Beststudymaterials

Perimeter firewalls installed ______________________________. - between all wireless networks and the CHD environment. Where should firewalls be installed? - At each Internet connection and between any DMZ and the internal network. Review of firewall and router rule sets at least every __________________. - 6 months If disk encryption is used - logical access must be managed separately and independently of native operating system authentication and access control mechanisms Manual clear-t...

How is skimming used to target PCI data? - Copying payment card numbers by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? - By doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Monetized? - By skimming the card to get the full track of data, and then making another like card. Using the card information in a "Card...

Which of the below functions is associated with Acquirers? A. Provide settlement services to a merchant B. Provide authorization services to a merchant C. Provide clearing services to a merchant D. All of the options - Correct Answer: D Which of the following entities will actually approve a purchase? A. Non-Issuing Merchant Bank B. Issuing Bank C. Payment Transaction Gateway D. Acquiring Bank - Correct Answer: B Which of the following lists the correct "order" for the flow of a paym...

QSAs must retain work papers for a minimum of _______ years. It is a recommendation for ISAs to do the same. - 3 According to PCI DSS requirement 1, Firewall and router rule sets need to be reviewed every _____ months. - 6 At least ______________ and prior to the annual assessment the assessed entity: - Identifies all locations and flows of cardholder data to verify they are included in the CDE - Confirms the accuracy of their PCI DSS scope - Retains their scoping documentation for assess...

For PCI DSS requirement 1, firewall and router rule sets need to be reviewed every _____________ months - 6 months Non-console administrator access to any web-based management interfaces must be encrypted with technology such as......... - HTTPS Requirements 2.2.2 and 2.2.3 cover the use of secure services, protocols and daemons. Which of the following is considered to be secure? - SSH Which of the following is considered "Sensitive Authentication Data"? - Card Verification Value (CAV2/...

Non-console administrator access to any web-based management interfaces must be encrypted with technology such as......... - HTTPS Requirements 2.2.2 and 2.2.3 cover the use of secure services, protocols and daemons. Which of the following is considered to be secure? - SSH Which of the following is considered "Sensitive Authentication Data"? - Card Verification Value (CAV2/CVC2/CVV2/CID), Full Track Data, PIN/PIN Block True or False: It is acceptable for merchants to store Sensitive Auth...

The payment card brands are responsible for: - penalty or fee assignment for non-compliance Authorization of a transaction usually takes place: - within one day If a suspected card account number passes the Mod 10 test it means: - it is definitely a valid PAN Which of the following is true regarding network segmentation? - Network segmentation is not a PCI DSS requirement Which of the following is true related to the tracks of data on the magnetic stripe of a payment card? - Track 1 contai...

Which of the following does not belong? The following events should be included in automated audit trails for all system component: -Individual access to cardholder data -Creation and deletion of system-level objects -Invalid logical access attempts -Actions taken by user with root or administrative privileges -Changes, additions, or deletions to any account with root or administrative privileges -Audit trail access -Use of identification and authentication mechanisms -Elevation of priv...

A patient tells the nurse that he is very nervous, nauseated and that he "feels hot". This type of data would be considered: - subjective Because the physical environment in which an interview takes place is an important consideration for the success of an interview, the interviewer should: - reduce noise by turning off televisions and cell phones A nurse is taking complete health histories on all the patients attending a wellness workshop. While conducting an interview with a patient, t...

A Zero Trust network security model is based on which security principle? - Least privilege Which capability of a Zero-Trust segmentation platform uses a combination of anti-malware, intrusion prevention, and cyberthreat prevention technologies to provide comprehensive protection against both known and unknown threats, including threats on mobile devices? - Cyberthreat protection True or False: The primary issue with a perimeter-based network security strategy in which countermeasures are d...

Intra-VM traffic is also known as which type of traffic? - east-west A network filter that allows administrators to restrict access to external content from within a network is known as which of the following? - Content Which option describes the strength of Palo Alto Networks Traps operation? - Blocks core exploit and malware techniques Which technique is NOT used to break the command-and-control (C&C) phase of the Cyber-Attack Lifecycle? - Vulnerability and patch management True or Fals...

