QIR Practice Exam Questions with
verified answers
PCI Stands for? - correct answer ✔✔ Payment Card Industry
CDE stands for... - correct answer ✔✔ Cardholder Data Environment
PCI-SSC stands for? - correct answer ✔✔ Payment Card Industry-Security Standards Council
DSS Stands for? - correct answer ✔✔ Data Security Standard
PCI DSS covers... - correct answer ✔✔ 12 points that Merchants and Service Providers must
comply with the be PCI Certified.
PA-DSS stands for? - correct answer ✔✔ Payment Application-Data Security Standard
PA-DSS certification denotes that... - correct answer ✔✔ the payment application can be
configured to meet PCI DSS requirements.
PA-DSS covers... - correct answer ✔✔ Secure payment applications to support PCI DSS
compliance. Payment application receives account data from PIN-entry devices (PEDs) or other
devices and begins payment transaction
PA-DSS applies to application that perform ____________________ and/or
___________________. - correct answer ✔✔ authorization
settlement
, PA-DSS has ___________ requirements - correct answer ✔✔ 14
PCI-DSS has ______________ requirements and ____________ goals - correct answer ✔✔ 12
6
True or False - PA-DSS supports PCI-DSS - correct answer ✔✔ True
in many requirements but not all apply
True or False - PCI-DSS does not require all transmission of cardholder data be encrypted over
open, public networks. - correct answer ✔✔ False
It is encryption IS required over public networks according to PCI-DSS requirement 4.
True or False - Default passwords are sometimes allowed under certain circumstances with
proper documentation. - correct answer ✔✔ False
Default passwords are NEVER allowed in a Qualified Implementation
Video logs must be kept ___________ days. - correct answer ✔✔ 90
True or False - Media does not mean paper - correct answer ✔✔ False
Media can mean paper or electronic media
Audit logs must be kept for ____________ - correct answer ✔✔ 1 year
True or False - QIRs are also required to provide troubleshooting for the Payment application -
correct answer ✔✔ False
verified answers
PCI Stands for? - correct answer ✔✔ Payment Card Industry
CDE stands for... - correct answer ✔✔ Cardholder Data Environment
PCI-SSC stands for? - correct answer ✔✔ Payment Card Industry-Security Standards Council
DSS Stands for? - correct answer ✔✔ Data Security Standard
PCI DSS covers... - correct answer ✔✔ 12 points that Merchants and Service Providers must
comply with the be PCI Certified.
PA-DSS stands for? - correct answer ✔✔ Payment Application-Data Security Standard
PA-DSS certification denotes that... - correct answer ✔✔ the payment application can be
configured to meet PCI DSS requirements.
PA-DSS covers... - correct answer ✔✔ Secure payment applications to support PCI DSS
compliance. Payment application receives account data from PIN-entry devices (PEDs) or other
devices and begins payment transaction
PA-DSS applies to application that perform ____________________ and/or
___________________. - correct answer ✔✔ authorization
settlement
, PA-DSS has ___________ requirements - correct answer ✔✔ 14
PCI-DSS has ______________ requirements and ____________ goals - correct answer ✔✔ 12
6
True or False - PA-DSS supports PCI-DSS - correct answer ✔✔ True
in many requirements but not all apply
True or False - PCI-DSS does not require all transmission of cardholder data be encrypted over
open, public networks. - correct answer ✔✔ False
It is encryption IS required over public networks according to PCI-DSS requirement 4.
True or False - Default passwords are sometimes allowed under certain circumstances with
proper documentation. - correct answer ✔✔ False
Default passwords are NEVER allowed in a Qualified Implementation
Video logs must be kept ___________ days. - correct answer ✔✔ 90
True or False - Media does not mean paper - correct answer ✔✔ False
Media can mean paper or electronic media
Audit logs must be kept for ____________ - correct answer ✔✔ 1 year
True or False - QIRs are also required to provide troubleshooting for the Payment application -
correct answer ✔✔ False
