PCIP3.0 試験問題を無料オンラインアクセス

PCI Requirement 12.6 requires personnel to acknowledge at least _______ that they have read and understood the security policy and procedures.

• A.Quarterly
• B.Annually
• C.Every six months
• D.Once during their employment

The PCI DSS Requirement most closely associated with "Logging" is ____________

• A.Requirement 2
• B.Requirement 10
• C.Requirement 11
• D.Requirement 8

Use of a Qualified Integrator/Reeller (QIR):

• A.replaces the need for PCI DSS
• B.ensures PCI DSS compliance
• C.is required by PCI DSS
• D.is a good step towards PCI DSS compliance

What are best practices for implementing PCI DSS into Business-as-Usual (BAU) Processes? (Select
ALL that apply)

• A.PCI DSS is not a once-a-year activity
• B.Building security into business-as-usual helps organizations to maintain their PCI DSS compliant environment in between PCI DSS assessments
• C.Don't forget about people
• D.Focus on security, not on compliance

Internal and external penetration tests should be performed_______________ to meet requirement
1 1.3.1 and 11.3.2

• A.Quarterly
• B.Monthly
• C.Every 60 days
• D.Yearly