최신 Assessor_New_V4 무료덤프 - PCI SSC Assessor_New

문제1

Which systems must have anti-malware solutions'

A. Any in-scope system except for those identified as not at risk from malware

B. All systems that store PAN

C. All CDE systems, connected systems. NSCs. and security-providing systems

D. All portable electronic storage

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제2

What must the assessor verify when testing that PAN is protected whenever it is sent over the Internet?

A. The security protocol is configured to support earlier versions

B. The PAN is encrypted with strong cryptography

C. The security protocol is configured to accept all digital certificates

D. The PAN is securely deleted once the transmission has been sent

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제3

What would be an appropriate strength for the key-encrypting key (KEK) used to protect an AES 128-bit data-encrypting key (DEK)

A. DES256

B. AES 128

C. ROT 13

D. RSA512

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Assigning a unique ID to each person is intended to ensure?

A. Individual users are accountable for their own actions

B. Access is assigned to group accounts based on need-to-know

C. Strong passwords are used for each user account

D. Shared accounts are only used by administrators

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Could an entity use both the Customized Approach and the Defined Approach to meet the same requirement?

A. No because a single approach must be selected

B. No. because only compensating controls can be used with the Defined Approach

C. Yes if the entity is eligible to use both approaches

D. Yes if the entity uses no compensating controls

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

A retail merchant has a server room containing systems that store encrypted PAN data. The merchant has implemented a badge access-control system that identities who entered and exited the room on what date and at what time There are no video cameras located in the server room Based on this information, which statement is true regarding PCI DSS physical security requirements?

A. Data from the access-control system must be securely deleted on a monthly basis

B. The merchant must install motion-sensing alarms in addition to the existing access-control system

C. The badge access-control system must be protected from tampering or disabling

D. The merchant must install video cameras in addition to the existing access-control system

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

최신 Assessor_New_V4 무료덤프 - PCI SSC Assessor_New_V4

우리와 연락하기

유용한 링크

최신 업데이트