Question 1

Which of the following can be sampled for testing during a PCI DSS assessment?

Options :

A : PCI DSS requirements and testing procedures

B : Compensating controls

C : Business facilities and system components

D : Security policies and procedures

Answer: C

Question 2

PCI-DSS Requirement 12.6 requires personnel to acknowledge at least _______ that they have read and understood the security policy and procedures?

Options :

A : Quarterly

B : Annually

C : Once during their employment

D : Every six months

Answer: B

Question 3

A "Partial Assessment" is a new assessment definition. What is defined as a "Partial Assessment"?

Options :

A : An assessment with at least one requirement that is marked as "Not Tested".

B : A terminology that is used by the payment brands and the acquirers to define entities that have multiple payment channels. Each channel has its own assessment

C : An intermidiary state before the final ROC has been completed.

D : A ROC that has been completed after using an SAQ to determine which requirements should be tested, as per FAQ 1331. (As long as the entity meets the SAQ’s eligibility criteria).

Answer: A

Question 4

Which if the following is true, regarding the entity sharing cardholder data with a service provider?

Options :

A : The service provider may only store, process or transmit cardholder data that is encrypted; and is therefore out of scope of PCI DSS

B : The service provider must produce the quarterly ASV scan results, and a penetration test report, before the entity engages with the service provider

C : The entity must have an established process of engaging service provider, including proper due diligence prior to engagement

D : The service provider must be PCI-DSS compliant before the entity engages with the service provider

Answer: C

Question 5

Which function is associated with acquirers?

Options :

A : Prepares the cardholder-s statement and completes reconciliation to the issuer

B : Provide authorization, clearing and settlement services to an issuer

C : Prepares the cardholder-s statements and completes reconciliation to the merchant

D : Provide authorization, clearing and settlement services to a merchant

Answer: D

Free QSA_New Mock Exam – Practice Online Confidently

Buying Options: