Question 1

PCI-DSS Requirement 12.6 requires personnel to acknowledge at least _______ that they have read and understood the security policy and procedures?

Options :

A : Quarterly

B : Annually

C : Once during their employment

D : Every six months

Answer: B

Question 2

Which of the following types of events is required to be logged?

Options :

A : All use of end-user messaging technologies

B : All access to external websites

C : All access to all audit trails

D : All network transmissions

Answer: C

Question 3

Storing track data "long term" or "persistently" is permitted when_______.

Options :

A : It is being stored by the issuers

B : It is hashed by the merchants storing it.

C : It is encrypted by the merchant storing it.

D : It is reported to the PCI SSC annually in a ROC

Answer: A

Question 4

A "Partial Assessment" is a new assessment definition. What is defined as a "Partial Assessment"?

Options :

A : An assessment with at least one requirement that is marked as "Not Tested".

B : A terminology that is used by the payment brands and the acquirers to define entities that have multiple payment channels. Each channel has its own assessment

C : An intermidiary state before the final ROC has been completed.

D : A ROC that has been completed after using an SAQ to determine which requirements should be tested, as per FAQ 1331. (As long as the entity meets the SAQ’s eligibility criteria).

Answer: A

Question 5

PCI-DSS Requirements 5 stats that antivirus software must be:

Options :

A : Installed on systems even those not commonly affected by malware

B : Updates at least annually

C : Installed on systems commonly affected by the malware

D : Configured to allow users to disable it as desired

Answer: C

Free QSA_New Mock Exam – Practice Online Confidently

Buying Options: