Assessor_New_V4 無料問題集「PCI SSC Assessor_New_V4」

（A）DES256

（B）ROT 13

（C）AES 128

（D）RSA512

（A）It is out of scope for PCI DSS

（B）It is not applicable for PCI DSS Requirement 3.2

（C）It is sensitive authentication data

（D）It is allowed to be stored by merchants after authorization if encrypted

（A）Devices are physically destroyed if there is suspicion of compromise

（B）Device identifiers and security labels are periodically replaced

（C）Devices are periodically inspected to detect unauthorized card stammers.

（D）The serial number of each device is periodically verified with the device manufacturer

（A）Occurring at some point in each quarter of a year

（B）On the 15th of each third month

（C）At least once every 95 97 days.

（D）On the 1st of each fourth month

（A）Derive testing procedures and document them in Appendix E of the ROC.

（B）Document and maintain evidence about each customized control as defined in Appendix E of PCI DSS

（C）Perform the targeted risk analysis as per PCI DSS requirement 12.3.2

（D）Monitor the control.

（A）To allow higher-security functions to protect lower-security functions installed on the same server

（B）To reduce the security level of functions with higher-security needs to meet the needs of lower-security functions

（C）To allow functions with different security levels to be implemented on the same server

（D）To prevent server functions with a lower security level from introducing security weaknesses to higher
-security functions on the same server

（A）Encrypted with strong cryptography

（B）Distributed to and understood by all affected parties

（C）Stored securely so that only management has access

（D）Reviewed and updated at least quarterly