PCI QSA_New_V4 Quiz 1 Topic 4 Questions 1-5

Question: 1

Which scenario meets PCI DSS requirements for restricting access to databases containing cardholder data?

AUser access to the database Is only through programmatic methods.

BUser access to the database Is restricted to system and network administrators.

CApplication IDs for database applications can only be used by database administrators.

DDirect queries to the database are restricted to shared database administrator accounts.

Show Answer

Question: 2

Which scenario meets PCI DSS requirements for critical systems to have correct and consistent time?

AEach Internal system Is configured to be Its own time server.

BAccess to time configuration settings is available to all users of the system.

CCentral time servers receive time signals from specific, approved external sources.

DEach internal system peers directly with an external source to ensure accuracy of time updates.

Show Answer

Question: 3

An organization has implemented a change-detection mechanism on their systems. How often must critical file comparisons be performed?

AAt least weekly

BPeriodically as defined by the entity

COnly after a valid change is installed

DAt least monthly

Show Answer

Question: 4

Which of the following is true regarding internal vulnerability scans?

AThey must be performed after a significant change.

BThey must be performed by an Approved Scanning Vendor (ASV).

CThey must be performed by QSA personnel.

DThey must be performed at least annually.

Show Answer

Question: 5

Which of the following statements Is true whenever a cryptographic key Is retired and replaced with a new key?

AThe retired key must not be used for encryption operations.

BCryptographic key components from the retired key must be retained for 3 months before disposal.

CAnew key custodian must be assigned.

DAll data encrypted under the retired key must be securely destroyed.

Show Answer

PCI QSA_New_V4 Quiz:1 Topic:4 Questions:1-5