IT Certification Exam Questions & Answers

NO.39 Passwords/Passphrases should not be allowed if the same of the last ____ used passwords/passphrases.
(Requirement 8.2.5)

NO.40 To whom is Self-Assessment Question naire (SAQ) A intended for?

NO.41 Users passwords/passphrases should be changed on a minimal of what interval to meet Requirement
8 .2.4?

NO.42 Existing PCI DSS requirements may be combined with new controls to become a compensating control.

NO.43 Maintain a policy that addresses information security for all personnel is the ________

NO.44 Merchants with segmented payment application systems connected to the Internet, no electronic cardholder data storage, may be eligible to use what SAQ?

NO.45 To consider Compensating Controls, one of the following must exist that precludes implementing the stated control: (Select ALL that apply)

NO.46 Storing track data “long-term” or “persistently” is permitted when

NO.47 Internal and external penetration tests should be performed_______________ to meet requirement
1 1.3.1 and 11.3.2

NO.48 Track and monitor all access to network resources and cardholder data is the ___________

NO.49 To be compliant with requirement 8.1.4 you have to remove/disable inactive user accounts at least every

NO.50 PCI compliance do not apply on Virtualized environments

NO.51 An user should be required to re-authenticate to activate the terminal or session if it’s been idle for more than

NO.52 All users and administrators access to, queries and actions on databases must be through programmatic methods only. Never direct access or queries to database

NO.53 The use of two-factor authentication is NOT a requirement on PCI DSS v3 for remote network access originating from outside the network by personnel and all third parties.

NO.54 Merchants using only web-based virtual payment terminals, no electronic cardholder data storage, may be eligible to use what SAQ?

NO.55 SELECT ALL THAT MATCHES
Examples of two-factor technologies include:

NO.56 The Information Supplements: (Select ALL that apply)

NO.57 Risk assessments must be implemented in order to meet requirement 12.2. Please select all risk assessments methodologies that can be used in order to meet this requirement.

NO.58 Restrict access to cardholder data by business need-to-know

NO.59 What are best practices for implementing PCI DSS into Business-as-Usual (BAU) Processes? (Select
ALL that apply)

NO.60 The P2PE Standard covers:

NO.61 Merchants involved with only card-not-present transactions that are completely outsourced to a PCI DSS complaint service provider may be eligible to use?