QSA_New_V4 無料問題集「PCI SSC Qualified Security Assessor V4」

（A）Access to the disk encryption must be managed independently of the operating system access control mechanisms.

（B）The disk encryption system must use the same user account authenticator as the operating system.

（C）The decryption keys must be stored within the local user account database.

（D）The decryption keys must be associated with the local user account database.

（A）They must be performed after a significant change.

（B）They must be performed at least annually.

（C）They must be performed by an Approved Scanning Vendor (ASV).

（D）They must be performed by QSA personnel.

（A）The ROC Reporting Template provided by PCI SSC is only required for service provider assessments.

（B）The ROC Reporting Template and instructions provided by PCI SSC should be used for all ROCs.

（C）The assessor may use either their own template or the ROC Reporting Template provided by PCI SSC.

（D）The assessor must create their own ROC template for each assessment report.

（A）Configured to expire in 30 days.

（B）Reset to the default password before installing a system on the network.

（C）Changed before installing a system on the network.

（D）Changed within 30 days after installing a system on the network.

（A）Periodically as defined by the entity

（B）At least monthly

（C）Only after a valid change is installed

（D）At least weekly

（A）Security policy and procedure documents

（B）Application vendor manuals

（C）System configuration and parameter files

（D）Files that regularly change

（A）Procedures for securely deleting incident response records immediately upon resolution of the incident.

（B）Procedures for notifying PCI SSC of the security incident.

（C）Procedures for launching a reverse-attack on the individual(s) responsible for the security incident.

（D）Procedures for responding to the detection of unauthorized wireless access points.

（A）Disable any firewall functions that are not needed in production.

（B）Remove the default "Firewall Administrator" account and create a shared account for firewall administrators to use.

（C）Synchronize the firewall rules with the other firewalls in the environment.

（D）Configure the firewall to permit all traffic until additional rules are defined.