PCI SSC Assessor_New_V4 - Assessor_New_V4 Exam Practice Test

A. Virtual LANs that route network traffic between the CDE and out-of-scope networks

B. Routers that monitor network traffic flows between the CDE and out-of-scope networks

C. Firewalls that log all network traffic flows between the CDE and out of-scope networks

D. A network configuration that prevents all network traffic between the CDE and out-of-scope networks

A. At least 1 year, with the most recent 3 months immediately available

B. At least 2 years, with the most recent 3 months immediately available

C. At least 2 years with the most recent month immediately available

D. At least 3 months with the most recent month immediately available

A. All CDE systems, connected systems. NSCs. and security-providing systems

B. All portable electronic storage

C. Any in-scope system except for those identified as not at risk from malware

D. All systems that store PAN

A. Replace the need to quarterly ASV scans

B. Prioritize the highest risk items so they can be addressed more quickly

C. Ensure that critical security patches are installed at least quarterly

D. Ensure all vulnerabilities are addressed within 30 days

A. Monitor the control.

B. Perform the targeted risk analysis as per PCI DSS requirement 12.3.2

C. Document and maintain evidence about each customized control as defined in Appendix E of PCI DSS

D. Derive testing procedures and document them in Appendix E of the ROC.

A. The entity must test the TPSP's incident response plan at least quarterly

B. The entity must perform a risk assessment of the TPSP's environment at least quarterly.

C. The entity must monitor the TPSP's PCI DSS compliance status at least annually

D. The entity must conduct ASV scans on the TPSP's systems at least annually

A. Individuals who performed the logged activity

B. Individuals with a job-related need

C. Individuals with read/write access

D. Individuals with administrator privileges