PCIP Network Security 3

Question 1

Which encryption protocol is mandated for protecting cardholder data transmitted over open, public networks under PCI DSS?

Accepted Answer

TLS 1.2 or higher

Answer

PCI DSS Requirement 4 requires strong cryptography (TLS 1.2 or higher) for protecting cardholder data over open, public networks; SSL and early TLS are prohibited.

Question 2

What is a 'rogue wireless access point' in the context of PCI DSS network security?

Accepted Answer

An unauthorized wireless device connected to the network without approval

Answer

A rogue access point is an unauthorized wireless device that may allow attackers to bypass network security controls and access the CDE.

Question 3

Under PCI DSS, how frequently must network security control rule sets (e.g., firewall rules) be reviewed?

Accepted Answer

Every six months

Answer

PCI DSS Requirement 1 requires that firewall and router rule sets be reviewed at least every six months to ensure they remain current and necessary.

Question 4

Which concept describes ensuring that data packets entering a network claim to originate from an IP address that is plausibly routable?

Accepted Answer

Ingress filtering

Answer

Ingress filtering checks that inbound traffic sources have legitimate, routable IP addresses, helping prevent IP spoofing attacks at the network perimeter.

Question 5

What is 'network address translation' (NAT) and how does it benefit PCI DSS environments?

Accepted Answer

NAT hides internal IP addresses from external networks, reducing exposure

Answer

NAT translates private internal IP addresses to a public address, masking the internal network topology from external attackers.

(PCIP) Payment Card Industry Professional Practice Test

(PCIP) Payment Card Industry Professional Practice Test

PCIP Network Security 3