QIR Exam Questions with all Correct & 100%
Verified Answers |Latest Version |Already Graded
A+ (Just Released)
PCI Stands for? ✔Correct Answer-Payment Card Industry
CDE stands for... ✔Correct Answer-Cardholder Data Environment
PCI-SSC stands for? ✔Correct Answer-Payment Card Industry-Security Standards Council
DSS Stands for? ✔Correct Answer-Data Security Standard
PCI DSS covers... ✔Correct Answer-12 points that Merchants and Service Providers must comply
with the be PCI Certified.
PA-DSS stands for? ✔Correct Answer-Payment Application-Data Security Standard
PA-DSS certification denotes that... ✔Correct Answer-the payment application can be configured to
meet PCI DSS requirements.
PA-DSS covers... ✔Correct Answer-Secure payment applications to support PCI DSS compliance.
Payment application receives account data from PIN-entry devices (PEDs) or other devices and
begins payment transaction
PA-DSS applies to application that perform ____________________ and/or ___________________.
✔Correct Answer-authorization
settlement
PA-DSS has ___________ requirements ✔Correct Answer-14
PCI-DSS has ______________ requirements and ____________ goals ✔Correct Answer-12
6
True or False - PA-DSS supports PCI-DSS ✔Correct Answer-True
in many requirements but not all apply
True or False - PCI-DSS does not require all transmission of cardholder data be encrypted over open,
public networks. ✔Correct Answer-False
It is encryption IS required over public networks according to PCI-DSS requirement 4.
True or False - Default passwords are sometimes allowed under certain circumstances with proper
documentation. ✔Correct Answer-False
Default passwords are NEVER allowed in a Qualified Implementation
Video logs must be kept ___________ days. ✔Correct Answer-90
True or False - Media does not mean paper ✔Correct Answer-False
, Media can mean paper or electronic media
Audit logs must be kept for ____________ ✔Correct Answer-1 year
True or False - QIRs are also required to provide troubleshooting for the Payment application
✔Correct Answer-False
QIRs may perform troubleshooting and remote support after the installation but it is not required.
The LEAD QIR is responsible for these 4 things... ✔Correct Answer-(1) Document all tasks that both
the customer and QIR perform
(2) Confirm the responsibilities of the QIR during and after the Implementation
(3) Accept accountability for all tasks
(4) Sign the Implementation Statement
True or False - "Acceptable only for pre-existing Deployments" status for a Payment Application
means a Qualified Implementation cannot be performed. ✔Correct Answer-True
Only "Acceptable for New Deployments" status are eligible
In preparation for a Qualified Installation, you should provide a customer with what 3 pieces of
information? ✔Correct Answer-(1) Name of Lead QIR
(2) Estimate of the work to be performed (cost, duration, downtime)
(3) a link to the QIR feedback form
The PA-DSS Implementation Guide is provided by _____________ ✔Correct Answer-The Payment
Application Vendor
The QIR Implementation Statement is provided by ____________ ✔Correct Answer-the PCI
Council
True or False - Questions about the PA-DSS Implementation Guide must go to the PCI Council.
✔Correct Answer-False
Questions on the PA-DSS Implementation Guide go to the application vendor
Name the 3 sections of the Implementation Statement. ✔Correct Answer-(1) Summary
(2) Details
(3) QIR additional Observations
True or False - The Lead QIR must review the results with the Customer. ✔Correct Answer-True
How long must the QIR keep all paperwork of a Qualified Installation? ✔Correct Answer-3 Years
How long does the QIR have to deliver the Implementation Statement to the Customer following a
Qualified Installation? ✔Correct Answer-10 business days
True or False - It is the responsibility of the QIR to collect training materials on the Payment
Application to be installed. ✔Correct Answer-True
True or False - A Merchant may hire a QSA to perform a Qualified Installation. ✔Correct Answer-
False
Only a QIR can perform a Qualified Installation
Verified Answers |Latest Version |Already Graded
A+ (Just Released)
PCI Stands for? ✔Correct Answer-Payment Card Industry
CDE stands for... ✔Correct Answer-Cardholder Data Environment
PCI-SSC stands for? ✔Correct Answer-Payment Card Industry-Security Standards Council
DSS Stands for? ✔Correct Answer-Data Security Standard
PCI DSS covers... ✔Correct Answer-12 points that Merchants and Service Providers must comply
with the be PCI Certified.
PA-DSS stands for? ✔Correct Answer-Payment Application-Data Security Standard
PA-DSS certification denotes that... ✔Correct Answer-the payment application can be configured to
meet PCI DSS requirements.
PA-DSS covers... ✔Correct Answer-Secure payment applications to support PCI DSS compliance.
Payment application receives account data from PIN-entry devices (PEDs) or other devices and
begins payment transaction
PA-DSS applies to application that perform ____________________ and/or ___________________.
✔Correct Answer-authorization
settlement
PA-DSS has ___________ requirements ✔Correct Answer-14
PCI-DSS has ______________ requirements and ____________ goals ✔Correct Answer-12
6
True or False - PA-DSS supports PCI-DSS ✔Correct Answer-True
in many requirements but not all apply
True or False - PCI-DSS does not require all transmission of cardholder data be encrypted over open,
public networks. ✔Correct Answer-False
It is encryption IS required over public networks according to PCI-DSS requirement 4.
True or False - Default passwords are sometimes allowed under certain circumstances with proper
documentation. ✔Correct Answer-False
Default passwords are NEVER allowed in a Qualified Implementation
Video logs must be kept ___________ days. ✔Correct Answer-90
True or False - Media does not mean paper ✔Correct Answer-False
, Media can mean paper or electronic media
Audit logs must be kept for ____________ ✔Correct Answer-1 year
True or False - QIRs are also required to provide troubleshooting for the Payment application
✔Correct Answer-False
QIRs may perform troubleshooting and remote support after the installation but it is not required.
The LEAD QIR is responsible for these 4 things... ✔Correct Answer-(1) Document all tasks that both
the customer and QIR perform
(2) Confirm the responsibilities of the QIR during and after the Implementation
(3) Accept accountability for all tasks
(4) Sign the Implementation Statement
True or False - "Acceptable only for pre-existing Deployments" status for a Payment Application
means a Qualified Implementation cannot be performed. ✔Correct Answer-True
Only "Acceptable for New Deployments" status are eligible
In preparation for a Qualified Installation, you should provide a customer with what 3 pieces of
information? ✔Correct Answer-(1) Name of Lead QIR
(2) Estimate of the work to be performed (cost, duration, downtime)
(3) a link to the QIR feedback form
The PA-DSS Implementation Guide is provided by _____________ ✔Correct Answer-The Payment
Application Vendor
The QIR Implementation Statement is provided by ____________ ✔Correct Answer-the PCI
Council
True or False - Questions about the PA-DSS Implementation Guide must go to the PCI Council.
✔Correct Answer-False
Questions on the PA-DSS Implementation Guide go to the application vendor
Name the 3 sections of the Implementation Statement. ✔Correct Answer-(1) Summary
(2) Details
(3) QIR additional Observations
True or False - The Lead QIR must review the results with the Customer. ✔Correct Answer-True
How long must the QIR keep all paperwork of a Qualified Installation? ✔Correct Answer-3 Years
How long does the QIR have to deliver the Implementation Statement to the Customer following a
Qualified Installation? ✔Correct Answer-10 business days
True or False - It is the responsibility of the QIR to collect training materials on the Payment
Application to be installed. ✔Correct Answer-True
True or False - A Merchant may hire a QSA to perform a Qualified Installation. ✔Correct Answer-
False
Only a QIR can perform a Qualified Installation
