PCI PCI DSS Requirements & Implementation

Question 1

How many core requirements does PCI DSS contain?

Accepted Answer

12 requirements organized into 6 goals

Answer

PCI DSS contains 12 core requirements organized under 6 goals: build/maintain secure network, protect cardholder data, maintain vulnerability management, implement access controls, monitor/test networks, and maintain security policies.

Question 2

What is the purpose of network segmentation in PCI compliance?

Accepted Answer

To isolate the cardholder data environment from the rest of the network, reducing the scope of PCI assessment

Answer

Network segmentation isolates systems that process cardholder data, reducing the number of systems subject to PCI requirements and the attack surface available to threat actors.

Question 3

What is a Self-Assessment Questionnaire (SAQ) in PCI compliance?

Accepted Answer

A validation tool for merchants and service providers to self-evaluate their compliance with PCI DSS

Answer

SAQs allow smaller merchants to self-assess their PCI compliance status based on their specific payment processing methods, with different SAQ types for different processing environments.

Question 4

What data elements must be protected under PCI DSS?

Accepted Answer

Primary Account Number (PAN), cardholder name, expiration date, and service code

Answer

PCI DSS requires protection of the PAN (which must be rendered unreadable when stored), cardholder name, expiration date, and service code, with sensitive authentication data never stored after authorization.

Question 5

What encryption standards does PCI DSS require for transmitting cardholder data?

Accepted Answer

Strong cryptography protocols like TLS 1.2+ for data in transit over public networks

Answer

PCI DSS requires strong cryptographic protocols (TLS 1.2 or higher) when transmitting cardholder data across open, public networks to prevent interception by unauthorized parties.

PCI - Certified Payment Card Industry Specialist Practice Test

PCI - Certified Payment Card Industry Specialist Practice Test

PCI PCI DSS Requirements & Implementation