PCI-DSS ISA Examination The Complete Exam Guide – Questions & Model Answers

PCI-DSS ISA Examination

Review media inventory logs to verify that logs are maintained and

media inventories are performed at least______________. - ✔️✔

Correct Answer annually


Using time-synchronization technology, synchronize all critical system

clocks and times and ensure that the following is implemented for: -

✔️✔ Correct Answer acquiring, distributing, and storing time


All security events and logs of (a) all system components that store,

process, or transmit CHD; (b) critical system components; (c)

components that perform security functions (for example, firewalls,

intrusion-detection systems/intrusion-prevention systems (IDS/IPS),

authentication servers, e-commerce redirection servers, etc.) to be

reviewed at least ______________. - ✔️✔ Correct Answer daily

, Audit logs must be immediately available for analysis for a period of

________ and must be retained for a period of _________. - ✔️✔

Correct Answer 3 months; 1 year


Detection and identification of authorized and unauthorized wireless

access points must occur _________________. - ✔️✔ Correct

Answer quarterly


Run internal and external network vulnerability scans at least

____________________ and after any significant change in the

network - ✔️✔ Correct Answer quarterly


Perimeter firewalls installed ______________________________. - ✔

️✔ Correct Answer between all wireless networks and the CHD

environment.


External vulnerability scans must be run by ____________ and

perform ________________. - ✔️✔ Correct Answer an ASV;

quarterly