Exam (elaborations)
PCI Fundamentals Questions and Answers 2024
- Course
- Institution
Exam of 6 pages for the course pci at pci (PCI Fundamentals)
[Show more]
Content preview
PCI FundamentalsThe payment card brands are responsible for: - answer penalty or fee assignment for
non-compliance
Authorization of a transaction usually takes place: - answer within one day
If a suspected card account number passes the Mod 10 test it means: - answer it is
definitely a valid PAN
Which of the following is true regarding network segmentation? - answer Network
segmentation is not a PCI DSS requirement
Which of the following is true related to the tracks of data on the magnetic stripe of a
payment card? - answer Track 1 contains all the fields of both track 1 and track 2
How Often should the firewall and router rule sets be reviewed? - answer Every six
months
Which Of the following statements is true concerning transaction volumes for
merchants? - answerTransaction volume is determined by each acquirer
Storing full track data after authorization is permitted under the following circumstances:
- answerNEVER
In order to reduce PCI DSS scope, adequate network segmentation should: -
answerisolate systems that store, process, or transmit cardholder data from those that
do not
Systems that commonly store track data: - answerPOSsystems
Which Of the following is true, regarding an entity sharing cardholder data with a service
provider? - answerThe entity must have an established process for engaging service
providers, including proper due diligence prior to engagement.
When must critical new security patches be installed? - answerWithin one month of
release
Which Of the following statements is true? - answerPA-DSS compliant payment
applications are in scope for a merchant's PCI DSS assessment
, In accordance with PCI DSS Requirement 1, firewalls are required: - answerbetween
the cardholder environment and Other internal networks
Which party is responsible for merchant compliance validation and merchant
communications? - answerAcquirer
The Mod 10 formula doubles the value of alternate digits of the primary account number
beginning with which digit? - answerSecond from the left
Strong access control lists include the following: - answerDo not allow "risky" protocols
such as FTP or Telnet.
Which of the following is true? - answerA PA-DSS application installed by a QIR must
still be reviewed during the PCI DSS assessment.
PCI SSC Community Meetings: - answerprovide opportunity for PCI stakeholders to
provide suggestions for changes and improvements.
Which of the following is true regarding Track data: - answerTrack 1 contains all Track 2
data and additional fields for use by the card issuer
Which of the following statements is true? - answerAll systems on a "flat network" are in
scope for the PCI DSS assessment.
Assessors must always use DSS requirements have been met. - answerindependent
judgment
Assessors must always use DSS requirements have been met. - answerindependent
judgment
If a merchant is using a validated P2PE solution: - answerthe merchant is responsible
for ensuring their own PCI DSS compliance
If an assessor wishes to use sampling during a PCI DSS assessment of a merchant
environment, the assessor must ensure: - answerthe sample selection is representative
Of all types Of system components in the environment.
Which Of the following merchant environments could be eligible for SAQ B? -
answerMerchant with standalone dial-out terminals, and no electronic cardholder data
storage
A service provider with no electronic cardholder data storage may be eligible to
complete: - answerSAQ D
It is permissible to store track data only if: - answerAn issuer has a business reason
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller jw638729. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
78252 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now