Free PCI PCIP3.0 Test Practice Test Questions Exam Dumps [Q47-Q69]

NEW QUESTION 47
Internal and external penetration tests should be performed_______________ to meet requirement
1 1.3.1 and 11.3.2

NEW QUESTION 48
Identify and authenticate access to system components is the __________

NEW QUESTION 49
Storing track data “long-term” or “persistently” is permitted when

NEW QUESTION 50
Requirement 8.2.3 states that passwords/phrases must contain both numeric and alphabetic characters and a minimum length of at least

NEW QUESTION 51
For initial PCI DSS compliance, it’s not required that four quarters of passing scans must be completed if the assessor verifies that 1) the most recent scan result was a passing scan, 2) the entity has documented policies and procedures requiring quarterly scanning, and 3) vulnerabilities noted in the scan results have been corrected as shown in a re-scan(s).

NEW QUESTION 52
Internal and external vulnerability scans should run at minimum on every __________ to meet requirement 11.2

NEW QUESTION 53
The Information Supplements: (Select ALL that apply)

NEW QUESTION 54
SELECT ALL THAT MATCHES
Examples of two-factor technologies include:

NEW QUESTION 55
The P2PE Standard covers:

NEW QUESTION 56
The PCI DSS Requirement most closely associated with “Logging” is ____________

NEW QUESTION 57
Merchants using P2PE solutions are still required to validate to PCI DSS

NEW QUESTION 58
A company that ________ is considered to be a service provider.

NEW QUESTION 59
Merchants with segmented payment application systems connected to the Internet, no electronic cardholder data storage, may be eligible to use what SAQ?

NEW QUESTION 60
When masking the PAN what is the maximum number of digits allowed to be displayed

NEW QUESTION 61
SELECT ALL THAT APPLY
Select all audit trails that must be recorded for all system components according to requirement 10.3

NEW QUESTION 62
Restrict access to cardholder data by business need-to-know

NEW QUESTION 63
Requirement 11.3 – Implement a methodology for penetration testing is a best practice until June 30 2015

NEW QUESTION 64
Use of a Qualified Integrator/Reeller (QIR):

NEW QUESTION 65
Quarterly internal vulnerability scans should be executed and rescans as needed until what point?

NEW QUESTION 66
Imprint-Only Merchants with no electronic storage of cardholder data may be eligible to use which SAQ?

NEW QUESTION 67
PCI DSS Requirement 1 covers:

NEW QUESTION 68
If an e-commerce service provider was deemed eligible to complete an SAQ, which SAQ would they use?

NEW QUESTION 69
The implementation of a Security Awareness Program (Requirement 12.6) requires that personnel must be educated upon hire and at least