Free PCI SSC Assessor_New_V4 Exam Dumps Questions & Answers

A network firewall has been configured with the latest vendor security patches What additional configuration is needed to harden the firewall?

• A.Configure the firewall to permit all traffic until additional rules are defined
• B.Remove the default 'Firewall Administrator account and create a shared account for firewall administrators to use.
• C.Synchronize the firewall rules with the other firewalls m the environment
• D.Disable any firewall functions that are not needed in production

At which step in the payment transaction process does the merchants bank pay the merchant for the purchase and the cardholder s bank bill the cardholder?

• A.Settlement
• B.Clearing
• C.Chargeback
• D.Authorization

Which of the following can be sampled for testing during a PCI DSS assessment?

• A.Compensating controls
• B.Security policies and procedures
• C.Business facilities and system components
• D.PCI DSS requirements and testing procedures.

Which statement is true regarding the use of intrusion detection techniques, such as intrusion detection systems and/or intrusion protection systems (IDS'IPS)?

• A.Intrusion detection techniques are required to identify all instances of cardholder data
• B.Intrusion detection techniques are required to isolate systems in the cardholder data environment from all other systems
• C.Intrusion detection techniques are required to alert personnel of suspected compromises
• D.Intrusion detection techniques are required on all system components

The intent of assigning a risk ranking to vulnerabilities is to?

• A.Prioritize the highest risk items so they can be addressed more quickly
• B.Ensure all vulnerabilities are addressed within 30 days
• C.Replace the need to quarterly ASV scans
• D.Ensure that critical security patches are installed at least quarterly