PCI Network Security & Architecture 2

Question 1

According to PCI DSS, how often must the configurations of network security controls be reviewed?

Accepted Answer

Every six months

Answer

Monthly

Answer

Quarterly

Answer

Annually

Question 2

What does PCI DSS require for outbound traffic originating from within the cardholder data environment?

Accepted Answer

Outbound traffic must be restricted to only that which is necessary for business operations

Answer

All outbound traffic must be encrypted with a minimum of TLS 1.2

Answer

All outbound sessions require explicit QSA approval before routing

Answer

Outbound traffic controls are optional when inbound controls are sufficiently robust

Question 3

Which of the following remote management protocols is PROHIBITED in a PCI DSS compliant environment?

Accepted Answer

Telnet

Answer

TLS 1.2 HTTPS management interface

Answer

SSH version 2

Answer

SFTP

Question 4

What multi-factor authentication (MFA) requirement applies to remote access into the CDE under PCI DSS?

Accepted Answer

MFA must be used for all non-console remote access into the CDE

Answer

MFA is only required for administrator accounts accessing the CDE remotely

Answer

MFA is required only when connecting from an untrusted public network

Answer

MFA is required for outbound internet access from within the CDE

Question 5

What action must an organization take when a wireless network is detected near the CDE that was not authorized?

Accepted Answer

Treat it as a potential security incident and follow incident response procedures

Answer

Immediately decommission all wireless access points in the building

Answer

Report the finding to the PCI SSC within 24 hours

Answer

Document the network and notify management within 30 days

Question 6

Under PCI DSS, what must be installed and active on mobile or employee-owned devices that are permitted to connect to the CDE or store cardholder data?

Accepted Answer

Personal firewalls must be installed and actively running on all such devices

Answer

Personal firewalls are optional if the device uses a VPN connection

Answer

Personal firewalls are only required when connecting via public Wi-Fi

Answer

Mobile devices are completely prohibited from accessing the CDE under PCI DSS

Question 7

How frequently does PCI DSS require organizations to test for unauthorized (rogue) wireless access points?

Accepted Answer

At least quarterly

Answer

Monthly

Answer

Annually

Answer

Only when new wireless infrastructure is deployed