Question 1

You have just had an external scan performed and have been told you have 2 vulnerabilities that have been scored as medium. What should be done next?

Options :

A : The vulnerabilities should be remediated and another external scan should be completed

B : Nothing has to be remediated since the vulnerability is not high or critical

C : PCI DSS version 4 only requires internal scans for compliance. External scans are an optional area to improve security posture

D : The vulnerability should be marked as a false positive and the scan result should be added to documentation

Answer: A

Question 2

What does ASV stand for?

Options :

A : Applied Security Vendor

B : Applicable Scanning Vendor

C : Accepted Security Vendor

D : Approved Scanning Vendor

Answer: D

Question 3

An organization has multiple business locations, each with its own payment processing setup. Some locations process card-present transactions using point-of-sale (POS) terminals, while others handle e-commerce transactions through their website. As a PCI Professional, which Self-Assessment Questionnaire (SAQ) would be most appropriate for the organization's overall PCI DSS compliance assessment?

Options :

A : SAQ B

B : SAQ A-EP

C : SAQ D

D : SAQ P2PE

Answer: C

Question 4

Which of the following is NOT considered a key principle of the Payment Card Industry Data Security Standard (PCI DSS)?

Options :

A : Regularly Monitor and Test Networks

B : Ensure Compliance with Industry Regulations

C : Maintain a Vulnerability Management Program

D : Implement Strong Access Control Measures

Answer: B

Question 5

What should always be included in any access control model?

Options :

A : Names of all roles

B : List of people in authority

C : Principle of least privilege

D : Names of all staff

Answer: C

Higher Test Marks with Free Online PCIP_New_V4 Exam Practice

Buying Options: