최신 Assessor_New_V4 무료덤프 - PCI SSC Assessor_New

문제1

If an entity shares cardholder data with a TPSP, what activity is the entity required to perform'?

A. The entity must perform a risk assessment of the TPSP's environment at least quarterly.

B. The entity must conduct ASV scans on the TPSP's systems at least annually

C. The entity must monitor the TPSP's PCI DSS compliance status at least annually

D. The entity must test the TPSP's incident response plan at least quarterly

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

At which step in the payment transaction process does the merchants bank pay the merchant for the purchase and the cardholder s bank bill the cardholder?

A. Settlement

B. Authorization

C. Chargeback

D. Clearing

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제3

A retail merchant has a server room containing systems that store encrypted PAN data. The merchant has implemented a badge access-control system that identities who entered and exited the room on what date and at what time There are no video cameras located in the server room Based on this information, which statement is true regarding PCI DSS physical security requirements?

A. Data from the access-control system must be securely deleted on a monthly basis

B. The merchant must install motion-sensing alarms in addition to the existing access-control system

C. The badge access-control system must be protected from tampering or disabling

D. The merchant must install video cameras in addition to the existing access-control system

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제4

An entity wants to know if the Software Security Framework can be leveraged during their assessment Which of the following software types would this apply to?

A. Validated Payment Applications that are listed by PCI SSC and have undergone a PA-DSS assessment

B. Only software which runs on PCI PTS devices

C. Any payment software in the CDE

D. Software developed by the entity in accordance with the Secure SLC Standard

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제5

What is the intent of classifying media that contains cardholder data?

A. Ensuring that media is property protected according to the sensitivity of the data it contains

B. Ensuring that media containing cardholder data is moved from secured areas an a quarterly basis

C. Ensuring that media is clearly and visibly labeled as 'Confidential so all personnel know that the media contains cardholder data

D. Ensuring that all media is consistently destroyed on the same schedule regardless of the contents

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제6

If disk encryption is used to protect account data what requirement should be met for the disk encryption solution?

A. The disk encryption system must use the same user account authenticator as the operating system

B. The decryption keys must be stored within the local user account database

C. Access to the disk encryption must be managed independently of the operating system access control mechanisms

D. The decryption keys must be associated with the local user account database

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

최신 Assessor_New_V4 무료덤프 - PCI SSC Assessor_New_V4

우리와 연락하기

유용한 링크

최신 업데이트