Question 1

What is an 'inactive user account'?

Options :

A : An account that has only been used once over the course of 90 days

B : An account that is used by a current employee for a particular task

C : An account that has not been used in over 30 days

D : An account that has not been used in over 90 days

Answer: D

Question 2

Which appendix is designed for Sample Templates to Support Customized Approach

Options :

A : Appendix F

B : Appendix E

C : Appendix C

D : Appendix B

Answer: B

Question 3

An entity is currently having their annual assessment performed by a QSA and have been asked to show documentation of how often they review their audit logs. The entity supplies documentation that shows they check their logs daily. What is the QSA likely to conclude for this part of the requirement?

Options :

A : The QSA doesn't need to assess how often audit logs are checked as this falls outside of the scope of PCI DSS version 4

B : The QSA will mark this as non-compliant

C : The QSA will confirm this is compliant but tell the entity that they can reduce this to once a week and still remain compliant

D : The QSA will confirm this is compliant and satisfies this specific part of the requirement

Answer: D

Question 4

All internal scanning must be what?

Options :

A : Performed monthly

B : Require an ASV for internal scanning to match external scanning

C : Performed via authenticated scanning

D : Performed via unauthenticated scanning

Answer: C

Question 5

Which of these should be secured as per requirement 1.2.8?

Options :

A : All staff passwords

B : A note on top of NSCs that says "Do not touch"

C : Any file or setting used to configure NSCs

D : Vendor guidance for configuring firewalls

Answer: C

Higher Test Marks with Free Online PCIP_New_V4 Exam Practice

Buying Options: