PCI ISA/PCI-DSS ISA Exams Package Deal -Solved

QSAs must retain work papers for a minimum of _______ years. It is a recommendation for ISAs to do the same. - ANSWER-3 According to PCI DSS requirement 1, Firewall and router rule sets need to be reviewed every _____ months. - ANSWER-6 At least ______________ and prior to the annual assessmen...

What makes up SAD? - ANSWER-Track Data/ (CAV2/CVC2/CVV2/CID) / PINs & PIN Blocks Track 1 vs Track 2 - ANSWER-Track 1: contains all fields of both Track 1 and Track 2, up to 79 characters long 11.2 Internal Scans - Frequency and performed by who? - ANSWER-Quarterly and after significant changes...

Perimeter firewalls installed ______________________________. - ANSWER-between all wireless networks and the CHD environment. Where should firewalls be installed? - ANSWER-At each Internet connection and between any DMZ and the internal network. Review of firewall and router rule sets at least...

Scoping Review - ANSWER- Systems Providing Security Services - ANSWER-Systems providing security services as required by PCI DSS, or that may be contributing to how an entity meets PCI DSS requirements may include: -Authentication servers (e.g. LDAP) -Time management (e.g. NTP) servers -Pa...

Methods identified as being used to remove stolen data from the environments: - ANSWER-- Use of stolen credentials to access the POS environment - Outdated patches or poor system patching processes - The use of default or static vendor credentials / brute force - POS skimming malware being instal...

Non-console administrator access to any web-based management interfaces must be encrypted with technology such as......... - ANSWER-HTTPS Requirements 2.2.2 and 2.2.3 cover the use of secure services, protocols and daemons. Which of the following is considered to be secure? - ANSWER-SSH Which ...

Non-console administrator access to any web-based management interfaces must be encrypted with technology such as......... - ANSWER-HTTPS Requirements 2.2.2 and 2.2.3 cover the use of secure services, protocols and daemons. Which of the following is considered to be secure? - ANSWER-SSH Which ...