PCIP Incident Response 5

Question 1

A service provider that stores cardholder data on behalf of 50 merchants suffers a breach. Which entities are primarily responsible for notifying affected card brands?

Accepted Answer

The breached service provider and each merchant's acquirer

Answer

Both the breached service provider and the acquirers of affected merchants share notification obligations to the card brands under PCI DSS breach response requirements.

Question 2

Which of the following actions is considered a violation of proper incident response evidence handling procedures?

Accepted Answer

Running antivirus scans directly on the original compromised drive

Answer

Running antivirus or any tool directly on the original compromised drive can alter or destroy evidence; always work from a forensic copy.

Question 3

What type of attack involves an adversary intercepting communications between a cardholder's browser and a payment website to steal card data?

Accepted Answer

Man-in-the-middle (MitM) attack

Answer

A man-in-the-middle attack intercepts the communication channel between the cardholder and the payment site, allowing the attacker to capture transmitted data.

Question 4

Under PCI DSS incident response requirements, which personnel role is responsible for approving and activating the incident response plan?

Accepted Answer

The designated Incident Response Team lead or CISO

Answer

The Incident Response Team lead or CISO typically holds authority to declare an incident and formally activate the incident response plan.

Question 5

Which of the following describes a 'false negative' in the context of PCI DSS security monitoring?

Accepted Answer

A real attack that occurred but was not detected or alerted on

Answer

A false negative occurs when a genuine threat or attack goes undetected, meaning monitoring systems failed to generate an alert for a real incident.

(PCIP) Payment Card Industry Professional Practice Test

(PCIP) Payment Card Industry Professional Practice Test

PCIP Incident Response 5