Practice Test GeeksPCI - Certified Payment Card Industry Specialist Practice Test
← All PCI Flashcard Decks

Project Management & Execution Flashcards

7 cards from real PCI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Project Management & Execution flashcards as text

  1. What is a key precondition for using a compensating control?

    Answer: A legitimate technical or documented business constraint prevents meeting the requirement explicitly

    Compensating controls require a legitimate technical or documented business constraint; cost alone is not sufficient.

  2. Under the Prioritized Approach, what does Milestone 1 target?

    Answer: Removing sensitive authentication data and limiting data retention

    Milestone 1 focuses on not storing sensitive authentication data and minimizing cardholder data retained.

  3. Which statement about the customized approach in v4.0 is true?

    Answer: It requires a targeted risk analysis and documented controls matrix, and is not available for SAQ merchants

    The customized approach is for entities with mature risk management, requires extra documentation, and cannot be used with SAQs.

  4. What does a targeted risk analysis (Requirement 12.3.1) typically determine?

    Answer: The frequency of performing certain periodic requirements

    Targeted risk analyses define how often flexible periodic activities are performed.

  5. Under Requirement 6.3.3, within what timeframe should critical and high-security patches be installed?

    Answer: Within one month of release

    Critical and high-risk security patches must be installed within one month of release.

  6. Which ROC finding status can NOT appear in a compliant final assessment for an applicable requirement?

    Answer: Not in Place

    A 'Not in Place' result for an applicable requirement means the entity is not compliant.

  7. When did the future-dated PCI DSS v4.0 requirements become mandatory?

    Answer: March 31, 2025

    The future-dated requirements became effective on March 31, 2025 after v3.2.1 retired in March 2024.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. pcisecuritystandards.org — Test delivery, eligibility, fees, exam format, passing score, renewal, retake fee, retake policy, score release, test dates · verified Oct 2026
  2. pearsonvue.com — Test delivery · verified Oct 2026