최신PCI SSC Assessor_New_V4 - Assessor_New_V4무료샘플문제

A. Monitor the control.

B. Document and maintain evidence about each customized control as defined in Appendix E of PCI DSS

C. Derive testing procedures and document them in Appendix E of the ROC.

D. Perform the targeted risk analysis as per PCI DSS requirement 12.3.2

A. Not in scope for PCI DSS

B. Only m scope if it stores processes or transmits cardholder data

C. Only in scope if it provides time services to database servers.

D. In scope for PCI DSS

A. Logs of user activity on the firewall are correlated to identify and respond to suspicious behavior

B. Administrative access to respond to requests to change the firewall is limited to one individual at a time

C. Active network connections are tracked so that invalid response' traffic can be identified.

D. A current baseline of application configurations is maintained and any mis-configuration is responded to promptly

A. The disk encryption system must use the same user account authenticator as the operating system

B. The decryption keys must be stored within the local user account database

C. The decryption keys must be associated with the local user account database

D. Access to the disk encryption must be managed independently of the operating system access control mechanisms

A. It must be protected with strong cryptography for transmission over private wireless networks

B. It must be protected with strong cryptography (or transmission over private wired networks

C. It does not require protection for transmission over public wireless networks

D. It does not require protection for transmission over public wired networks

A. Reviewed and updated at least quarterly

B. Distributed to and understood by all affected parties

C. Encrypted with strong cryptography

D. Stored securely so that only management has access

A. Ensuring that all media is consistently destroyed on the same schedule regardless of the contents

B. Ensuring that media is property protected according to the sensitivity of the data it contains

C. Ensuring that media containing cardholder data is moved from secured areas an a quarterly basis

D. Ensuring that media is clearly and visibly labeled as 'Confidential so all personnel know that the media contains cardholder data