Assessor_New_V4 無料問題集「PCI SSC Assessor_New_V4」

（A）Pre-production environments that are located within the CDE

（B）Pre-production (test) environments only if located outside the CDE.

（C）Production (live) environments only

（D）Testing with live PANs must only be performed in the QSA Company environment

（A）There are different AOC templates for service providers and merchants

（B）The AOC must be signed by both the merchant/service provider and by PCI SSC

（C）The same AOC template is used for ROCs and SAQs

（D）The AOC must be signed by either the merchant service provider or the QSA'ISA

（A）Details of the entity s project plan for implementing the requirement

（B）Details of how the assessor observed the entity s systems were compliant with the requirement

（C）Details of how the assessor observed the entity s systems were not compliant with the requirement

（D）Details of the entity s reason for not implementing the requirement

（A）The hashed and truncated versions must be correlated so the source PAN can be identified

（B）Hashed and truncated versions of a PAN must not exist in same environment

（C）The hashed version of the PAN must also be truncated per PCI OSS requirements for strong cryptography.

（D）Controls are needed to prevent the original PAN being exposed by the hashed and truncated versions

（A）Chargeback

（B）Clearing

（C）Settlement

（D）Authorization

（A）Derive testing procedures and document them in Appendix E of the ROC.

（B）Document and maintain evidence about each customized control as defined in Appendix E of PCI DSS

（C）Perform the targeted risk analysis as per PCI DSS requirement 12.3.2

（D）Monitor the control.