Question 1

What does ASV stand for?

Options :

A : Applied Security Vendor

B : Applicable Scanning Vendor

C : Accepted Security Vendor

D : Approved Scanning Vendor

Answer: D

Question 2

How often should network security control configurations be reviewed

Options :

A : Every year

B : Every 6 months

C : Every month

D : Every 3 months

Answer: B

Question 3

An entity is looking at ways to securely destroy their electronic media that contains CHD. Which of the following would be suitable?

Options :

A : Shredding

B : Grinding

C : Degaussing

D : Deleting

Answer: A,B,C

Question 4

Requirement 6.5.2 dictates what?

Options :

A : All payment page scripts that are loaded and executed in the consumer’s browser are managed as follows

B : Upon completion of a significant change, all applicable PCI DSS requirements are confirmed to be in place on all new or changed systems and networks, and documentation is updated as applicable

C : Changes to all system components in the production environment are made according to established procedures that include

D : For public-facing web applications, new threats and vulnerabilities are addressed on an ongoing basis and these applications are protected against known attacks

Answer: B

Question 5

An entity is determining what their audit logs should capture. Which one of the listed options should they include?

Options :

A : Logs that show when members of an admin group have made a phone call

B : An entity can determine how thorough their logs are as this is not specifically included in the PCI DSS version 4

C : Logs of when staff have taken their lunch break

D : Starting, stopping, or pausing of the existing logs

Answer: D

Higher Test Marks with Free Online PCIP_New_V4 Exam Practice

Buying Options: