PCI DSS ISA Study Guide with Complete Solutions

PCI DSS ISA Study Guide with Complete SolutionsPCI DSS ISA Study Guide with Complete SolutionsPCI DSS ISA Study Guide with Complete SolutionsPCI DSS ISA Study Guide with Complete SolutionsRequirement 4 - ANSWER-Encrypt transmission of cardholder data across open, public networks Strong cryptography and Security Protocols are to include the following - ANSWER-Only trusted keys and certificates are accepted, protocol in use only supports secure versions or configurations, and encryption strength is appropriate for the encryption methodology in use. Examples of security protocols - ANSWER-TLS, IPSEC, SSH Testing procedures for verifying secure transmission of sensitive cardholder data - ANSWER-Observe a sample of inbound and outbound transmissions as they occur, Examine keys and certificates to ensure that only trusted keys and certificates are accepted, Examine system configurations to verify that the protocols in use do not support insecure versions or configurations, and examine system configurations to verify that proper encryption strength is implemented for the encryption methodology in use. What is the testing procedure for TLS implementations? - ANSWER-Examine system configurations to verify that TLS is enabled. Wireless networks transmitting cardholder data or connected to the cardholder data environment must use what? - ANSWER-Industry best practices (IEEE 802.11i) to implement strong encryption for authentication and transmission. Example of weak encryption - ANSWER-WEP, SSL Unprotected PANs can be sent via end-user messaging technologies. - ANSWER-False