PCIP PCI DSS Requirements & Compliance Framework 2

Question 1

Under PCI DSS v4.0, which requirement mandates that organizations perform a targeted risk analysis to determine how frequently certain activities must be performed?

Accepted Answer

Requirement 12

Answer

PCI DSS v4.0 Requirement 12 introduces targeted risk analysis, allowing organizations to define the frequency of certain activities based on their specific risk environment.

Question 2

A merchant's cardholder data environment (CDE) uses a flat network where all systems can communicate with each other. Which PCI DSS requirement is most directly violated?

Accepted Answer

Requirement 1 – Install and maintain network security controls

Answer

Requirement 1 mandates network segmentation controls (firewalls/routers) to restrict traffic and isolate the CDE from untrusted networks.

Question 3

Which PCI DSS scoping concept refers to systems that are NOT in the CDE but could impact its security?

Accepted Answer

Connected-to systems

Answer

Connected-to systems are outside the CDE but have connectivity to it and must still be assessed for their potential impact on CDE security.

Question 4

An organization wants to use a customized approach for a PCI DSS v4.0 control. What is required before doing so?

Accepted Answer

A documented targeted risk analysis and controls testing methodology

Answer

The customized approach in PCI DSS v4.0 requires organizations to document their targeted risk analysis and describe how the customized control meets the stated objective.

Question 5

Which PCI DSS requirement covers the protection of stored account data, including the use of strong cryptography?

Accepted Answer

Requirement 3

Answer

Requirement 3 addresses protection of stored account data, mandating that sensitive authentication data not be retained and that stored PANs be protected with strong cryptography.

(PCIP) Payment Card Industry Professional Practice Test

(PCIP) Payment Card Industry Professional Practice Test

PCIP PCI DSS Requirements & Compliance Framework 2