Free PCI SSC QSA_New_V4 Exam Dumps Questions & Answers

PCI DSS Requirement 12.7 requires screening and background checks for which of the following?

• A.All personnel employed by the organization.
• B.Cashiers with access to one card number at a time.
• C.Visitors with access to the organization's facilities.
• D.Personnel with access to the cardholder data environment.

Which of the following is required to be included in an incident response plan?

• A.Procedures for responding to the detection of unauthorized wireless access points.
• B.Procedures for notifying PCI SSC of the security incident.
• C.Procedures for securely deleting incident response records immediately upon resolution of the incident.
• D.Procedures for launching a reverse-attack on the individual(s) responsible for the security incident.

Which of the following parties is responsible for completion of the Controls Matrix for the Customized Approach?

• A.Entity being assessed.
• B.Only a Qualified Security Assessor (QSA).
• C.Either a QSA, AQSA, or PCIP.
• D.Card brands or acquirer.

According to the glossary, "bespoke and custom software" describes which type of software?

• A.Any software developed by a third party.
• B.Software developed by an entity for the entity's own use.
• C.Any software developed by a third party that can be customized by an entity.
• D.Virtual payment terminals.

Which of the following statements is true regarding track equivalent data on the chip of a payment card?

• A.It is allowed to be stored by merchants after authorization, if encrypted.
• B.It is out of scope for PCI DSS.
• C.It is sensitive authentication data.
• D.It is not applicable for PCI DSS Requirement 3.2.