PCI ISA Flashcards 3.2.1 Exam
Questions With 100% Verified Answers
Non-console administrator access to any web-based management
interfaces must be encrypted with technology such as......... -
correct answer ✅HTTPS
Requirements 2.2.2 and 2.2.3 cover the use of secure services,
protocols and daemons. Which of the following is considered to be
secure? -
correct answer ✅SSH
Which of the following is considered "Sensitive Authentication
Data"? -
correct answer ✅Card Verification Value (CAV2/CVC2/CVV2/CID),
Full Track Data, PIN/PIN Block
True or False: It is acceptable for merchants to store Sensitive
Authentication after authorization as long as it is strongly
encrypted? -
correct answer ✅False
When a PAN is displayed to an employee who does NOT need to
see the full PAN, the minimum digits to be masked are: -
correct answer ✅All digits between the first six and last four
,PCI ISA Flashcards 3.2.1 Exam
Questions With 100% Verified Answers
Which of the following is true regarding protection of PAN? -
correct answer ✅PAN must be rendered unreadable during
transmission over public, wireless networks
Which of the following may be used to render PAN unreadable in
order to meet requirement 3.4? -
correct answer ✅Hashing the entire PAN using strong
cryptography
True or False Where keys are stored on production systems, split
knowledge and dual control is required? -
correct answer ✅True
When assessing requirement 6.5, testing to verify secure coding
techniques are in place to address common coding vulnerabilities
includes: -
correct answer ✅Reviewing software development policies and
procedures
One of the principles to be used when granting user access to
systems in CDE is: -
correct answer ✅Least privilege
, PCI ISA Flashcards 3.2.1 Exam
Questions With 100% Verified Answers
An example of a "one-way" cryptographic function used to render
data unreadable is: -
correct answer ✅SHA-2
A set of cryptographic hash functions designed by the National
Security Agency (NS). -
correct answer ✅SHA-2 (Secure Hash Algorithm
True or False: Procedures must be developed to easily distinguish
the difference between onsite personnel and visitors. -
correct answer ✅True
When should access be revoked of recently terminated employees?
-
correct answer ✅immediately
True or False: A visitor with a badge may enter sensitive area
unescorted. -
correct answer ✅False, visitors must be escorted at all times.
Protection of keys used for encryption of cardholder data against
disclosure must include at least: (4 items) -
Questions With 100% Verified Answers
Non-console administrator access to any web-based management
interfaces must be encrypted with technology such as......... -
correct answer ✅HTTPS
Requirements 2.2.2 and 2.2.3 cover the use of secure services,
protocols and daemons. Which of the following is considered to be
secure? -
correct answer ✅SSH
Which of the following is considered "Sensitive Authentication
Data"? -
correct answer ✅Card Verification Value (CAV2/CVC2/CVV2/CID),
Full Track Data, PIN/PIN Block
True or False: It is acceptable for merchants to store Sensitive
Authentication after authorization as long as it is strongly
encrypted? -
correct answer ✅False
When a PAN is displayed to an employee who does NOT need to
see the full PAN, the minimum digits to be masked are: -
correct answer ✅All digits between the first six and last four
,PCI ISA Flashcards 3.2.1 Exam
Questions With 100% Verified Answers
Which of the following is true regarding protection of PAN? -
correct answer ✅PAN must be rendered unreadable during
transmission over public, wireless networks
Which of the following may be used to render PAN unreadable in
order to meet requirement 3.4? -
correct answer ✅Hashing the entire PAN using strong
cryptography
True or False Where keys are stored on production systems, split
knowledge and dual control is required? -
correct answer ✅True
When assessing requirement 6.5, testing to verify secure coding
techniques are in place to address common coding vulnerabilities
includes: -
correct answer ✅Reviewing software development policies and
procedures
One of the principles to be used when granting user access to
systems in CDE is: -
correct answer ✅Least privilege
, PCI ISA Flashcards 3.2.1 Exam
Questions With 100% Verified Answers
An example of a "one-way" cryptographic function used to render
data unreadable is: -
correct answer ✅SHA-2
A set of cryptographic hash functions designed by the National
Security Agency (NS). -
correct answer ✅SHA-2 (Secure Hash Algorithm
True or False: Procedures must be developed to easily distinguish
the difference between onsite personnel and visitors. -
correct answer ✅True
When should access be revoked of recently terminated employees?
-
correct answer ✅immediately
True or False: A visitor with a badge may enter sensitive area
unescorted. -
correct answer ✅False, visitors must be escorted at all times.
Protection of keys used for encryption of cardholder data against
disclosure must include at least: (4 items) -
