PCI SSC Assessor_New_V4 認定 Assessor_New_V4 試験問題:

1. An organization has implemented a change-detection mechanism on their systems. How often must critical file comparisons be performed?

A) Periodically as defined by the entity
B) At least monthly
C) Only after a valid change is installed
D) At least weekly

2. Could an entity use both the Customized Approach and the Defined Approach to meet the same requirement?

A) No. because only compensating controls can be used with the Defined Approach
B) Yes if the entity is eligible to use both approaches
C) Yes if the entity uses no compensating controls
D) No because a single approach must be selected

3. In the ROC Repotting Template, which of the following is the best approach for a response where the requirement was in Place''?

A) Details of how the assessor observed the entity s systems were not compliant with the requirement
B) Details of the entity s reason for not implementing the requirement
C) Details of how the assessor observed the entity s systems were compliant with the requirement
D) Details of the entity s project plan for implementing the requirement

4. What is the intent of classifying media that contains cardholder data?

A) Ensuring that media containing cardholder data is moved from secured areas an a quarterly basis
B) Ensuring that all media is consistently destroyed on the same schedule regardless of the contents
C) Ensuring that media is clearly and visibly labeled as 'Confidential so all personnel know that the media contains cardholder data
D) Ensuring that media is property protected according to the sensitivity of the data it contains

5. Which scenario describes segmentation of the cardholder data environment (CDE) for the purposes of reducing PCI DSS scope?

A) A network configuration that prevents all network traffic between the CDE and out-of-scope networks
B) Routers that monitor network traffic flows between the CDE and out-of-scope networks
C) Firewalls that log all network traffic flows between the CDE and out of-scope networks
D) Virtual LANs that route network traffic between the CDE and out-of-scope networks

質問と回答：