PCIP3.0 무료 덤프문제 온라인 액세스

Requirement 3.5 requires document and implement procedures to protect keys used to secure stored cardholder data against disclose and misuse. This requirement applies to keys used to encrypt stored cardholder data, and also applies to key-encrypting keys used to protect data-encrypting keys. Such key-encrypting keys must be

• A.stronger than the data-encrypting keys
• B.stored at the same location of the data-encrypting key
• C.less stronger as the data-encrypting keys
• D.at least as strong as the data-encrypting keys

Who can perform quarterly external vulnerability scans meeting requirement 11.2.2?

• A.Any employee
• B.Qualified personnel
• C.Approved Scanning Vendor (ASV) approved by PCI SSC
• D.IT Security personnel

What is the Appendix B on PCI DSS 3.0?

• A.Segmentation and Sampling of Business Facilities/System Components
• B.Compensating Controls
• C.Compensating Controls Worksheet
• D.Additional PCI DSS Requirements for Shared Hosting Providers

Requirement 2.2.2 and 2.2.3 cover the use of secure services, protocols, and daemons as required for the function of a system. Which of the following is considered secure?

• A.Telnet
• B.SSH
• C.RLogon
• D.FTP

Protect all systems against malware and regularly updated anti-virus software or programs is the
____________

• A.Requirement 7
• B.Requirement 6
• C.Requirement 5
• D.Requirement 4