PCI Leadership & Team Management 5

Question 1

What is the role of the PCI Security Standards Council?

Accepted Answer

It develops and manages the standards but does not enforce compliance

Answer

Enforcement is carried out by payment brands and acquirers.

Question 2

Which merchants are generally classified as Visa Level 1?

Accepted Answer

Those processing over 6 million Visa transactions annually

Answer

Visa Level 1 merchants process more than 6 million Visa transactions per year.

Question 3

Who typically completes a Report on Compliance (ROC)?

Accepted Answer

A QSA or qualified internal assessor (ISA)

Answer

A ROC is completed by a QSA or an ISA, depending on requirements.

Question 4

What distinguishes the customized approach in PCI DSS v4.0?

Accepted Answer

It lets entities meet an objective with alternative controls supported by targeted risk analysis

Answer

The customized approach meets the stated objective with documented, assessor-validated controls.

Question 5

What must a compensating control accomplish?

Accepted Answer

Provide a similar level of defense and go above other requirements

Answer

Compensating controls must meet the intent and rigor of the original requirement and be documented.

PCI - Certified Payment Card Industry Specialist Practice Test