Question 1

Which of the following is NOT typically considered a critical component of a comprehensive incident response plan for PCI DSS compliance?

Options :

A : Providing public notifications for all security incidents involving payment card data

B : Documenting procedures for incident reporting, investigation, and remediation

C : Establishing clear roles and responsibilities for incident response team members

D : Implementing measures for timely detection and containment of security incidents

Answer: A

Question 2

An entity is using TLS 1.1 with a card-present POI device in store. What appendix is likely to be required in addition?

Options :

A : Appendix A3

B : Appendix A1

C : Appendix A2

D : Appendix B

Answer: C

Question 3

Requirement 6.5.2 dictates what?

Options :

A : All payment page scripts that are loaded and executed in the consumer’s browser are managed as follows

B : Upon completion of a significant change, all applicable PCI DSS requirements are confirmed to be in place on all new or changed systems and networks, and documentation is updated as applicable

C : Changes to all system components in the production environment are made according to established procedures that include

D : For public-facing web applications, new threats and vulnerabilities are addressed on an ongoing basis and these applications are protected against known attacks

Answer: B

Question 4

What is an 'inactive user account'?

Options :

A : An account that has only been used once over the course of 90 days

B : An account that is used by a current employee for a particular task

C : An account that has not been used in over 30 days

D : An account that has not been used in over 90 days

Answer: D

Question 5

What does ASV stand for?

Options :

A : Applied Security Vendor

B : Applicable Scanning Vendor

C : Accepted Security Vendor

D : Approved Scanning Vendor

Answer: D

Free PCIP_New_V4 Mock Exam – Practice Online Confidently

Buying Options: