PCIP PCI DSS Requirements & Compliance Framework

Question 1

What is the main purpose of the PCI DSS?

Accepted Answer

To enhance payment card data security

Answer

To manage internet access

Answer

To store card data indefinitely

Answer

To monitor user behavior online

Question 2

How many main requirements are there in the PCI DSS framework?

Accepted Answer

12

Answer

6

Answer

8

Answer

10

Question 3

Which of the following is a PCI DSS requirement?

Accepted Answer

Install and maintain a firewall

Answer

Use default system passwords

Answer

Store sensitive data in plain text

Answer

Allow unrestricted access to cardholder data

Question 4

Why is encryption important in PCI DSS?

Accepted Answer

It protects data in transit

Answer

It improves battery life

Answer

It hides error messages

Answer

It speeds up connections

Question 5

Which data should never be stored according to PCI DSS?

Accepted Answer

Full magnetic stripe data

Answer

Cardholder name

Answer

Card expiration date

Answer

Billing address

Question 6

How often must vulnerability scans be performed by PCI DSS-compliant organizations?

Accepted Answer

Quarterly

Answer

Annually

Answer

Bi-annually

Answer

Monthly

Question 7

Who is responsible for PCI DSS compliance?

Accepted Answer

Everyone in the organization handling card data

Answer

Only the IT department

Answer

Only auditors

Answer

Only card issuers

Question 8

What is the role of a Qualified Security Assessor (QSA)?

Accepted Answer

Assess PCI DSS compliance

Answer

Monitor employee productivity

Answer

Provide legal advice

Answer

Configure POS systems

Question 9

Which action helps meet PCI DSS physical security requirements?

Accepted Answer

Restricting access to sensitive areas

Answer

Allowing public access to servers

Answer

Posting passwords on monitors

Answer

Sharing access cards freely