What is pci dss - Study guides, Class notes & Summaries

How is skimming used to target PCI data? : Copying payment card numbers by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? : By doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Monetized? : By skimming the card to get the full track of data, and then making another like card. Using the card information in a ...

For PCI DSS requirement 1, firewall and router rule sets need to be reviewed every _____________ months 6 months Non-console administrator access to any web-based management interfaces must be encrypted with technology such as......... HTTPS Requirements 2.2.2 and 2.2.3 cover the use of secure services, protocols and daemons. Which of the following is considered to be secure? SSH Which of the following is considered "Sensitive Authentication Data"? Card Verification Va...

You are the security subject matter expert (SME) for an organization considering a transition from the legacy environment into a hosted cloud provider 's data center. One of the challenges you 're facing is whether the cloud provider will be able to comply with the existing legislative and contractual frameworks your organization is required to follow. This is a _________ issue. a. Resiliency b. Privacy c. Performance d. Regulatory D 76. You are the security subject matter expert (SME) ...

Non-console administrator access to any web-based management interfaces must be encrypted with technology such as......... HTTPS Requirements 2.2.2 and 2.2.3 cover the use of secure services, protocols and daemons. Which of the following is considered to be secure? SSH Which of the following is considered "Sensitive Authentication Data"? Card Verification Value (CAV2/CVC2/CVV2/CID), Full Track Data, PIN/PIN Block True or False: It is acceptable for merchants to store Se...

How is skimming used to target PCI data? - Copying payment card numbers by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? - By doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Monetized? - By skimming the card to get the full track of data, and then making another like card. Using the card information in a "Card...

Betty visits a local library with her young children. She notices that someone using a computer terminal in the library is visiting pornographic websites. What law requires that the library filter offensive web content for minors? Children's Online Privacy Protection Act (COPPA) Sarbanes-Oxley Act (SOX) Family Educational Rights and Privacy Act (FERPA) Children's Internet Protection Act (CIPA) - Answer Children's Internet Protection Act (CIPA) The main goal of the Gramm-Leach-...

Non-console administrator access to any web-based management interfaces must be encrypted with technology such as......... HTTPS Requirements 2.2.2 and 2.2.3 cover the use of secure services, protocols and daemons. Which of the following is considered to be secure? SSH Which of the following is considered "Sensitive Authentication Data"? Card Verification Value (CAV2/CVC2/CVV2/CID), Full Track Data, PIN/PIN Block True or False: It is acceptable for merchants to store Se...

PCI SSC - correct answer is an independent industry standards body providing oversights of the development and management of Payment Card Industry Data Security Standards on a global basis. What are the founding payment brands? - correct answer American express, Discover, JCB, Mastercard, and VISA What define the merchant levels? - correct answer defined by the payment brands, based on transaction volume. Transaction volume determined by the acquirer) What define the service provider lev...

CSIT 188 Midterm Exam Questions and Answers All Correct Tom is running a penetration test in a web application and discovers a flaw that allows him to shut down the web server remotely. What goal of penetration testing has Tom most directly achieved? A. Disclosure B. Integrity C. Alteration D. Denial - Answer-D. Tom's attack achieved the goal of denial by shutting down the web server and prevent-ing legitimate users from accessing it. Brian ran a penetration test against a sc...

PCI Data Security Standard (PCI DSS) The PCI DSS applies to all entities that store, process, and/or transmit cardholder data. It covers technical and operational system components included in or connected to cardholder data. If you accept or process payment cards, PCI DSS applies to you. Sensitive Authentication Data Merchants, service providers, and other entities involved with payment card processing must never store sensitive authentication data after authorization. This includes the 3-...