最新のAssessor_New_V4問題集で試験を準備する

PCI SSC Assessor_New_V4 試験概要:

PCI SSC Assessor_New_V4 試験シラバストピック:

PCI SSC Assessor_New_V4 認定 Assessor_New_V4 試験問題：

問題 #1

What should the assessor verify when testing that cardholder data is protected whenever it is sent over open public networks?

A. The security protocol accepts only trusted keys
B. The security protocol accepts connections from systems with lower encryption strength than required by the protocol
C. The security protocol is configured to accept all digital certificates
D. A proprietary security protocol is used

問題 #2

Which scenario meets PCI DSS requirements for critical systems to have correct and consistent time?

A. Central time servers receive time signals from specific, approved external sources
B. Access to time configuration settings is available to all users of the system.
C. Each internal system is configured to be its own time server.
D. Each internal system peers directory with an external source to ensure accuracy of time updates

問題 #3

Could an entity use both the Customized Approach and the Defined Approach to meet the same requirement?

A. No. because only compensating controls can be used with the Defined Approach
B. Yes if the entity is eligible to use both approaches
C. Yes if the entity uses no compensating controls
D. No because a single approach must be selected

問題 #4

Security policies and operational procedures should be?

A. Stored securely so that only management has access
B. Encrypted with strong cryptography
C. Distributed to and understood by all affected parties
D. Reviewed and updated at least quarterly

問題 #5

Which of the following statements is true regarding track equivalent data on the chip of a payment card?

A. It is sensitive authentication data
B. It is out of scope for PCI DSS
C. It is not applicable for PCI DSS Requirement 3.2
D. It is allowed to be stored by merchants after authorization if encrypted

解説：