CSC CSC - Cybersecurity Compliance PCI DSS Payment Card Security Questions and Answers 2

Question 1

PCI DSS Requirement 1 focuses on which security control category?

Accepted Answer

Installing and maintaining network security controls

Answer

Encrypting cardholder data at rest

Answer

Managing access control for databases

Answer

Implementing anti-malware software

Question 2

Under PCI DSS, what is the maximum number of digits that may be displayed when masking a primary account number (PAN)?

Accepted Answer

The first six and last four digits

Answer

The last eight digits only

Answer

The first four digits only

Answer

No digits may be displayed

Question 3

Which cryptographic approach does PCI DSS recommend for protecting PANs stored in databases?

Accepted Answer

Strong one-way hash functions or strong encryption

Answer

Base64 encoding

Answer

ROT13 obfuscation

Answer

Password-protected ZIP archives

Question 4

What does PCI DSS Requirement 6 specifically require organizations to do?

Accepted Answer

Develop and maintain secure systems and software

Answer

Monitor all access to cardholder data

Answer

Restrict physical access to cardholder data

Answer

Protect all systems against malware

Question 5

How often must PCI DSS-compliant organizations perform internal vulnerability scans of their CDE?

Accepted Answer

At least quarterly

Answer

Annually only

Answer

Monthly

Answer

Only after a significant change

Question 6

What is the purpose of a Self-Assessment Questionnaire (SAQ) in PCI DSS?

Accepted Answer

A validation tool for eligible merchants and service providers to self-evaluate compliance

Answer

A document submitted to acquire merchant account approval

Answer

A technical checklist used only by QSAs during on-site audits

Answer

A report filed with the FTC after a data breach