최신PCI SSC Assessor_New_V4 - Assessor_New_V4무료샘플문제

A. No. because only compensating controls can be used with the Defined Approach

B. Yes if the entity uses no compensating controls

C. No because a single approach must be selected

D. Yes if the entity is eligible to use both approaches

A. Any payment software in the CDE

B. Software developed by the entity in accordance with the Secure SLC Standard

C. Validated Payment Applications that are listed by PCI SSC and have undergone a PA-DSS assessment

D. Only software which runs on PCI PTS devices

A. At least weekly

B. At least monthly

C. Only after a valid change is installed

D. Periodically as defined by the entity

A. The custom software can be excluded from the PCI DSS assessment

B. It may help the entity to meet several requirements in Requirement 6.

C. There is no impact to the entity

D. It automatically makes an entity PCI DSS compliant

A. It is allowed to be stored by merchants after authorization if encrypted

B. It is sensitive authentication data

C. It is out of scope for PCI DSS

D. It is not applicable for PCI DSS Requirement 3.2

A. Direct queries to the database are restricted to shared database administrator accounts

B. User access to the database is restricted to system and network administrators

C. Application IDs for database applications can only be used by database administrators

D. User access to the database is only through programmatic methods

A. A user fingerprint and a user thumbprint

B. A user passphrase and an application level password.

C. A user password and a PIN-activated smart card

D. A token that must be presented twice during the login process