Online Access Free QSA_New_V4 Exam Questions

PCI DSS Requirement 12.7 requires screening and background checks for which of the following?

• A.All personnel employed by the organization.
• B.Visitors with access to the organization's facilities.
• C.Cashiers with access to one card number at a time.
• D.Personnel with access to the cardholder data environment.

Which statement about the Attestation of Compliance (AOC) is correct?

• A.The same AOC template is used W ROCs and SAQs.
• B.There are different AOC templates for service providers and merchants.
• C.The AOC must be signed by both the merchant/service provider and by PCI SSC.
• D.The AOC must be signed by either the merchant/service provider or the QSA/ISA.

Passwords for default accounts and default administrative accounts should be?

• A.Configured to expire in 30 days.
• B.Changed within 30 days after installing a system on the network.
• C.Changed before installing a system on the network.
• D.Reset to the default password before installing a system on the network.

According to Requirement 1, what is the purpose of "Network Security Controls"?

• A.Control network traffic between two or more logical or physical network segments.
• B.Encrypt PAN when stored.
• C.Manage anti-malware throughout the CDE.
• D.Discover vulnerabilities and rank them.

Assigning a unique ID to each person is intended to ensure?

• A.Individual users are accountable for their own actions.
• B.Strong passwords are used for each user account.
• C.Shared accounts are only used by administrators.
• D.Access is assigned to group accounts based on need-to-know.