PCI SSC Assessor_New_V4 - Assessor_New_V4 Exam Practice Test

A. Procedures for launching a reverse-attack on the individual(s) responsible for the security incident

B. Procedures for securely deleting incident response records immediately upon resolution of the incident

C. Procedures for notifying PCI SSC of the security incident

D. Procedures for responding to the detection of unauthorized wireless access points

A. Visitor badges are identical to badges used by onsite personnel

B. Visitors are escorted at all times within areas where cardholder data is processed or maintained

C. Visitors retain their identification (for example a visitor badge) for 30 days after completion of the visit

D. Visitor log includes visitor name, address, and contact phone number

A. The decryption keys must be stored within the local user account database

B. The disk encryption system must use the same user account authenticator as the operating system

C. Access to the disk encryption must be managed independently of the operating system access control mechanisms

D. The decryption keys must be associated with the local user account database

A. Ensuring that media is clearly and visibly labeled as 'Confidential so all personnel know that the media contains cardholder data

B. Ensuring that media containing cardholder data is moved from secured areas an a quarterly basis

C. Ensuring that all media is consistently destroyed on the same schedule regardless of the contents

D. Ensuring that media is property protected according to the sensitivity of the data it contains

A. To allow higher-security functions to protect lower-security functions installed on the same server

B. To allow functions with different security levels to be implemented on the same server

C. To prevent server functions with a lower security level from introducing security weaknesses to higher
-security functions on the same server

D. To reduce the security level of functions with higher-security needs to meet the needs of lower-security functions

A. All data encrypted under the retired key must be securely destroyed

B. Cryptographic key components from the retired key must be retained for 3 months before disposal

C. A new key custodian must be assigned

D. The retired key must not be used for encryption operations

A. A compensating control must address the risk associated with not adhering to the PCI DSS requirement

B. An existing PCI DSS requirement can be used as compensating control if it is already implemented

C. A compensating control worksheet is not required if the acquirer approves the compensating control

D. A compensating control is not necessary if all other PCI DSS requirements are in place