In which cloud computing service model does a provider's applications run on a cloud infrastructure and the consumer does not manage or control the underlying infrastructure? (Choose one.) a) platform as a service (PaaS) b) infrastructure as a service (IaaS) c) software as a service (SaaS) d) public cloud - [c] software as a service (SaaS) True or False. Business intelligence (BI) software consists of tools and techniques used to surface large amounts of raw unstructured data to perform ...

What does the Palo Alto Networks Large Scale VPN feature use to authenticate network devices? - certificates What are three typical capabilities of mobile device management software? (Choose three.) - data loss prevention (DLP) policy enforcement malware prevention Which type of wireless attack intercepts the victim's web traffic, redirects the victim's browser to a web server that it controls, and sends whatever content the attacker desires? - SSLstrip What is a capability of the Pal...

Describe a migraine headache - Unilateral, throbbing, pulsatile, lasts 4-72 hours, includes nausea and vomiting, light sensitivity, may have auras, more common in women, and genetically linked. There are migraine variants that include focal neurologic findings Describe a tension headache - Most common headache; treated effectively with NSAIDs Describe a cluster headache - "Ice pick headache", unilateral, severe pain behind one eye, nasal congestion with rhinorrhea, occur in clusters over ...

Anti-Ulcer drugs help by: - -altering gastric pH by decreasing acid secretion -protecting the stomach wall lining by increasing mucosal protection -eradicating harmful bacteria Ex: H. Pylori What are the main pharmacologic categories of drugs we used to manage gastric acid secretion and the effects: - -antacids -H2 receptor antagonists -proton pump inhibitors (PPIs) -prostoglandin analogs -mucosal protectant sulcrafate (Carafate) What is the first OTC medication tried by patients wi...

Which antibiotic is the drug of choice for MRSA - Beta-lactam antibiotic What is the first step in treating a MRSA Abscess? - I&D with culture followed by CDC gold standard resource for plan of care and abx selection if necessary What is the risk of using tetracycline and calcium/dairy products? - Chelate formation from the calsium What abx is associated with serious adverse effects of hyperkalemia? - Trimethoprim-sulfamethazole Trimethoprim-sulfamethazole plus this med increases risk of h...

What is prescriptive authority? - Legal right to prescribe drugs Is the Physicians Desk Reference a reliable source to use when prescribing drugs? - No--it is not evidence-based and it is not updated What is the sunshine act? - -part of the affordable care act -limits providers on accepting gifts from pharmaceutical companies -reduces bias What is pharmacology? - -study of the drugs and their actions and effects on living things -legal drugs, illegal drugs, prescription drugs, OTC dru...

First line for tx of constipation in pregnancy? - bulk forming laxatives (citrucel) and glycerin suppositories. which constipation tx is contraindicated in pregnancy? - Castor Oil is category X; rectal enemas are contraindicated Contraindications of Calciu carbonate antacids? - contraindicated in presence of hypercalcemia and renal calculi adverse drug reactions for long-term use of PPIs? - iron, b12, calcium deficiency - leads to osteoporosis, increased hip fractures. Also increased risk...

What class of medication can cause tooth discoloration, deposits on bones, and bone growth restriction? - Tetracycline antibiotics What are the risks to a postpartum mother and newborn if the mother is an ultra-rapid metabolizer taking codeine? - opioid toxicity *in ultrarapid metabolizers, there may be an increase in morphine from codeine, resulting in opioid toxicity. Combined oral contraceptives increase blood levels of _____________________, _____________________, _______________, and...

IgE mediated allergic reaction that happens after the 2nd exposure to the antigen? - Type I Immediate hypersensitivity Delayed Allergic reaction involving T cell in the skin? - Type IV Reaction Primary treatment for a Type 1 Allergic response? - Epinephrine Adjunctive treatment for a Type 1 Allergic response - ‣ H1 Blockers ‣ Corticosteroids help prevent bi phasic reactions ‣ Bronchodilators provide some reliefOne of the most Severe forms of a Type IV allergic reactions. - ‣ Stev...