PCIP Exam Bundle questions and answers Graded A+

Which of the below functions is associated with Acquirers? A. Provide settlement services to a merchant B. Provide authorization services to a merchant C. Provide clearing services to a merchant D. All of the options - ANSWER-Correct Answer: D Which of the following entities will actu...

PCI DSS Requirement 1 - ANSWER-Install and maintain a firewall configuration to protect cardholder data PCI DSS Requirement 2 - ANSWER-Do not use vendor supplied defaults for system passwords and other security parameters PCI DSS Requirement 3 - ANSWER-Protect stored cardholder data by enactin...

Requirement 2 - ANSWER-Do not use vendor supplied defaults for system passwords and other security parameters Requirement 3 - ANSWER-Protect stored cardholder data by enacting a formal data retention policy and implement secure deletion methods Requirement 4 - ANSWER-Encrypt transmission of ca...

6 - ANSWER-How many PCI DSS Goals 12 - ANSWER-How many PCI DSS requirements Build and Maintain a Secure Network and Systems - ANSWER-requirement 1 Do not use vendor-supplied defaults for system passwords and other security parameters - ANSWER-requirement 2 Protect stored cardholder data ...

PA-DSS - ANSWER-Payment Application Data Security Standard (POS, shopping carts, etc.) PTS (POI) - ANSWER-Pin Transaction Security Point of Interaction Standard (Attended and Unattended Devices) HSM (PIN) - ANSWER-Hardware Security Module Pin Standard (not required but may assist in becoming c...

Can existing PCI DSS requirements be considered as compensating controls if they are already required for the item under review? - ANSWER-NO What are reasons to consider using compensating controls? - ANSWER-Legitimate technical constraints or documented business constraints Do PCI DSS require...

by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? - ANSWER-By doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Mo...

Adopted to help achieve the goal of PCI SSCs Mission - ANSWER-Code of Professional Responsibility to help ensure that information security professional adhere to the highest standards of ethical and professional conduct. Adherence to the Code of Professional Responsibility (CPR) - ANSWER-Helps en...