PCIP Network Security 4

Question 1

What is the significance of a 'flat network' in PCI DSS assessments?

Accepted Answer

It means there is no segmentation, placing all systems in scope for PCI DSS

Answer

A flat network with no segmentation means every system on the network is technically in scope for PCI DSS, dramatically increasing compliance burden.

Question 2

Which attack involves an adversary positioning themselves between two communicating parties to intercept or modify traffic?

Accepted Answer

Man-in-the-middle (MitM) attack

Answer

A man-in-the-middle attack allows an attacker to intercept, read, or alter communications between two parties without their knowledge.

Question 3

Under PCI DSS, what is required for wireless networks that are connected to the CDE or that transmit cardholder data?

Accepted Answer

WPA2 or WPA3 with AES encryption and changed vendor defaults

Answer

PCI DSS requires strong wireless security (WPA2/WPA3 with AES) and changing all vendor default settings for any wireless network in or connected to the CDE.

Question 4

What is 'port scanning' used for in the context of PCI DSS network security assessments?

Accepted Answer

To identify open ports and services that may represent attack vectors

Answer

Port scanning discovers open TCP/UDP ports and associated services, helping identify unnecessary or unauthorized network entry points that should be closed.

Question 5

Which type of VPN is typically used to provide secure remote access for administrators managing CDE systems?

Accepted Answer

SSL/TLS VPN or IPsec VPN with multi-factor authentication

Answer

Secure remote access to CDE systems requires strong VPN protocols (SSL/TLS or IPsec) combined with MFA to prevent unauthorized access.

(PCIP) Payment Card Industry Professional Practice Test

(PCIP) Payment Card Industry Professional Practice Test

PCIP Network Security 4