NEW QUESTION 47
Information Supplements provided by the PCI SSC “supersede” or replace PCI DSS requirements

NEW QUESTION 48
PCI compliance do not apply on Virtualized environments

NEW QUESTION 49
When masking the PAN what is the maximum number of digits allowed to be displayed

NEW QUESTION 50
The PCI DSS Requirement most closely associated with “Logging” is ____________

NEW QUESTION 51
Encrypt transmission of cardholder data across open, public networks is the ______

NEW QUESTION 52
Quarterly internal vulnerability scans should be executed and rescans as needed until what point?

NEW QUESTION 53
Maintain a policy that addresses information security for all personnel is the ________

NEW QUESTION 54
Merchants involved with only card-not-present transactions that are completely outsourced to a PCI DSS complaint service provider may be eligible to use?

NEW QUESTION 55
Imprint-Only Merchants with no electronic storage of cardholder data may be eligible to use which SAQ?

NEW QUESTION 56
Merchants using only web-based virtual payment terminals, no electronic cardholder data storage, may be eligible to use what SAQ?

NEW QUESTION 57
Internal and external vulnerability scans should run at minimum on every __________ to meet requirement 11.2

NEW QUESTION 58
In the event of a violation of the PCIP Qualification Requirements, disciplinary actions for PCIPs could include:

NEW QUESTION 59
Which statement is true regarding sensitive authentication data?

NEW QUESTION 60
PCI DSS Requirement 3.4 states that PAN must be rendered unreadable when stored. Which of the following may be used to meet this requirement?

NEW QUESTION 61
An audit trail history should be available immediately for analysis within a minimum of

NEW QUESTION 62
Develop and maintain secure systems and applications is the _________

NEW QUESTION 63
If an e-commerce service provider was deemed eligible to complete an SAQ, which SAQ would they use?

NEW QUESTION 64
The Information Supplements: (Select ALL that apply)

NEW QUESTION 65
Please select all possible disciplinary actions that may be applicable in case of violation of PCI Code of
Professional Responsibility