최신 QSA_New_V4 무료덤프 - PCI SSC Qualified Security Assessor V4

A. Direct queries to the database are restricted to shared database administrator accounts.

B. User access to the database is restricted to system and network administrators.

C. Application IDs for database applications can only be used by database administrators.

D. User access to the database is only through programmatic methods.

A. Production (live) environments only.

B. Pre-production environments that are located within the CDE.

C. Pre-production (test) environments only it located outside the CDE.

D. Testing with live PANs must only be performed in the OSA Company environment.

A. It must be protected with strong cryptography for transmission over private wired networks.

B. It does not require protection for transmission over public wireless networks.

C. It must be protected with strong cryptography for transmission over private wireless networks.

D. It does not require protection for transmission over public wired networks.

A. Personnel with access to the cardholder data environment.

B. All personnel employed by the organization.

C. Cashiers with access to one card number at a time.

D. Visitors with access to the organization's facilities.

A. Software developed by an entity for the entity's own use.

B. Virtual payment terminals.

C. Any software developed by a third party that can be customized by an entity.

D. Any software developed by a third party.

A. Visitor log includes visitor name, address, and contact phone number.

B. Visitor badges are identical to badges used by onsite personnel.

C. Visitors retain their identification (for example, a visitor badge) for 30 days after completion of the visit.

D. Visitors are escorted at all times within areas where cardholder data is processed or maintained.

A. Yes, if the entity uses no compensating controls.

B. Yes, if the entity is eligible to use both approaches.

C. No, because a single approach must be selected.

D. No, because only compensating controls can be used with the Defined Approach.