最新のAssessor_New_V4問題集で試験を準備する

PCI SSC Assessor_New_V4 試験概要:

PCI SSC Assessor_New_V4 試験シラバストピック:

PCI SSC Assessor_New_V4 認定 Assessor_New_V4 試験問題：

1. An entity accepts e-commerce payment card transactions and stores account data in a database The database server and the web server are both accessible from the Internet The database server and the web server are on separate physical servers. What is required for the entity to meet PCI DSS requirements7

A) The database server should be relocated so that it is not accessible from untrusted networks
B) The database server should be moved to a separate segment from the web server to allow for more concurrent connections
C) The web server should be moved into the internal network
D) The web server and the database server should be installed on the same physical server

2. Which statement is true regarding the use of intrusion detection techniques, such as intrusion detection systems and/or intrusion protection systems (IDS'IPS)?

A) Intrusion detection techniques are required on all system components
B) Intrusion detection techniques are required to alert personnel of suspected compromises
C) Intrusion detection techniques are required to identify all instances of cardholder data
D) Intrusion detection techniques are required to isolate systems in the cardholder data environment from all other systems

3. Security policies and operational procedures should be?

A) Stored securely so that only management has access
B) Encrypted with strong cryptography
C) Distributed to and understood by all affected parties
D) Reviewed and updated at least quarterly

4. In the ROC Repotting Template, which of the following is the best approach for a response where the requirement was in Place''?

A) Details of how the assessor observed the entity s systems were not compliant with the requirement
B) Details of the entity s reason for not implementing the requirement
C) Details of how the assessor observed the entity s systems were compliant with the requirement
D) Details of the entity s project plan for implementing the requirement

5. Which of the following describes "stateful responses' to communication initiated by a trusted network?

A) Administrative access to respond to requests to change the firewall is limited to one individual at a time
B) Logs of user activity on the firewall are correlated to identify and respond to suspicious behavior
C) Active network connections are tracked so that invalid response' traffic can be identified.
D) A current baseline of application configurations is maintained and any mis-configuration is responded to promptly

質問と回答：