CSC CSC - Cybersecurity Compliance PCI DSS Payment Card Security Questions and Answers 1

Question 1

Which organization maintains and publishes the Payment Card Industry Data Security Standard (PCI DSS)?

Accepted Answer

PCI Security Standards Council

Answer

The PCI Security Standards Council (PCI SSC), founded by major card brands, owns and publishes PCI DSS.

Question 2

How many high-level requirements does PCI DSS version 4.0 contain?

Accepted Answer

12

Answer

PCI DSS v4.0 retains the same 12 high-level requirements as prior versions while adding new sub-requirements.

Question 3

Which PCI DSS requirement specifically addresses the protection of stored cardholder data?

Accepted Answer

Requirement 3

Answer

PCI DSS Requirement 3 mandates protecting stored account data through encryption, masking, and retention controls.

Question 4

What does the term 'cardholder data environment' (CDE) refer to in PCI DSS?

Accepted Answer

Systems that store, process, or transmit cardholder data

Answer

The CDE encompasses all people, processes, and technology that store, process, or transmit cardholder or sensitive authentication data.

Question 5

Which PCI DSS compliance validation level applies to merchants processing over 6 million Visa transactions annually?

Accepted Answer

Level 1

Answer

Level 1 merchants process more than 6 million transactions per year and must undergo an annual on-site audit by a QSA.

(CSC) Cybersecurity Compliance Certification Practice Test