最新的PCI Qualified Professionals認證 QSA_New_V4考試題庫

問題1

A network firewall has been configured with the latest vendor security patches. What additional configuration is needed to harden the firewall?

A. Configure the firewall to permit all traffic until additional rules are defined.

B. Remove the default "Firewall Administrator" account and create a shared account for firewall administrators to use.

C. Disable any firewall functions that are not needed in production.

D. Synchronize the firewall rules with the other firewalls in the environment.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題2

An entity accepts e-commerce payment card transactions and stores account data in a database. The database server and the web server are both accessible from the Internet. The database server and the web server are on separate physical servers. What is required for the entity to meet PCI DSS requirements?

A. The web server and the database server should be installed on the same physical server.

B. The database server should be moved to a separate segment from the web server to allow for more concurrent connections.

C. The web server should be moved into the internal network.

D. The database server should be relocated so that it is not accessible from untrusted networks.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題3

Which of the following statements is true regarding track equivalent data on the chip of a payment card?

A. It is allowed to be stored by merchants after authorization, if encrypted.

B. It is sensitive authentication data.

C. It is out of scope for PCI DSS.

D. It is not applicable for PCI DSS Requirement 3.2.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題4

Which of the following is true regarding internal vulnerability scans?

A. They must be performed by an Approved Scanning Vendor (ASV).

B. They must be performed by QSA personnel.

C. They must be performed after a significant change.

D. They must be performed at least annually.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題5

Assigning a unique ID to each person is intended to ensure?

A. Access is assigned to group accounts based on need-to-know.

B. Strong passwords are used for each user account.

C. Individual users are accountable for their own actions.

D. Shared accounts are only used by administrators.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題6

Where can live PANs be used for testing?

A. Pre-production environments that are located within the CDE.

B. Testing with live PANs must only be performed in the OSA Company environment.

C. Pre-production (test) environments only it located outside the CDE.

D. Production (live) environments only.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題7

Which of the following is an example of multi-factor authentication?

A. A token that must be presented twice during the login process.

B. A user fingerprint and a user thumbprint.

C. A user passphrase and an application-level password.

D. A user password and a PIN-activated smart card.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題8

Which systems must have anti-malware solutions?

A. All CDE systems, connected systems, NSCs, and security-providing systems.

B. All portable electronic storage.

C. Any in-scope system except for those identified as 'not at risk' from malware.

D. All systems that store PAN.

正確答案: C

說明：（僅 VCESoft 成員可見）

最新的PCI SSC Qualified Security Assessor V4 - QSA_New_V4免費考試真題

最新更新

站內鏈接

聯系我們