Free PCI SSC Assessor_New_V4 Exam Dumps Questions & Answers

Which of the following file types must be monitored by a change-detection mechanism (for example, a file-integrity monitoring tool)?

• A.Files that regularly change
• B.Application vendor manuals
• C.Security policy and procedure documents
• D.System configuration and parameter files

Which of the following statements is true regarding track equivalent data on the chip of a payment card?

• A.It is sensitive authentication data
• B.It is allowed to be stored by merchants after authorization if encrypted
• C.It is out of scope for PCI DSS
• D.It is not applicable for PCI DSS Requirement 3.2

What do PCI DSS requirements for protecting cryptographic keys include?

• A.Data-encrypting keys must be stronger than the key-encrypting key that protects it.
• B.Private or secret keys must be encrypted, stored within an SCD or stored as key components
• C.Key-encrypting keys and data-encrypting keys must be assigned to the same key custodian
• D.Public keys must be encrypted with a key-encrypting key.

What would be an appropriate strength for the key-encrypting key (KEK) used to protect an AES 128-bit data-encrypting key (DEK)

• A.RSA512
• B.AES 128
• C.DES256
• D.ROT 13

The intent of assigning a risk ranking to vulnerabilities is to?

• A.Replace the need to quarterly ASV scans
• B.Ensure that critical security patches are installed at least quarterly
• C.Prioritize the highest risk items so they can be addressed more quickly
• D.Ensure all vulnerabilities are addressed within 30 days