最新的PCI SSC Assessor_New_V4 - Assessor_New_V4免費考試真題

A. At least weekly

B. At least monthly

C. Periodically as defined by the entity

D. Only after a valid change is installed

A. A term used by payment brands and acquirers to describe entities that have multiple payment channels with each channel having its own assessment

B. An interim result before the final ROC has been completed

C. A ROC that has been completed after using an SAQ to determine which requirements should be tested.
As per FAQ 1331. (As long as the entity meets the SAQs eligibility criteria)

D. An assessment with at least one requirement marked as Not Tested"

A. At least once every 95 97 days.

B. Occurring at some point in each quarter of a year

C. On the 15th of each third month

D. On the 1st of each fourth month

A. Devices are periodically inspected to detect unauthorized card stammers.

B. Devices are physically destroyed if there is suspicion of compromise

C. The serial number of each device is periodically verified with the device manufacturer

D. Device identifiers and security labels are periodically replaced

A. To allow functions with different security levels to be implemented on the same server

B. To reduce the security level of functions with higher-security needs to meet the needs of lower-security functions

C. To prevent server functions with a lower security level from introducing security weaknesses to higher
-security functions on the same server

D. To allow higher-security functions to protect lower-security functions installed on the same server

A. Intrusion detection techniques are required to identify all instances of cardholder data

B. Intrusion detection techniques are required to alert personnel of suspected compromises

C. Intrusion detection techniques are required on all system components

D. Intrusion detection techniques are required to isolate systems in the cardholder data environment from all other systems

A. Virtual LANs that route network traffic between the CDE and out-of-scope networks

B. Firewalls that log all network traffic flows between the CDE and out of-scope networks

C. A network configuration that prevents all network traffic between the CDE and out-of-scope networks

D. Routers that monitor network traffic flows between the CDE and out-of-scope networks