PCI-DSS ISA Exam Latest Version 2024

A retail location that does not use wireless devices in store must test for the presence of unauthorized wireless devices every ________________. - ANSWER-quarter Acquirer - ANSWER-Bank or entity the merchant uses to process their payment card transactions Acquirer is also called: Merchant Bank ISO (sometimes) Payment Brand - Amex, Discover, JCB Never Visa or MasterCard All security events and logs of (a) all system components that store, process, or transmit CHD; (b) critical system components; (c) components that perform security functions (for example, firewalls, intrusion-detection systems/intrusion-prevention systems (IDS/IPS), authentication servers, ecommerce redirection servers, etc.) to be reviewed at least ______________. - ANSWER-daily An example of a "one-way" cryptographic function used to render data unreadable is: - ANSWERSHA-2 Anti-virus solutions may be temporarily disabled only if - ANSWER-there is legitimate technical need, as authorized by management on a case-by-case basis Appendix A1 applies to - ANSWER-hosting providers Appendix A2 applies to - ANSWER-entities using SSL/Early TLS Appendix A3 applies to - ANSWER-Designated Entities Supplemental Validation (DESV) An entity is required to undergo an assessment according to this Appendix ONLY if instructed to do so by an acquirer or a payment brand.