[Jan-2024] Verified PCIP3.0 dumps Q&As - PCIP3.0 dumps with Correct Answers [Q47-Q65]

NEW QUESTION 47
Information Supplements provided by the PCI SSC “supersede” or replace PCI DSS requirements

False

True

NEW QUESTION 48
PCI compliance do not apply on Virtualized environments

True

False

NEW QUESTION 49
When masking the PAN what is the maximum number of digits allowed to be displayed

The first four and the last four

The first six and the last four

The display of PAN digits are prohibited

The first four and the last six

NEW QUESTION 50
The PCI DSS Requirement most closely associated with “Logging” is ____________

Requirement 8

Requirement 11

Requirement 10

Requirement 2

NEW QUESTION 51
Encrypt transmission of cardholder data across open, public networks is the ______

Requirement 4

Requirement 5

Requirement 2

Requirement 1

NEW QUESTION 52
Quarterly internal vulnerability scans should be executed and rescans as needed until what point?

All identified vulnerabilities are resolved

Until you get a PCI Scan passing score

High-risk vulnerabilities (as defined in Requirement 6.1) are resolved

High and medium risks vulnerabilities are resolved

NEW QUESTION 53
Maintain a policy that addresses information security for all personnel is the ________

Requirement 11

Requirement 12

Requirement 10

Requirement 9

NEW QUESTION 54
Merchants involved with only card-not-present transactions that are completely outsourced to a PCI DSS complaint service provider may be eligible to use?

SAQ C/VT

SAQ B

SAQ D

SAQ A

NEW QUESTION 55
Imprint-Only Merchants with no electronic storage of cardholder data may be eligible to use which SAQ?

SAQ C/VT

SAQ D

SAQ B

SAQ A

NEW QUESTION 56
Merchants using only web-based virtual payment terminals, no electronic cardholder data storage, may be eligible to use what SAQ?

SAQ C

SAQ B

SAQ A

SAQ C-VT

SAQ D

NEW QUESTION 57
Internal and external vulnerability scans should run at minimum on every __________ to meet requirement 11.2

30 days

90 days

60 days

180 days

NEW QUESTION 58
In the event of a violation of the PCIP Qualification Requirements, disciplinary actions for PCIPs could include:

Verbal warning, one-off fine, revocation

Written warning, remediation, monthly fines

Verbal warning, suspension, monthly fines

Written warning, suspension, revocation

NEW QUESTION 59
Which statement is true regarding sensitive authentication data?

Sensitive data is required for recurring transactions

Sensitive authentication data includes PAN and service code

Sensitive authentication exists in the magnetic strip or chip, and is also printed on the payment card

Encrypt sensitive authentication data removes it from PC DSS scope

NEW QUESTION 60
PCI DSS Requirement 3.4 states that PAN must be rendered unreadable when stored. Which of the following may be used to meet this requirement?

Hashing the entire PAN using strong cryptography

masking the entire PAN using industry standards

Encryption of the first six and last four numbers of the PAN

Hiding the column containing PAN data in the database

NEW QUESTION 61
An audit trail history should be available immediately for analysis within a minimum of

30 days

3 months

1 year

6 months

NEW QUESTION 62
Develop and maintain secure systems and applications is the _________

Requirement 7

Requirement 5

Requirement 6

Requirement 8

NEW QUESTION 63
If an e-commerce service provider was deemed eligible to complete an SAQ, which SAQ would they use?

SAQ B

SAQ A

SAQ D

SAQ C

NEW QUESTION 64
The Information Supplements: (Select ALL that apply)

Provide additional guidance on specific technologies

Include recommendations and best practices

May be used as compensating control replacing one of the requirements

Do not replace or supersede any PCI standard

NEW QUESTION 65
Please select all possible disciplinary actions that may be applicable in case of violation of PCI Code of
Professional Responsibility

Revocation

Suspension

Warning

Fee