QSA_New_V4 무료 덤프문제 온라인 액세스

Security policies and operational procedures should be?

• A.Encrypted with strong cryptography.
• B.Stored securely so that only management has access.
• C.Reviewed and updated at least quarterly.
• D.Distributed to and understood by ail affected parties.

What do PCI DSS requirements for protecting cryptographic keys include?

• A.Private or secret keys must be encrypted, stored within an SCD, or stored as key components.
• B.Data-encrypting keys must be stronger than the key-encrypting key that protects it.
• C.Key-encrypting keys and data-encrypting keys must be assigned to the same key custodian.
• D.Public keys must be encrypted with a key-encrypting key.

What must the assessor verify when testing that PAN is protected whenever it is sent over the Internet?

• A.The PAN is encrypted with strong cryptography.
• B.The PAN is securely deleted once the transmission has been sent.
• C.The security protocol is configured to support earlier versions.
• D.The security protocol is configured to accept all digital certificates.

What is the intent of classifying media that contains cardholder data?

• A.Ensuring that media containing cardholder data is moved from secured areas on a quarterly basis.
• B.Ensuring that all media is consistently destroyed on the same schedule, regardless of the contents.
• C.Ensuring that media is properly protected according to the sensitivity of the data it contains.
• D.Ensuring that media is clearly and visibly labeled as "Confidential" so all personnel know that the media contains cardholder data.

Which of the following describes "stateful responses" to communication Initiated by a trusted network?

• A.Logs of user activity on the firewall are correlated to identify and respond to suspicious behavior.
• B.A current baseline of application configurations is maintained and any mis-configuration is responded to promptly.
• C.Administrative access to respond to requests to change the firewall Is limited to one individual at a time.
• D.Active network connections are tracked so that invalid "response" traffic can be identified.