of the following meets the definition of 'quarterly' as indicated in the description of timeframes used in PCI DSS requirements?

• A.On the 1st of each fourth month
• B.At least once every 95 97 days.
• C.Occurring at some point in each quarter of a year
• D.On the 15th of each third month

Viewing of audit log files should be limited to?

• A.Individuals with administrator privileges
• B.Individuals who performed the logged activity
• C.Individuals with read/write access
• D.Individuals with a job-related need

Which scenario meets PCI DSS requirements for critical systems to have correct and consistent time?

• A.Central time servers receive time signals from specific, approved external sources
• B.Each internal system is configured to be its own time server.
• C.Access to time configuration settings is available to all users of the system.
• D.Each internal system peers directory with an external source to ensure accuracy of time updates

Could an entity use both the Customized Approach and the Defined Approach to meet the same requirement?

• A.No. because only compensating controls can be used with the Defined Approach
• B.Yes if the entity is eligible to use both approaches
• C.Yes if the entity uses no compensating controls
• D.No because a single approach must be selected

What process is requited by PCI DSS for protecting card-reading devices at the point-of-sale?

• A.Device identifiers and security labels are periodically replaced
• B.Devices are periodically inspected to detect unauthorized card stammers.
• C.The serial number of each device is periodically verified with the device manufacturer
• D.Devices are physically destroyed if there is suspicion of compromise