PCI PCI DSS Requirements & Implementation

Question 1

How many core requirements does PCI DSS contain?

Accepted Answer

12 requirements organized into 6 goals

Answer

6 requirements

Answer

24 requirements

Answer

3 requirements

Question 2

What is the purpose of network segmentation in PCI compliance?

Accepted Answer

To isolate the cardholder data environment from the rest of the network, reducing the scope of PCI assessment

Answer

To increase internet speed for the organization

Answer

To create separate networks for each employee

Answer

Network segmentation is prohibited under PCI DSS

Question 3

What is a Self-Assessment Questionnaire (SAQ) in PCI compliance?

Accepted Answer

A validation tool for merchants and service providers to self-evaluate their compliance with PCI DSS

Answer

A customer satisfaction survey about payment experiences

Answer

An employee knowledge assessment about company policies

Answer

A vendor evaluation questionnaire for procurement

Question 4

What data elements must be protected under PCI DSS?

Accepted Answer

Primary Account Number (PAN), cardholder name, expiration date, and service code

Answer

Only the cardholder's name and address

Answer

Only the card number, nothing else

Answer

Social Security numbers and birth dates only

Question 5

What encryption standards does PCI DSS require for transmitting cardholder data?

Accepted Answer

Strong cryptography protocols like TLS 1.2+ for data in transit over public networks

Answer

No encryption is required for card data transmission

Answer

Only email encryption is required

Answer

Encryption is only needed for storage, not transmission

Question 6

What are the consequences of PCI DSS non-compliance?

Accepted Answer

Fines from card brands, increased transaction fees, liability for breach costs, and potential loss of card processing privileges

Answer

No consequences exist for non-compliance

Answer

Only a warning letter from the card brands

Answer

A one-time small administrative fee