<< Prev Question Next Question >>

Question 25/28

Requirement 3.5 requires document and implement procedures to protect keys used to secure stored cardholder data against disclose and misuse. This requirement applies to keys used to encrypt stored cardholder data, and also applies to key-encrypting keys used to protect data-encrypting keys. Such key-encrypting keys must be

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (28q)
Question 1: PCIPs are required to adhere to the Code of Professional Res...
Question 2: All users and administrators access to, queries and actions ...
Question 3: An audit trail history should be available immediately for a...
Question 4: An user should be required to re-authenticate to activate th...
Question 5: Merchants using P2PE solutions are still required to validat...
Question 6: The presumption of P2PE is that:...
Question 7: Please select all possible disciplinary actions that may be ...
Question 8: Regularly test security systems and processes is the _______...
Question 9: Merchants involved with only card-not-present transactions t...
Question 10: Use of a Qualified Integrator/Reeller (QIR):...
Question 11: If virtualization technologies are used in a cardholder data...
Question 12: As defined by PCI DSS Requirement 7, access to cardholder da...
Question 13: Internal and external penetration tests should be performed_...
Question 14: Requirement 8.2.3 states that passwords/phrases must contain...
Question 15: Restrict access to cardholder data by business need-to-know...
Question 16: PCI DSS Requirement 1 covers:
Question 17: The use of Tokenization can eliminate the need for PCI Compl...
Question 18: PCI DSS Requirement 5 states that anti-virus software must b...
Question 19: When masking the PAN what is the maximum number of digits al...
Question 20: According to requirement 8.1.6 an user ID should be locked o...
Question 21: Requirement 2.2.2 and 2.2.3 cover the use of secure services...
Question 22: SELECT ALL THAT MATCHES Examples of two-factor technologies ...
Question 23: To whom is Self-Assessment Question naire (SAQ) A intended f...
Question 24: PCI DSS Requirement Appendix A is intended for:...
Question 25: Requirement 3.5 requires document and implement procedures t...
Question 26: According to Requirement 10.4 the use of Time synchronizatio...
Question 27: Information Security Policies must be reviewed/updated _____...
Question 28: The P2PE Standard covers: