PCI SSC Assessor_New_V4 認定 Assessor_New_V4 試験問題:

1. What would be an appropriate strength for the key-encrypting key (KEK) used to protect an AES 128-bit data-encrypting key (DEK)

A) AES 128
B) DES256
C) ROT 13
D) RSA512

2. If disk encryption is used to protect account data what requirement should be met for the disk encryption solution?

A) The decryption keys must be associated with the local user account database
B) The disk encryption system must use the same user account authenticator as the operating system
C) The decryption keys must be stored within the local user account database
D) Access to the disk encryption must be managed independently of the operating system access control mechanisms

3. A "Partial Assessment is a new assessment result What is a 'Partial Assessment'?

A) An assessment with at least one requirement marked as Not Tested"
B) A term used by payment brands and acquirers to describe entities that have multiple payment channels with each channel having its own assessment
C) A ROC that has been completed after using an SAQ to determine which requirements should be tested.
As per FAQ 1331. (As long as the entity meets the SAQs eligibility criteria)
D) An interim result before the final ROC has been completed

4. Could an entity use both the Customized Approach and the Defined Approach to meet the same requirement?

A) No. because only compensating controls can be used with the Defined Approach
B) Yes if the entity is eligible to use both approaches
C) Yes if the entity uses no compensating controls
D) No because a single approach must be selected

5. Which of the following describes "stateful responses' to communication initiated by a trusted network?

A) Administrative access to respond to requests to change the firewall is limited to one individual at a time
B) Logs of user activity on the firewall are correlated to identify and respond to suspicious behavior
C) Active network connections are tracked so that invalid response' traffic can be identified.
D) A current baseline of application configurations is maintained and any mis-configuration is responded to promptly

質問と回答：