Question 1

An organization has multiple business locations, each with its own payment processing setup. Some locations process card-present transactions using point-of-sale (POS) terminals, while others handle e-commerce transactions through their website. As a PCI Professional, which Self-Assessment Questionnaire (SAQ) would be most appropriate for the organization's overall PCI DSS compliance assessment?

Options :

A : SAQ B

B : SAQ A-EP

C : SAQ D

D : SAQ P2PE

Answer: C

Question 2

You have just had an external scan performed and have been told you have 2 vulnerabilities that have been scored as medium. What should be done next?

Options :

A : The vulnerabilities should be remediated and another external scan should be completed

B : Nothing has to be remediated since the vulnerability is not high or critical

C : PCI DSS version 4 only requires internal scans for compliance. External scans are an optional area to improve security posture

D : The vulnerability should be marked as a false positive and the scan result should be added to documentation

Answer: A

Question 3

Who is the most recent payment brand?

Options :

A : Visa

B : Union Pay

C : Mastercard

D : JCB International

Answer: B

Question 4

How often should network security control configurations be reviewed

Options :

A : Every year

B : Every 6 months

C : Every month

D : Every 3 months

Answer: B

Question 5

An entity is currently having their annual assessment performed by a QSA and have been asked to show documentation of how often they review their audit logs. The entity supplies documentation that shows they check their logs daily. What is the QSA likely to conclude for this part of the requirement?

Options :

A : The QSA doesn't need to assess how often audit logs are checked as this falls outside of the scope of PCI DSS version 4

B : The QSA will mark this as non-compliant

C : The QSA will confirm this is compliant but tell the entity that they can reduce this to once a week and still remain compliant

D : The QSA will confirm this is compliant and satisfies this specific part of the requirement

Answer: D

Free PCIP_New_V4 Mock Exam – Practice Online Confidently

Buying Options: