Question 1

An entity is determining what their audit logs should capture. Which one of the listed options should they include?

Options :

A : Logs that show when members of an admin group have made a phone call

B : An entity can determine how thorough their logs are as this is not specifically included in the PCI DSS version 4

C : Logs of when staff have taken their lunch break

D : Starting, stopping, or pausing of the existing logs

Answer: D

Question 2

Who is the most recent payment brand?

Options :

A : Visa

B : Union Pay

C : Mastercard

D : JCB International

Answer: B

Question 3

You have just had an external scan performed and have been told you have 2 vulnerabilities that have been scored as medium. What should be done next?

Options :

A : The vulnerabilities should be remediated and another external scan should be completed

B : Nothing has to be remediated since the vulnerability is not high or critical

C : PCI DSS version 4 only requires internal scans for compliance. External scans are an optional area to improve security posture

D : The vulnerability should be marked as a false positive and the scan result should be added to documentation

Answer: A

Question 4

All internal scanning must be what?

Options :

A : Performed monthly

B : Require an ASV for internal scanning to match external scanning

C : Performed via authenticated scanning

D : Performed via unauthenticated scanning

Answer: C

Question 5

Which of the following is NOT considered a key principle of the Payment Card Industry Data Security Standard (PCI DSS)?

Options :

A : Regularly Monitor and Test Networks

B : Ensure Compliance with Industry Regulations

C : Maintain a Vulnerability Management Program

D : Implement Strong Access Control Measures

Answer: B

Free PCIP_New_V4 Mock Exam – Practice Online Confidently