PCI QSA_New_V4 Qualified Security Assessor V4 Exam Exam Practice Test Questions

• Question 1

  What is the intent of classifying media that contains cardholder data?

  • Ensuring that media is properly protected according to the sensitivity of the data it contains.
  • Ensuring that media containing cardholder data Is moved from secured areas an a quarterly basis.
  • Ensuring that media is clearly and visibly labeled as "Confidential" so all personnel know that the media contains cardholder data.
  • Ensuring that all media is consistently destroyed on the same schedule, regardless of the contents.

  Show Answer Answer: A Next

• Question 2

  What do PCI DSS requirements for protecting cryptographic keys include?

  • Public keys must be encrypted with a key-encrypting key.
  • Data-encrypting keys must be stronger than the key-encrypting key that protects it.
  • Private or secret keys must be encrypted, stored within an SCD, or stored as key components.
  • Key-encrypting keys and data-encrypting keys must be assigned to the same key custodian.

  Show Answer Answer: C Next

• Question 3

  If segmentation is being used to reduce the scope of a PCI DSS assessment, the assessor will?

  • Verify the segmentation controls allow only necessary traffic Into the cardholder data environment.
  • Verify the payment card brands have approved the segmentation.
  • Verify that approved devices and applications are used for the segmentation controls.
  • Verify the controls used for segmentation are configured properly and functioning as intended

  Show Answer Answer: D Next

• Question 4

  https://www.validexamdumps.comWhich statement is true regarding the presence of both hashed and truncated versions of the same PAN in an environment?

  • Controls are needed to prevent the original PAN being exposed by the hashed and truncated versions.
  • The hashed version of the PAN must also be truncated per PCI DSS requirements for strong cryptography.
  • The hashed and truncated versions must be correlated so the source PAN can be identified.
  • Hashed and truncated versions of a PAN must not exist in same environment.

  Show Answer Answer: A Next

• Question 5

  Which of the following statements Is true whenever a cryptographic key Is retired and replaced witha new key?

  • The retired key must not be used for encryption operations.
  • Cryptographic key components from the retired key must be retained for 3 months before disposal.
  • Anew key custodian must be assigned.
  • All data encrypted under the retired key must be securely destroyed.

  Show Answer Answer: A Next