PCI-DSS ISA Exam Questions And Answers (Verified And Updated)

PCI-DSS ISA Exam Questions And Answers (Verified And Updated) Perimeter firewalls installed ______________________________. - answerbetween all wireless networks and the CHD environment. Where should firewalls be installed? - answerAt each Internet connection and between any DMZ and the internal network. Review of firewall and router rule sets at least every __________________. - answer6 months If disk encryption is used - answerlogical access must be managed separately and independently of native operating system authentication and access control mechanisms Manual clear-text key-management procedures specify processes for the use of the following: - answerSplit knowledge AND Dual control of keys What is considered "Sensitive Authentication Data"? - answerCard verification value When a PAN is displayed to an employee who does NOT need to see the full PAN, the minimum digits to be masked are: All digits between the ___________ and the __________. - answerfirst 6; last 4 Regarding protection of PAN... - answerPAN must be rendered unreadable during the transmission over public and wireless networks. Under requirement 3.4, what method must be used to render the PAN unreadable? - answerHashing the entire PAN using strong cryptography Weak security controls that should NOT be used - answerWEP, SSL, and TLS 1.0 or earlier Per requirement 5, anti-virus technology must be deployed_________________ - answeron all system components commonly affected by malicious software. Key functions for anti-vius program per Requirement 5: - answer1) Detect 2) Remove 3) Protect Anti-virus solutions may be temporarily disabled only if - answerthere is legitimate technical need, as authorized by management on a case-by-case basis