NEW QUESTION 26
According to requirement 8.1.6 an user ID should be locked out after a maximum how many repeated access attempts?

NEW QUESTION 27
Risk assessments must be implemented in order to meet requirement 12.2. Please select all risk assessments methodologies that can be used in order to meet this requirement.

NEW QUESTION 28
To render PAN unreadable anywhere it is stored one-way hashes must be implemented based on strong cryptography on

NEW QUESTION 29
Quarterly internal vulnerability scans should be executed and rescans as needed until what point?

NEW QUESTION 30
An audit trail history should be available immediately for analysis within a minimum of

NEW QUESTION 31
Users passwords/passphrases should be changed on a minimal of what interval to meet Requirement
8 .2.4?

NEW QUESTION 32
Requirement 3.5 requires document and implement procedures to protect keys used to secure stored cardholder data against disclose and misuse. This requirement applies to keys used to encrypt stored cardholder data, and also applies to key-encrypting keys used to protect data-encrypting keys. Such key-encrypting keys must be

NEW QUESTION 33
What is the Appendix B on PCI DSS 3.0?

NEW QUESTION 34
What is the NIST standards that provides password complexity requirements

NEW QUESTION 35
Information Supplements provided by the PCI SSC “supersede” or replace PCI DSS requirements

NEW QUESTION 36
Merchants using only web-based virtual payment terminals, no electronic cardholder data storage, may be eligible to use what SAQ?

NEW QUESTION 37
A company that ________ is considered to be a service provider.

NEW QUESTION 38
Please select all possible disciplinary actions that may be applicable in case of violation of PCI Code of
Professional Responsibility

NEW QUESTION 39
Use of a Qualified Integrator/Reeller (QIR):

NEW QUESTION 40
In order to be considered a compensating control, which of the following must exist:

NEW QUESTION 41
According to requirement 11.1 you must implement a process to test for the presence of wireless access points and detect and identify all authorized and unauthorized wireless access points on every

NEW QUESTION 42
SELECT ALL THAT APPLY
To be compliant with requirement 9.9 an updated list of all card-reading devices used in card-present transactions at the point of sale must be kept by June 30 2015 including the following:

NEW QUESTION 43
Restrict physical access to cardholder data is the _________

NEW QUESTION 44
Methods for stealing payment card data include:

NEW QUESTION 45
PCIPs are required to adhere to the Code of Professional Responsibility, which includes:

NEW QUESTION 46
It’s NOT required that all four quarters of passing scan in order to meet requirement 11.2

NEW QUESTION 47
Encrypt transmission of cardholder data across open, public networks is the ______

NEW QUESTION 48
For initial PCI DSS compliance, it’s not required that four quarters of passing scans must be completed if the assessor verifies that 1) the most recent scan result was a passing scan, 2) the entity has documented policies and procedures requiring quarterly scanning, and 3) vulnerabilities noted in the scan results have been corrected as shown in a re-scan(s).

NEW QUESTION 49
The presumption of P2PE is that:

NEW QUESTION 50
PCI DSS Requirement 5 states that anti-virus software must be: