PCIP Study questions from PCI Training
manual
Why are QIRs so important to Data Security? - Correct Answer ✔
✔ 1. QIRs have an important role to play in securing account data.
2. Software vendors are responsible for developing applications
3. Applications usually have configuration or installation options
which could impact security.
How does a Qualified Installation impact the PCI DSS assessment ? -
Correct Answer ✔ ✔ Documentation from a Qualified Installation
provides useful information about how the application was
installed/configured
,Application configuration may have changed since the installation
Assess the current implementation
The assessor's role is not to challenge the Qualified Installation
What is PCI DSS requirement 1? - Correct Answer ✔ ✔ Install and
maintain a firewall configuration to protect cardholder data.
What is PCI DSS requirement 2? - Correct Answer ✔ ✔ Do not
user vendor-supplied defaults for system passwords and other
security parameters.
What is PCI DSS requirement 3? - Correct Answer ✔ ✔ Protect
stored cardholder data.
What is PCI DSS requirement 4? - Correct Answer ✔ ✔ Encrypt
transmission of cardholder data across open, public networks.
, What is PCI DSS requirement 5? - Correct Answer ✔ ✔ Protect all
systems against malware and regularly update anti-virus software or
programs.
What is PCI DSS requirement 6? - Correct Answer ✔ ✔ Develop
and maintain secure systems and applications.
What is PCI DSS requirement 7? - Correct Answer ✔ ✔ Restrict
access to cardholder data by business need to know.
What is PCI DSS requirement 8? - Correct Answer ✔ ✔ Identify
and authenticate access to system components.
What is PCI DSS requirement 9? - Correct Answer ✔ ✔ Restrict
physical access to cardholder data.
What is PCI DSS requirement 10? - Correct Answer ✔ ✔ Track
and monitor all access to network resources and cardholder data.
What is PCI DSS requirement 11? - Correct Answer ✔ ✔ Regularly
test security systems and processes.
manual
Why are QIRs so important to Data Security? - Correct Answer ✔
✔ 1. QIRs have an important role to play in securing account data.
2. Software vendors are responsible for developing applications
3. Applications usually have configuration or installation options
which could impact security.
How does a Qualified Installation impact the PCI DSS assessment ? -
Correct Answer ✔ ✔ Documentation from a Qualified Installation
provides useful information about how the application was
installed/configured
,Application configuration may have changed since the installation
Assess the current implementation
The assessor's role is not to challenge the Qualified Installation
What is PCI DSS requirement 1? - Correct Answer ✔ ✔ Install and
maintain a firewall configuration to protect cardholder data.
What is PCI DSS requirement 2? - Correct Answer ✔ ✔ Do not
user vendor-supplied defaults for system passwords and other
security parameters.
What is PCI DSS requirement 3? - Correct Answer ✔ ✔ Protect
stored cardholder data.
What is PCI DSS requirement 4? - Correct Answer ✔ ✔ Encrypt
transmission of cardholder data across open, public networks.
, What is PCI DSS requirement 5? - Correct Answer ✔ ✔ Protect all
systems against malware and regularly update anti-virus software or
programs.
What is PCI DSS requirement 6? - Correct Answer ✔ ✔ Develop
and maintain secure systems and applications.
What is PCI DSS requirement 7? - Correct Answer ✔ ✔ Restrict
access to cardholder data by business need to know.
What is PCI DSS requirement 8? - Correct Answer ✔ ✔ Identify
and authenticate access to system components.
What is PCI DSS requirement 9? - Correct Answer ✔ ✔ Restrict
physical access to cardholder data.
What is PCI DSS requirement 10? - Correct Answer ✔ ✔ Track
and monitor all access to network resources and cardholder data.
What is PCI DSS requirement 11? - Correct Answer ✔ ✔ Regularly
test security systems and processes.
