최신PCI SSC Qualified Security Assessor V4 - QSA_New_V4무료샘플문제

A. A compensating control is not necessary if all other PCI DSS requirements are in place.

B. A compensating control must address the risk associated with not adhering to the PCI DSS requirement.

C. A compensating control worksheet is not required if the acquirer approves the compensating control.

D. An existing PCI DSS requirement can be used as compensating control if it is already implemented.

A. The disk encryption system must use the same user account authenticator as the operating system.

B. The decryption keys must be stored within the local user account database.

C. Access to the disk encryption must be managed independently of the operating system access control mechanisms.

D. The decryption keys must be associated with the local user account database.

A. Individuals with a job-related need.

B. Individuals who performed the logged activity.

C. Individuals with read/write access.

D. Individuals with administrator privileges.

A. Not in scope for PCI DSS.

B. In scope for PCI DSS.

C. In scope only if it provides authentication services to systems in the DMZ.

D. In scope only if it stores, processes or transmits cardholder data.

A. AES 128

B. RSA 512

C. ROT 13

D. DES 256

A. The AOC must be signed by both the merchant/service provider and by PCI SSC.

B. The AOC must be signed by either the merchant/service provider or the QSA/ISA.

C. The same AOC template is used for ROCs and SAQs.

D. There are different AOC templates for service providers and merchants.

A. Not in scope for PCI DSS.

B. In scope for PCI DSS.

C. Only in scope if it stores, processes or transmits cardholder data.

D. Only in scope if it provides time services to database servers.

A. The AOC must be signed by both the merchant/service provider and by PCI SSC.

B. The same AOC template is used W ROCs and SAQs.

C. The AOC must be signed by either the merchant/service provider or the QSA/ISA.

D. There are different AOC templates for service providers and merchants.