PCI Leadership & Team Management 2

Question 1

Under PCI DSS v4.0, how often must personnel complete security awareness training?

Accepted Answer

Upon hire and at least once every 12 months

Answer

Requirement 12.6 requires awareness training upon hire and at least every 12 months.

Question 2

For service providers, who must establish responsibility for protecting cardholder data and the PCI DSS compliance program?

Accepted Answer

Executive management

Answer

Requirement 12.4.1 assigns this responsibility to executive management for service providers.

Question 3

How often must PCI DSS scope be documented and confirmed by the entity?

Accepted Answer

At least every 12 months and after significant changes

Answer

Requirement 12.5.2 requires scope confirmation at least every 12 months and upon significant change.

Question 4

What must personnel do regarding their PCI DSS responsibilities under Requirement 12.1.3?

Accepted Answer

Formally acknowledge them at least once every 12 months

Answer

Roles and responsibilities must be defined and personnel must acknowledge them at least annually.

Question 5

What is the purpose of screening potential personnel before hire under Requirement 12.7?

Accepted Answer

To reduce the risk of insider attacks

Answer

Pre-hire screening minimizes the risk of attacks from internal sources.

PCI - Certified Payment Card Industry Specialist Practice Test