CSC CSC - Cybersecurity Compliance PCI DSS Payment Card Security Questions and Answers

Question 1

Which organization maintains and publishes the Payment Card Industry Data Security Standard (PCI DSS)?

Accepted Answer

PCI Security Standards Council

Answer

Federal Trade Commission

Answer

NIST

Answer

ISO

Question 2

How many high-level requirements does PCI DSS version 4.0 contain?

Accepted Answer

12

Answer

8

Answer

16

Answer

6

Question 3

Which PCI DSS requirement specifically addresses the protection of stored cardholder data?

Accepted Answer

Requirement 3

Answer

Requirement 1

Answer

Requirement 6

Answer

Requirement 10

Question 4

What does the term 'cardholder data environment' (CDE) refer to in PCI DSS?

Accepted Answer

Systems that store, process, or transmit cardholder data

Answer

Only point-of-sale terminals

Answer

The card issuer's internal network

Answer

Encrypted backup storage only

Question 5

Which PCI DSS compliance validation level applies to merchants processing over 6 million Visa transactions annually?

Accepted Answer

Level 1

Answer

Level 2

Answer

Level 3

Answer

Level 4

Question 6

What is a Qualified Security Assessor (QSA) in the context of PCI DSS?

Accepted Answer

A company certified by PCI SSC to conduct PCI DSS compliance assessments

Answer

An internal auditor trained in ISO 27001

Answer

A federal regulator who enforces PCI standards

Answer

A card brand representative who approves merchant accounts