Free PCI SSC QSA_New_V4 Exam Dumps Questions & Answers

A sample of business facilities is reviewed during the PCI DSS assessment. What is the assessor required to validate about the sample?

• A.It includes a consistent set of facilities that are reviewed for all assessments.
• B.All types and locations of facilities are represented.
• C.The number of facilities in the sample is at least 10 percent of the total number of facilities.
• D.Every facility where cardholder data is stored is reviewed.

According to Requirement 1, what is the purpose of "Network Security Controls"?

• A.Manage anti-malware throughout the CDE.
• B.Control network traffic between two or more logical or physical network segments.
• C.Encrypt PAN when stored.
• D.Discover vulnerabilities and rank them.

Which scenario meets PCI DSS requirements for critical systems to have correct and consistent time?

• A.Access to time configuration settings is available to all users of the system.
• B.Central time servers receive time signals from specific, approved external sources.
• C.Each internal system is configured to be its own time server.
• D.Each internal system peers directly with an external source to ensure accuracy of time updates.

Which of the following types of events is required to be logged?

• A.All network transmissions.
• B.All access to external web sites.
• C.All use of end-user messaging technologies.
• D.All access to all audit trails.

A "Partial Assessment" is a new assessment result. What is a "Partial Assessment"?

• A.An interim result before the final ROC has been completed.
• B.A term used by payment brands and acquirers to describe entities that have multiple payment channels, with each channel having its own assessment.
• C.A ROC that has been completed after using an SAQ to determine which requirements should be tested, as per FAQ 1331.
• D.An assessment with at least one requirement marked as "Not Tested".