Question 1

When a Service Provider has been defined by a payment brand as eligible to complete a SAQ, which SAQ is used?

Options :

A : SAQ D

B : SAQ B

C : SAQ A

D : SAQ C

Answer: A

Question 2

Unauthorised changes on payment pages should be protected by a change and tamper detection mechanism. How often should these mechanisms be performed?

Options :

A : Every day

B : Every 7 days or periodically defined in requirement 12.3.1

C : Every 7 days

D : Based on what is periodically defined in requirement 12.3.1

Answer: B

Question 3

What is an 'inactive user account'?

Options :

A : An account that has only been used once over the course of 90 days

B : An account that is used by a current employee for a particular task

C : An account that has not been used in over 30 days

D : An account that has not been used in over 90 days

Answer: D

Question 4

Which of these should be secured as per requirement 1.2.8?

Options :

A : All staff passwords

B : A note on top of NSCs that says "Do not touch"

C : Any file or setting used to configure NSCs

D : Vendor guidance for configuring firewalls

Answer: C

Question 5

Requirement 1.2.2 discusses changes must be approved and managed in accordance with what requirement regarding change management?

Options :

A : 11.5.1

B : 6.5.1

C : 4.2.3

D : 12.2.1

Answer: B

Free PCIP_New_V4 Mock Exam – Practice Online Confidently