PCIP PCI DSS Requirements & Compliance Framework 5

Question 1

An organization is preparing its Attestation of Compliance (AOC). Who is authorized to sign the merchant section of the AOC?

Accepted Answer

An officer of the merchant organization

Answer

The merchant section of the AOC must be signed by an executive officer of the merchant organization, attesting to the accuracy of the compliance information provided.

Question 2

Under PCI DSS, what is the requirement for displaying the full 16-digit PAN on receipts or reports?

Accepted Answer

Only the last four digits or first six digits may be displayed; full PAN must be masked

Answer

PCI DSS Requirement 3 mandates that PANs be masked when displayed, showing no more than the first six and last four digits, unless there is a defined business need for more.

Question 3

Which PCI DSS requirement addresses the formal management of security policies and the assignment of security responsibilities?

Accepted Answer

Requirement 12

Answer

Requirement 12 covers the organization's information security policy, including assigning responsibility for cardholder data protection and managing personnel awareness and incident response.

Question 4

A company uses point-to-point encryption (P2PE) with a PCI-validated P2PE solution. What is the primary scoping benefit?

Accepted Answer

Significantly reduces the merchant's CDE scope because cardholder data is encrypted immediately at the point of interaction

Answer

A validated P2PE solution encrypts cardholder data at the point of swipe/dip/tap, so the merchant's systems never receive cleartext card data, dramatically reducing PCI DSS scope.

Question 5

Under PCI DSS Requirement 8, what is the minimum idle session timeout that must be applied to user sessions accessing the CDE?

Accepted Answer

15 minutes

Answer

PCI DSS Requirement 8 mandates that sessions accessing the CDE be re-authenticated after no more than 15 minutes of inactivity.

(PCIP) Payment Card Industry Professional Practice Test

(PCIP) Payment Card Industry Professional Practice Test

PCIP PCI DSS Requirements & Compliance Framework 5