Exam (elaborations)
PCI version 4.0 ISA questions WITH 100- SURE ANSWERS
- Course
- Institution
PCI version 4.0 ISA questions WITH 100- SURE ANSWERS
[Show more]
Seller
Follow
Content preview
9/29/24, 5:37 PMEUNICE
PCI version 4.0 ISA questionsWITH 100% SURE ANSWERS
Terms in this set (100)
Non-console administrator access to any
web-based management interfaces must
be encrypted with technology such
as.........
Requirements 2.2.2 and 2.2.3 cover the
use of secure services, protocols and
daemons. Which of the following is
considered to be secure?
Which of the following is consider
"Sensitive Authentication Data"
True or False: It is acceptable for
merchants to store Sensitive
Authentication after
authorization as long as it is strongly
encrypted?
When a PAN is displayed to an employee
who does NOT need to see the full PAN,
the minimum digits to be mased are
Which of the following is true regarding
protection of PAN?
Which of the following may be used to
render PAN unreadable in order to meet
requirement 3.4
True or False Where keys are stored on
production systems, split knowledge and
dual control is required?
When assessing requirement 6.5, testing
to verify secure coding techniques are in
place to address common coding
vulnerabilities includes
One of the principles to be used when
granting user access to systems in CDE is:
-
An example of a "one-way" cryptographic
function used to render data unreadable
Keyed Cryptographic Hash
Appropriate keyed cryptographic hashing
algorithms include but are not limited to:
A set of cryptographic hash functions
designed by the National Security Agency
1/7
, 9/29/24, 5:37 PM
True or False: Procedures must be
developed to easily distinguish the
difference
between onsite personnel and visitors.
When should access be revoked for
recently terminated employees?
True or False: A visitor with a badge may
enter sensitive area unescorted. -
Protection of keys used for encryption of
cardholder data against disclosure must
include at least: (4 items)
Description of cryptographic architecture
includes
What 2 methods must NOT be used to be
disk-level encryption compliant
DESV User accounts and access
privileges are reviewed at
least every
Track 1 (Length up to 79 characters)
Track 2 (Length up to 40 characters
DESV
DESV Requirements
Who could DESV requirements apply to?
PCI DSS requirements apply to
When planning for an assessment what 4
activities should be included during
planning?
2/7
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller mbitheeunice2015. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $7.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
78462 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now