PCI Network Security & Architecture 2

Question 1

According to PCI DSS, how often must the configurations of network security controls be reviewed?

Accepted Answer

Every six months

Answer

PCI DSS requires that network security control configurations, including firewall and router rule sets, be reviewed at least every six months to ensure they remain appropriate.

Question 2

What does PCI DSS require for outbound traffic originating from within the cardholder data environment?

Accepted Answer

Outbound traffic must be restricted to only that which is necessary for business operations

Answer

PCI DSS requires that outbound traffic from the CDE be restricted to only those communications necessary for the cardholder data environment to function, preventing unauthorized data exfiltration.

Question 3

Which of the following remote management protocols is PROHIBITED in a PCI DSS compliant environment?

Accepted Answer

Telnet

Answer

Telnet transmits credentials and data in clear text, making it insecure and prohibited by PCI DSS; secure alternatives such as SSH must be used instead.

Question 4

What multi-factor authentication (MFA) requirement applies to remote access into the CDE under PCI DSS?

Accepted Answer

MFA must be used for all non-console remote access into the CDE

Answer

PCI DSS Requirement 8 mandates MFA for all non-console administrative access and all remote access to the CDE, regardless of user role.

Question 5

What action must an organization take when a wireless network is detected near the CDE that was not authorized?

Accepted Answer

Treat it as a potential security incident and follow incident response procedures

Answer

An unauthorized wireless network near the CDE is a potential intrusion or reconnaissance threat and must be handled under the organization's incident response plan.

PCI - Certified Payment Card Industry Specialist Practice Test

PCI - Certified Payment Card Industry Specialist Practice Test

PCI Network Security & Architecture 2