Online Access Free QSA_New_V4 Exam Questions

An entity is using custom software in their CDE. The custom software was developed using processes that were assessed by a Secure Software Lifecycle assessor and found to be fully compliant with the Secure SLC standard. What impact will this have on the entity's PCI DSS assessment?

• A.There is no impact to the entity.
• B.It may help the entity to meet several requirements in Requirement 6.
• C.The custom software can be excluded from the PCI DSS assessment.
• D.It automatically makes an entity PCI DSS compliant.

Where an entity under assessment is using the customized approach, which of the following steps is the responsibility of the assessor?

• A.Monitor the control.
• B.Document and maintain evidence about each customized control as defined in Appendix E of PCI DSS.
• C.Perform the targeted risk analysis as per PCI DSS requirement 12.3.2.
• D.Derive testing procedures and document them in Appendix E of the ROC.

Which statement about PAN is true?

• A.It must be protected with strong cryptography for transmission over private wired networks.
• B.It does not require protection for transmission over public wireless networks.
• C.It does not require protection for transmission over public wired networks.
• D.It must be protected with strong cryptography for transmission over private wireless networks.

Which of the following is a requirement for multi-tenant service providers?

• A.Ensure that a customer's log files are available to all hosted entities.
• B.Ensure that customers cannot access another entity's cardholder data environment.
• C.Provide customers with access to the hosting provider's system configuration files.
• D.Provide customers with a shared user ID for access to critical system binaries.

Which of the following is true regarding internal vulnerability scans?

• A.They must be performed at least annually.
• B.They must be performed by an Approved Scanning Vendor (ASV).
• C.They must be performed by QSA personnel.
• D.They must be performed after a significant change.